$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dbf43f72-56a8-37a9-8e05-37d11a16b537.roa File: dbf43f72-56a8-37a9-8e05-37d11a16b537.roa (raw, json) Hash identifier: 3ZECbV0bPHYlHHa/gabcRPC+0+jdXUXd/h4weomS/t4= Subject key identifier: 02:93:00:85:20:26:E1:0A:E4:C3:5E:03:F5:C3:9D:D2:71:BC:C3:32 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584A82AB4AA68F14A6734BAD5F00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dbf43f72-56a8-37a9-8e05-37d11a16b537.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 20001 IP address blocks: 168.148.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4a:a6:8f:14:a6:73:4b:ad:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=c3f60770-6a62-4895-81ef-e034117811b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:98:cc:c2:7f:7e:6b:9a:36:36:07:a8:48:bb: ed:fa:12:21:83:ca:e6:20:01:30:83:95:05:db:55: ca:66:b8:84:b7:33:40:ea:dd:0e:53:04:33:a6:8e: 14:64:cb:44:72:01:c8:1c:83:05:95:64:8e:e8:6e: 73:9d:78:bc:3e:16:70:56:59:1a:5a:a5:c4:aa:77: da:f1:dc:9e:09:bd:6b:0d:72:8d:4c:cb:fd:5c:0a: be:19:6e:da:d6:b7:7b:80:5f:d6:ab:28:52:75:e2: 97:77:20:97:7f:6f:bf:f0:3e:d8:25:26:ea:00:09: 6c:bb:2c:c1:99:eb:62:96:ee:1a:6d:90:fe:ae:97: d1:4b:36:3a:19:8b:97:de:d6:6b:ac:0b:58:2a:dd: 03:41:3b:e1:ce:5b:bd:b7:35:73:e8:f8:c2:08:f3: 4e:50:11:2d:a5:1f:8e:3c:0a:fd:32:c2:f0:89:fb: 2f:e9:d0:e9:65:86:5f:04:a5:ab:35:2e:9e:dc:02: 88:52:9e:55:af:bf:4f:f7:47:94:5d:fb:d7:46:8c: d0:82:a7:12:05:a9:7e:a8:f7:02:f7:af:7e:db:f5: 0d:80:56:6b:84:39:01:8a:46:3a:6a:2e:57:34:a0: 3a:25:9e:30:6a:a0:12:36:a6:a1:18:c0:8c:18:28: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:93:00:85:20:26:E1:0A:E4:C3:5E:03:F5:C3:9D:D2:71:BC:C3:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/dbf43f72-56a8-37a9-8e05-37d11a16b537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 168.148.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7f:e8:4f:50:8e:79:a4:13:63:f6:1d:40:76:42:3f:54:f3: af:17:98:99:71:40:e8:ec:89:ef:39:86:81:48:16:2a:cc:4b: e1:8d:9c:4a:f3:18:f5:fd:76:c8:8e:58:44:96:15:91:17:d5: 8e:21:3e:47:23:d3:14:8e:a8:99:66:22:25:f9:67:f6:df:c2: 1a:d0:18:ec:e1:dc:01:e8:15:ab:6d:9d:24:99:89:26:96:96: 84:90:d9:c3:f3:6f:31:ca:84:45:29:fa:87:59:26:6f:cd:e8: ae:ee:8a:8c:87:9f:fa:3d:2b:0a:00:39:7a:4a:18:51:6e:7a: 1e:ca:5d:bc:46:7e:47:ef:f7:a4:69:b2:b6:a1:29:67:3f:eb: 3e:13:77:35:77:cc:c6:41:be:fa:cd:5e:a6:67:8e:90:2e:6a: 22:2d:f5:4d:2c:6d:db:ce:6d:c2:b7:cb:ca:a9:3a:5a:36:dc: 4a:dd:b6:31:94:0a:13:8a:ac:a6:6c:e8:dc:c9:e8:92:d2:fc: 99:6b:c9:22:dd:8b:ee:09:79:2d:da:b7:db:20:12:69:96:e7: fa:ad:53:0f:38:98:a3:8e:90:1b:9d:c8:9b:ca:be:62:4b:69: 8e:bf:ec:75:7a:de:db:35:80:81:78:2d:dc:bc:1f:1f:10:d7: 66:af:c1:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0qmjxSmc0utXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk YzNmNjA3NzAtNmE2Mi00ODk1LTgxZWYtZTAzNDExNzgxMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5jMwn9+a5o2NgeoSLvt+hIhg8rmIAEwg5UF 21XKZriEtzNA6t0OUwQzpo4UZMtEcgHIHIMFlWSO6G5znXi8PhZwVlkaWqXEqnfa 8dyeCb1rDXKNTMv9XAq+GW7a1rd7gF/WqyhSdeKXdyCXf2+/8D7YJSbqAAlsuyzB metilu4abZD+rpfRSzY6GYuX3tZrrAtYKt0DQTvhzlu9tzVz6PjCCPNOUBEtpR+O PAr9MsLwifsv6dDpZYZfBKWrNS6e3AKIUp5Vr79P90eUXfvXRozQgqcSBal+qPcC 969+2/UNgFZrhDkBikY6ai5XNKA6JZ4waqASNqahGMCMGChCFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKTAIUgJuEK5MNeA/XDndJxvMMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGJmNDNmNzItNTZhOC0z N2E5LThlMDUtMzdkMTFhMTZiNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqJRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx/6E9QjnmkE2P2HUB2Qj9U868XmJlxQOjsie85hoFIFirMS+GNnErz GPX9dsiOWESWFZEX1Y4hPkcj0xSOqJlmIiX5Z/bfwhrQGOzh3AHoFattnSSZiSaW loSQ2cPzbzHKhEUp+odZJm/N6K7uioyHn/o9KwoAOXpKGFFueh7KXbxGfkfv96Rp srahKWc/6z4TdzV3zMZBvvrNXqZnjpAuaiIt9U0sbdvObcK3y8qpOlo23ErdtjGU ChOKrKZs6NzJ6JLS/JlrySLdi+4JeS3at9sgEmmW5/qtUw84mKOOkBudyJvKvmJL aY6/7HV63ts1gIF4Ldy8Hx8Q12avwbI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:05:39 2025 by rpki-client