$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/29905d1b-b2ec-374e-8a34-ae357a2d648d.roa File: 29905d1b-b2ec-374e-8a34-ae357a2d648d.roa (raw, json) Hash identifier: 2hQR243AWYbQmLmG6KqfkLcOD1ENtMH0OhyIa1rvEuk= Subject key identifier: 47:DA:A1:57:82:1C:65:B0:64:A2:E5:09:3E:FE:E5:9E:E0:30:6C:F0 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584B8BE20E001E1E195A49EAC580 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/29905d1b-b2ec-374e-8a34-ae357a2d648d.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 42 IP address blocks: 70.40.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:0e:00:1e:1e:19:5a:49:ea:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=960b1038-ba92-42dc-9e92-e69b5b52d0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:3e:79:29:04:25:89:2a:c6:1e:56:9c:37: ee:8a:88:db:08:2b:d1:b3:a7:fd:dc:11:a3:eb:99: 3f:bd:c7:55:7d:93:c5:6c:e4:2a:45:49:44:6a:83: 7e:c2:bf:75:51:37:74:ed:e8:7d:e0:ab:50:b8:35: 31:99:3d:b3:83:28:6c:ea:ed:6a:61:46:0c:6c:a4: c4:b5:4c:39:84:00:63:b8:3e:78:38:c8:a1:c7:d7: 05:53:6f:83:e6:49:4b:b1:54:20:80:02:d8:d5:9d: fa:d5:6f:62:c5:cd:73:56:f7:e3:80:4a:dd:2e:eb: 64:79:b4:7b:18:9e:05:52:f4:3d:b1:ca:17:c4:3d: 8b:db:72:f1:ae:46:73:0d:c5:c7:a1:e9:ba:90:56: 2c:3d:f4:71:67:b0:94:d6:f4:a3:c6:42:a8:74:22: 62:81:74:9d:b1:fe:24:fc:51:1c:95:55:d7:51:5f: 56:b7:56:13:55:90:8d:a5:e3:a0:c1:7c:57:a2:7d: d1:8e:fb:fb:b2:85:6a:66:d8:0d:46:bf:b6:16:92: c2:0a:89:f5:6e:8c:90:e1:8d:b2:76:ff:81:d0:f7: 31:ed:3c:d1:dd:45:95:ad:39:84:be:99:17:cf:a1: a3:40:48:6b:58:0b:56:5a:c1:5f:1e:fe:b4:91:35: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DA:A1:57:82:1C:65:B0:64:A2:E5:09:3E:FE:E5:9E:E0:30:6C:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/29905d1b-b2ec-374e-8a34-ae357a2d648d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 70.40.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e5:d2:5e:4b:5c:a8:77:00:66:c1:10:22:9e:ac:25:f4:ca: 88:30:1b:72:a4:d0:2d:02:27:dc:b9:b4:9e:bf:9c:63:de:38: c4:c6:b3:69:52:e1:bc:01:e4:e2:80:49:27:5c:e4:9a:dd:47: 20:60:72:8f:71:d7:51:0e:94:91:f5:58:62:6b:72:c9:c5:33: e0:2f:c7:14:a2:83:76:27:85:c4:f5:a5:79:42:18:88:67:46: 08:bf:ca:c6:dd:06:ba:d8:c9:f0:2f:47:0f:f1:15:1d:2a:3c: 6a:8c:9b:46:1b:14:cf:d1:98:fb:b7:86:c5:70:2a:d8:97:9c: b4:48:48:75:87:35:44:7b:a8:c3:54:63:e3:a4:ea:94:d4:31: 0c:9b:f0:cc:e4:84:3c:0f:eb:c8:6a:da:87:03:0e:df:e4:86: 22:d9:f4:e5:2b:33:bb:c4:d2:8c:51:95:7c:1e:4e:d5:42:ef: 20:3d:99:f1:a6:f4:3e:42:49:3f:d2:7e:f0:db:b3:d7:da:ed: 46:71:b5:a1:ef:5b:c5:aa:e3:80:e4:c0:c1:70:5f:f4:e5:6f: 2e:35:83:87:2a:51:16:db:36:00:9a:9c:74:e0:ee:ca:9e:37: aa:a6:1b:13:97:de:46:c6:d9:5b:c4:6c:4e:60:7b:f6:4a:e1: 8c:28:f8:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4g4AHh4ZWknqxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk OTYwYjEwMzgtYmE5Mi00MmRjLTllOTItZTY5YjViNTJkMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qA+eSkEJYkqxh5WnDfuiojbCCvRs6f93BGj 65k/vcdVfZPFbOQqRUlEaoN+wr91UTd07eh94KtQuDUxmT2zgyhs6u1qYUYMbKTE tUw5hABjuD54OMihx9cFU2+D5klLsVQggALY1Z361W9ixc1zVvfjgErdLutkebR7 GJ4FUvQ9scoXxD2L23LxrkZzDcXHoem6kFYsPfRxZ7CU1vSjxkKodCJigXSdsf4k /FEclVXXUV9Wt1YTVZCNpeOgwXxXon3Rjvv7soVqZtgNRr+2FpLCCon1boyQ4Y2y dv+B0Pcx7TzR3UWVrTmEvpkXz6GjQEhrWAtWWsFfHv60kTVkJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfaoVeCHGWwZKLlCT7+5Z7gMGzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMjk5MDVkMWItYjJlYy0z NzRlLThhMzQtYWUzNTdhMmQ2NDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRigAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjl0l5LXKh3AGbBECKerCX0yogwG3Kk0C0CJ9y5tJ6/nGPeOMTGs2lS 4bwB5OKASSdc5JrdRyBgco9x11EOlJH1WGJrcsnFM+AvxxSig3YnhcT1pXlCGIhn Rgi/ysbdBrrYyfAvRw/xFR0qPGqMm0YbFM/RmPu3hsVwKtiXnLRISHWHNUR7qMNU Y+Ok6pTUMQyb8MzkhDwP68hq2ocDDt/khiLZ9OUrM7vE0oxRlXweTtVC7yA9mfGm 9D5CST/SfvDbs9fa7UZxtaHvW8Wq44DkwMFwX/Tlby41g4cqURbbNgCanHTg7sqe N6qmGxOX3kbG2VvEbE5ge/ZK4Ywo+EE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:54 2025 by rpki-client