$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24ffa204-27cd-3915-a100-1b4e6e8149e2.roa File: 24ffa204-27cd-3915-a100-1b4e6e8149e2.roa (raw, json) Hash identifier: kH5rxxhvxF+SXGPMBiqpFv3PhuqTkb3t0tGd1Hl1A4Y= Subject key identifier: C0:05:2A:0F:09:FF:2D:BA:9E:84:62:7D:B6:43:2F:0A:AF:32:33:6B Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D7183D47E7A9AB08D2412 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24ffa204-27cd-3915-a100-1b4e6e8149e2.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 192.61.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:71:83:d4:7e:7a:9a:b0:8d:24:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=3fb9af2a-0a4a-45ea-b1d9-1ae31a8f5eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fb:a2:a1:62:b3:1a:21:40:a0:8f:98:d8:8a: 51:7a:55:11:d7:fb:64:2b:ee:ed:b4:a7:36:0d:c0: 48:05:ce:8f:40:8f:8e:57:2d:64:ba:e4:8f:08:b3: c0:b7:55:a8:f0:f6:6f:4d:25:e4:4a:ae:f3:4f:f0: 52:1c:67:d4:f2:96:72:ed:79:c6:76:3c:43:ae:ee: 32:69:27:cb:3a:39:79:f3:a5:53:3e:04:53:7e:6a: 05:4d:f7:92:74:86:82:30:14:fb:8d:0a:78:d4:1c: d3:4d:74:37:26:1a:2f:d0:6a:4f:e3:13:e3:be:36: 4d:df:94:9b:68:dc:a1:b1:f1:a7:1d:1b:2f:90:fa: 1b:6c:ee:08:0c:3c:fc:ba:96:51:29:c1:49:be:a6: 8d:5c:4d:b4:32:b4:c5:b2:23:4f:5f:3b:f5:06:01: 3e:51:f5:eb:91:44:81:4c:b9:e7:fd:49:c1:9d:f5: 64:6e:65:e3:dc:19:0d:81:08:29:93:2a:33:2f:67: cf:d6:64:37:a1:b1:7a:71:34:21:6e:15:a7:dc:8b: 55:86:3b:68:39:77:a4:d2:61:af:36:a8:b2:e9:8f: 6d:bb:c1:1d:ca:8d:d8:0a:9b:00:24:8b:5d:7b:1f: 83:7a:87:b7:f4:c5:cc:4b:93:5c:9d:be:68:77:1a: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:05:2A:0F:09:FF:2D:BA:9E:84:62:7D:B6:43:2F:0A:AF:32:33:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/24ffa204-27cd-3915-a100-1b4e6e8149e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 192.61.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0f:a8:e2:b3:f5:68:d8:e7:55:20:14:f3:aa:cf:71:75:bf: 87:5c:ee:c9:40:47:00:a2:0c:60:f1:2b:dd:d0:b3:5b:0f:26: 87:37:33:09:41:31:fd:4d:54:08:8a:4e:f4:53:9a:1a:18:e4: a1:ed:b0:f0:75:d4:32:60:6c:4c:e8:69:28:52:42:9c:99:f2: 87:c1:4f:ef:71:38:0e:e5:b5:13:cd:73:b6:c2:a6:5d:58:70: 14:77:23:a5:55:70:9b:8c:91:9c:aa:93:93:8e:f4:66:b1:d8: 90:2e:4d:dd:b9:c8:26:3a:3d:61:e3:13:2a:a0:5b:62:51:8f: 32:0c:7b:49:e4:10:bd:59:d7:1b:93:13:02:54:20:2e:60:84: 42:fb:22:70:3f:87:23:fc:74:54:87:22:91:b9:00:1a:f5:68: 63:d3:4c:20:61:31:87:59:0a:98:97:9e:51:50:26:dd:15:85: 88:21:b2:07:1d:e6:e0:22:87:8a:b8:73:0a:cd:5b:d9:3a:0d: 39:0f:14:b9:8b:0a:26:c9:ca:c8:74:b5:d5:53:11:8b:29:5c: b5:22:30:03:15:5b:19:83:a9:c6:17:ae:52:00:b6:e8:d8:cf: 31:7e:a8:8c:b8:6d:02:f0:d7:b3:17:52:dd:9a:6a:c7:b1:f2: 24:91:ef:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHXGD1H56mrCNJBIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk M2ZiOWFmMmEtMGE0YS00NWVhLWIxZDktMWFlMzFhOGY1ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfuioWKzGiFAoI+Y2IpRelUR1/tkK+7ttKc2 DcBIBc6PQI+OVy1kuuSPCLPAt1Wo8PZvTSXkSq7zT/BSHGfU8pZy7XnGdjxDru4y aSfLOjl586VTPgRTfmoFTfeSdIaCMBT7jQp41BzTTXQ3Jhov0GpP4xPjvjZN35Sb aNyhsfGnHRsvkPobbO4IDDz8upZRKcFJvqaNXE20MrTFsiNPXzv1BgE+UfXrkUSB TLnn/UnBnfVkbmXj3BkNgQgpkyozL2fP1mQ3obF6cTQhbhWn3ItVhjtoOXek0mGv Nqiy6Y9tu8Edyo3YCpsAJItdex+Deoe39MXMS5Ncnb5odxqkFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAFKg8J/y26noRifbZDLwqvMjNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjRmZmEyMDQtMjdjZC0z OTE1LWExMDAtMWI0ZTZlODE0OWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwD38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8PqOKz9WjY51UgFPOqz3F1v4dc7slARwCiDGDxK93Qs1sPJoc3MwlB Mf1NVAiKTvRTmhoY5KHtsPB11DJgbEzoaShSQpyZ8ofBT+9xOA7ltRPNc7bCpl1Y cBR3I6VVcJuMkZyqk5OO9Gax2JAuTd25yCY6PWHjEyqgW2JRjzIMe0nkEL1Z1xuT EwJUIC5ghEL7InA/hyP8dFSHIpG5ABr1aGPTTCBhMYdZCpiXnlFQJt0VhYghsgcd 5uAih4q4cwrNW9k6DTkPFLmLCibJysh0tdVTEYspXLUiMAMVWxmDqcYXrlIAtujY zzF+qIy4bQLw17MXUt2aasex8iSR77E= -----END CERTIFICATE-----Generated at Fri Oct 17 23:06:29 2025 by rpki-client