$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b9be93b-81bb-30e1-ad89-4cb63b462d46.roa File: 4b9be93b-81bb-30e1-ad89-4cb63b462d46.roa (raw, json) Hash identifier: f3X+rTl+r3hkjGEh4oEx5SQUZh1vfgmHrUeevI2vEpQ= Subject key identifier: AA:08:B4:AD:FE:89:91:94:DC:11:0D:61:97:08:7D:1E:14:D2:8D:38 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584A88409F51089DA07D53A9CF00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b9be93b-81bb-30e1-ad89-4cb63b462d46.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 20001 IP address blocks: 168.148.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9f:51:08:9d:a0:7d:53:a9:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=2ff6de82-2d16-47d2-a425-bea285ffa068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:f1:6e:a2:0a:90:e5:e3:5d:b5:7f:6e:76: ac:6e:34:13:29:44:57:e0:a5:d5:2c:7c:d5:f8:ac: ef:e7:63:79:b0:d6:99:2b:63:4d:ab:5e:3a:c6:a2: f8:65:26:a9:a9:23:54:90:98:03:44:76:71:c0:8c: 23:ab:83:7d:65:94:4a:fa:cc:fb:77:64:98:6c:4c: 89:c8:ab:d4:11:5d:c8:9e:e3:0f:8d:6c:ff:78:dc: d4:7b:d7:50:15:8d:8a:7c:9f:0b:ab:65:bb:ee:ed: a3:e7:ea:b3:82:6a:ea:10:c3:78:82:c1:27:d7:05: ab:7f:cc:0a:59:38:6a:af:f4:6b:5d:d6:fc:49:75: df:17:d1:b5:b6:6e:9b:b4:7f:30:60:3e:5c:7e:8b: 29:f6:26:00:68:55:7c:10:0d:b0:56:a6:cd:b6:e4: ce:21:1b:c1:b5:2b:37:33:62:ee:31:a6:46:01:2f: 37:87:83:ab:1d:95:5b:06:71:dd:99:8a:81:18:bb: e1:fe:51:70:96:ef:58:67:c3:6d:06:bd:15:84:47: dc:af:eb:36:42:c4:72:c2:51:d8:5f:b6:ee:6e:91: ad:4d:9e:b2:df:c9:37:d2:70:dd:8b:20:3a:a5:bc: da:38:41:37:8a:b6:e1:47:43:1f:6a:4c:ae:7d:cf: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:08:B4:AD:FE:89:91:94:DC:11:0D:61:97:08:7D:1E:14:D2:8D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b9be93b-81bb-30e1-ad89-4cb63b462d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 168.148.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b6:b0:c9:7a:43:ee:90:dc:ce:78:df:66:7e:b8:71:2e:c3: 36:61:03:45:0d:28:66:99:c0:a1:1c:87:3f:85:6f:23:8d:dd: 5a:9f:51:db:31:59:0e:47:80:e8:0d:fa:5b:7f:94:de:80:c6: 49:01:02:4e:a2:c4:8e:7c:ab:b3:ef:59:36:90:e9:bb:d8:03: 2a:89:eb:ee:96:c0:76:65:eb:9c:e0:d0:5c:fe:0e:f0:c6:e0: b9:4c:56:3a:2d:25:97:d7:50:60:1e:0a:5a:1f:60:e1:98:54: 28:68:29:c3:ec:ab:51:71:76:30:70:5a:7d:d0:45:85:a9:11: 94:ae:02:fa:db:d6:9c:e2:4c:e7:2f:7f:b3:bc:47:ea:dc:5e: 89:6e:8a:38:94:e9:98:6a:bf:09:c1:1b:b1:ae:bc:91:28:3b: 5e:10:92:fd:89:97:d9:69:2b:f0:ab:fb:84:70:ed:81:7c:2b: 25:9b:0e:f6:5b:f1:18:03:1b:2f:70:21:c8:fd:b6:14:17:b2: bf:5d:33:7a:fb:05:55:55:7a:27:de:44:39:70:2a:b0:6a:24: 25:69:f8:b7:22:89:26:e0:f8:b8:25:7b:83:84:7f:ea:08:bf: 50:4e:c5:48:de:2b:2c:f3:fd:ac:42:19:0b:87:3d:c0:c9:80: 91:32:29:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJ9RCJ2gfVOpzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk MmZmNmRlODItMmQxNi00N2QyLWE0MjUtYmVhMjg1ZmZhMDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1nxbqIKkOXjXbV/bnasbjQTKURX4KXVLHzV +Kzv52N5sNaZK2NNq146xqL4ZSapqSNUkJgDRHZxwIwjq4N9ZZRK+sz7d2SYbEyJ yKvUEV3InuMPjWz/eNzUe9dQFY2KfJ8Lq2W77u2j5+qzgmrqEMN4gsEn1wWrf8wK WThqr/RrXdb8SXXfF9G1tm6btH8wYD5cfosp9iYAaFV8EA2wVqbNtuTOIRvBtSs3 M2LuMaZGAS83h4OrHZVbBnHdmYqBGLvh/lFwlu9YZ8NtBr0VhEfcr+s2QsRywlHY X7bubpGtTZ6y38k30nDdiyA6pbzaOEE3irbhR0Mfakyufc/s9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoItK3+iZGU3BENYZcIfR4U0o04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGI5YmU5M2ItODFiYi0z MGUxLWFkODktNGNiNjNiNDYyZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi2sMl6Q+6Q3M5432Z+uHEuwzZhA0UNKGaZwKEchz+FbyON3VqfUdsx WQ5HgOgN+lt/lN6AxkkBAk6ixI58q7PvWTaQ6bvYAyqJ6+6WwHZl65zg0Fz+DvDG 4LlMVjotJZfXUGAeClofYOGYVChoKcPsq1FxdjBwWn3QRYWpEZSuAvrb1pziTOcv f7O8R+rcXoluijiU6ZhqvwnBG7GuvJEoO14Qkv2Jl9lpK/Cr+4Rw7YF8KyWbDvZb 8RgDGy9wIcj9thQXsr9dM3r7BVVVeifeRDlwKrBqJCVp+LciiSbg+Lgle4OEf+oI v1BOxUjeKyzz/axCGQuHPcDJgJEyKUE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:31 2025 by rpki-client