$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29b8dbee-0411-3939-bd0a-32615084e870.roa File: 29b8dbee-0411-3939-bd0a-32615084e870.roa (raw, json) Hash identifier: NsZxiu7/iEf/+HUqr9l8bbBEE4hEI7GnwMmqdnaEje0= Subject key identifier: 3B:12:7A:F9:AC:24:03:54:F4:7D:39:22:31:E2:B7:FF:68:1B:5E:06 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D408DF1B32C4D8C94F200 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29b8dbee-0411-3939-bd0a-32615084e870.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 24.240.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:40:8d:f1:b3:2c:4d:8c:94:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=15e4cfc5-86de-4ccc-b697-8623f647a8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:6c:3b:cc:6b:09:ce:ff:32:3c:e5:ea:ec: 80:72:6f:56:7c:b0:f9:d7:a2:78:55:9e:2a:6c:fd: 97:38:8d:47:a0:5b:4c:19:38:95:ef:a3:40:ed:72: f3:94:c6:0d:17:b2:a7:0b:d2:27:5e:6b:24:b9:94: 9b:3e:86:0f:73:eb:57:72:d4:b4:65:3c:a1:b0:2f: 0d:e2:d2:24:38:af:9c:e1:b6:22:c7:24:ce:8c:1e: e9:74:d7:b0:7e:df:78:2f:37:2a:df:3b:0d:97:7f: 5a:10:ba:48:7f:b9:02:3b:85:1c:2a:38:70:af:8c: 98:5b:9e:31:ad:45:79:95:c4:43:93:2c:e6:d6:46: 15:7c:62:57:17:4a:a7:23:87:82:17:5f:c5:0b:4b: c6:c6:90:01:b5:d5:7a:9b:2c:32:aa:ca:ff:87:0d: a9:99:d8:ae:81:cf:5a:bf:1d:df:53:60:66:0e:e7: 1a:53:2c:83:d7:a4:b6:75:1f:17:55:71:16:17:cc: b7:4d:70:0b:29:31:1f:c0:cb:6e:72:ff:46:a6:8c: 73:f6:71:27:ab:6b:25:05:ee:59:19:98:a6:bc:94: ed:e9:d3:ac:f8:c4:b7:18:94:19:db:bf:f1:1e:6f: c3:02:d5:44:64:45:ff:49:70:df:55:95:42:11:c7: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:12:7A:F9:AC:24:03:54:F4:7D:39:22:31:E2:B7:FF:68:1B:5E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29b8dbee-0411-3939-bd0a-32615084e870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.240.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:ed:f3:73:56:fe:74:43:a7:ae:c5:eb:0a:3c:43:8a:86:f1: b3:91:d9:10:b1:9e:55:f8:bc:12:0c:ef:31:83:7d:be:c0:11: 9d:a1:9a:b3:7b:0b:3d:d8:d3:bc:00:fc:9f:d9:35:ab:bf:ce: 85:9b:9c:12:b1:f0:fc:5d:37:d4:6b:86:a1:f3:30:e8:45:b6: 46:80:59:d7:4a:6c:6f:3c:b8:bd:4d:a7:30:4d:ef:a5:89:18: 0a:49:b9:c1:5a:0e:f0:b6:01:f6:7c:01:ff:5e:1a:1d:73:08: 64:a1:9f:96:89:5a:0c:0d:15:75:5f:f1:5e:71:70:70:0e:8b: f5:bb:21:cc:36:b3:f4:f9:16:70:7f:87:b7:84:40:cd:52:1c: aa:df:b7:c4:fa:09:6a:3b:a5:91:c6:87:f1:6e:c7:4e:00:1f: 4e:68:cc:ed:4f:f8:a1:10:7a:d6:5f:a2:70:fa:8f:08:c9:17: 2f:b7:d3:53:82:87:38:df:62:16:08:24:cc:90:a2:a0:94:a3: 3d:c9:bc:01:ca:73:ef:1c:77:bf:67:fd:d6:2b:b0:c7:6d:a6: 28:a8:b3:98:e5:4e:9b:3f:d1:3e:b1:71:51:f0:56:38:3b:2b: d0:d9:1a:d8:a8:93:37:10:d9:b9:99:74:86:47:54:c7:4e:e7: ee:89:0d:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHUCN8bMsTYyU8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MTVlNGNmYzUtODZkZS00Y2NjLWI2OTctODYyM2Y2NDdhOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCtsO8xrCc7/Mjzl6uyAcm9WfLD516J4VZ4q bP2XOI1HoFtMGTiV76NA7XLzlMYNF7KnC9InXmskuZSbPoYPc+tXctS0ZTyhsC8N 4tIkOK+c4bYixyTOjB7pdNewft94Lzcq3zsNl39aELpIf7kCO4UcKjhwr4yYW54x rUV5lcRDkyzm1kYVfGJXF0qnI4eCF1/FC0vGxpABtdV6mywyqsr/hw2pmdiugc9a vx3fU2BmDucaUyyD16S2dR8XVXEWF8y3TXALKTEfwMtucv9Gpoxz9nEnq2slBe5Z GZimvJTt6dOs+MS3GJQZ27/xHm/DAtVEZEX/SXDfVZVCEcdStwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsSevmsJANU9H05IjHit/9oG14GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjliOGRiZWUtMDQxMS0z OTM5LWJkMGEtMzI2MTUwODRlODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/t83NW/nRDp67F6wo8Q4qG8bOR2RCxnlX4vBIM7zGDfb7AEZ2hmrN7 Cz3Y07wA/J/ZNau/zoWbnBKx8PxdN9RrhqHzMOhFtkaAWddKbG88uL1NpzBN76WJ GApJucFaDvC2AfZ8Af9eGh1zCGShn5aJWgwNFXVf8V5xcHAOi/W7Icw2s/T5FnB/ h7eEQM1SHKrft8T6CWo7pZHGh/Fux04AH05ozO1P+KEQetZfonD6jwjJFy+301OC hzjfYhYIJMyQoqCUoz3JvAHKc+8cd79n/dYrsMdtpiios5jlTps/0T6xcVHwVjg7 K9DZGtiokzcQ2bmZdIZHVMdO5+6JDTE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:52:01 2025 by rpki-client