$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2720bf81-028e-3ae9-bcaf-b9ff5f468629.roa File: 2720bf81-028e-3ae9-bcaf-b9ff5f468629.roa (raw, json) Hash identifier: SqKo4IfPEc/c8EGq4rQdOJzwwGj4P2IhSv+IWNEYVcg= Subject key identifier: 1E:81:F9:4D:7B:4F:57:D1:09:2F:5F:34:42:63:12:D2:86:AC:A3:72 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D4C64D58D503CDBC3D600 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2720bf81-028e-3ae9-bcaf-b9ff5f468629.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 24.197.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:4c:64:d5:8d:50:3c:db:c3:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=89e9d771-74e2-468c-9dad-dfc1ff0139b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:4d:e1:9c:5f:b8:b1:1a:6d:aa:16:ad:05: c9:44:00:7d:df:f7:91:f9:9c:0e:bd:8c:6e:4d:80: 4e:75:0c:73:5d:05:5e:00:5b:3d:bc:54:5e:bf:8f: 8d:a4:a6:1c:af:46:69:f4:5c:4d:ef:ee:47:3b:2b: d9:30:a6:e2:51:bb:6d:12:ad:2d:5b:13:03:aa:dc: 71:42:c2:30:67:77:69:c9:df:d2:b3:c4:75:b5:fe: 10:84:cc:05:cb:78:1e:36:53:6d:87:cc:52:ba:24: bb:e6:82:b7:08:5a:45:bc:91:d2:a5:c8:3e:5d:2f: 1e:9b:bc:b5:78:27:5d:1d:04:da:49:63:82:82:ec: a3:01:0d:b5:05:22:1e:dc:6f:79:58:66:1a:0e:c1: 4c:65:54:4f:ea:73:77:76:da:f5:72:48:28:de:f2: 1d:66:37:7d:d1:12:e9:13:5e:f4:4e:28:91:a2:24: dc:0e:5d:80:29:49:39:a3:20:57:73:d8:a6:d0:59: fe:9b:a9:ed:1f:bf:c1:eb:69:e8:fb:56:96:b3:32: 60:d1:d5:d5:e4:b3:60:7f:1a:8e:13:fe:3c:d3:4c: d7:1f:c1:f0:3e:a9:28:44:15:74:92:0e:00:25:bb: 6d:fc:0b:d4:df:33:71:16:dd:63:7b:5e:76:ee:59: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:81:F9:4D:7B:4F:57:D1:09:2F:5F:34:42:63:12:D2:86:AC:A3:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2720bf81-028e-3ae9-bcaf-b9ff5f468629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.197.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:7e:55:89:56:0a:6f:78:26:3c:18:49:32:6c:96:b3:a7:a2: cc:af:86:08:55:7c:d4:66:5a:a5:06:62:ca:24:fa:a4:9e:a6: 00:e1:f2:91:10:3c:04:8c:7a:23:1f:4f:c0:f0:45:a3:a3:6d: 87:a0:44:ca:e2:6b:6e:ca:11:57:09:d4:82:fd:79:6b:b9:77: e1:58:8b:5b:e7:c9:35:24:7e:f9:7c:d2:07:fb:ac:8c:55:8a: 7e:d9:79:1e:f1:78:2e:79:46:29:c0:8e:21:c2:e9:94:82:0d: f3:d9:fe:da:e2:a2:f2:52:1f:28:bb:af:d3:a9:bb:8a:9c:3e: 55:d0:2f:02:cd:9c:9c:3a:d5:a7:1b:f6:d7:f6:94:4a:a5:ae: e0:79:c5:5d:21:0d:79:c4:86:e1:ef:6a:50:a7:65:c9:6f:77: 47:77:ad:42:a0:b3:8f:83:52:23:34:3c:c9:e5:b5:85:35:fc: 16:82:b6:2d:d5:64:ce:1a:eb:08:9b:c8:32:f0:c4:03:ee:78: ab:92:e2:6f:05:03:cd:04:77:34:d5:13:5e:8a:57:5b:2d:81: c3:7c:b4:78:96:4d:a7:16:f5:d6:b6:9a:c7:7a:50:44:e7:d2: 5d:ad:c3:7b:01:dc:b0:af:8e:13:e5:34:06:fe:45:87:da:51: d2:a2:0a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHUxk1Y1QPNvD1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ODllOWQ3NzEtNzRlMi00NjhjLTlkYWQtZGZjMWZmMDEzOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUxN4ZxfuLEabaoWrQXJRAB93/eR+ZwOvYxu TYBOdQxzXQVeAFs9vFRev4+NpKYcr0Zp9FxN7+5HOyvZMKbiUbttEq0tWxMDqtxx QsIwZ3dpyd/Ss8R1tf4QhMwFy3geNlNth8xSuiS75oK3CFpFvJHSpcg+XS8em7y1 eCddHQTaSWOCguyjAQ21BSIe3G95WGYaDsFMZVRP6nN3dtr1ckgo3vIdZjd90RLp E170TiiRoiTcDl2AKUk5oyBXc9im0Fn+m6ntH7/B62no+1aWszJg0dXV5LNgfxqO E/4800zXH8HwPqkoRBV0kg4AJbtt/AvU3zNxFt1je1527lkhGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6B+U17T1fRCS9fNEJjEtKGrKNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjcyMGJmODEtMDI4ZS0z YWU5LWJjYWYtYjlmZjVmNDY4NjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGMVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5+VYlWCm94JjwYSTJslrOnosyvhghVfNRmWqUGYsok+qSepgDh8pEQ PASMeiMfT8DwRaOjbYegRMria27KEVcJ1IL9eWu5d+FYi1vnyTUkfvl80gf7rIxV in7ZeR7xeC55RinAjiHC6ZSCDfPZ/triovJSHyi7r9Opu4qcPlXQLwLNnJw61acb 9tf2lEqlruB5xV0hDXnEhuHvalCnZclvd0d3rUKgs4+DUiM0PMnltYU1/BaCti3V ZM4a6wibyDLwxAPueKuS4m8FA80EdzTVE16KV1stgcN8tHiWTacW9da2msd6UETn 0l2tw3sB3LCvjhPlNAb+RYfaUdKiCi4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:10 2025 by rpki-client