$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ce623dc-9c87-311f-8054-f95e4e4e1843.roa File: 2ce623dc-9c87-311f-8054-f95e4e4e1843.roa (raw, json) Hash identifier: 4PB1CrtY+eRPX78wLI7YaaVu4fAMWi3cQ+MpxlJ0c+k= Subject key identifier: F4:EA:9F:6A:72:03:80:8D:AA:BB:15:F4:8F:C6:32:1E:08:4C:A9:8E Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D304DDDE8680C40CBE000 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ce623dc-9c87-311f-8054-f95e4e4e1843.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 66.215.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:30:4d:dd:e8:68:0c:40:cb:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=c2dc19cd-b6e0-4927-aba0-66105a32e102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:77:09:24:df:ba:0b:5c:f5:63:c9:fe:cf: b6:aa:70:c8:dc:b9:ad:9b:1d:bf:ac:8a:87:4a:88: c9:2f:b5:4e:c5:73:7e:0a:13:9b:fc:b7:70:a6:61: 37:1c:5f:f7:ac:51:a7:5f:f2:04:d9:cf:f9:14:d2: 35:13:46:92:54:3b:33:60:f8:ab:f6:4c:58:be:7f: b1:c2:cb:ed:f5:a6:a8:97:b1:4b:84:10:6b:37:c1: c9:24:6e:74:0a:b8:d7:9b:3c:84:b0:80:4c:c4:f1: 50:84:d7:34:c2:33:3d:a1:21:bf:d8:4a:b6:9f:7c: cb:17:24:11:7a:f6:c4:a6:9d:d3:10:ec:67:6b:2b: ff:d8:6f:a4:a9:a6:8f:37:f8:2d:cc:71:9e:a5:bf: 70:be:73:5e:3d:38:03:3d:0c:5c:86:3e:71:24:2e: 40:bb:b0:ea:e7:c4:62:f9:b3:e5:6c:7a:60:2e:b0: 92:ac:41:51:54:fb:ca:bb:e9:28:ab:60:66:b4:5e: b4:b7:eb:1d:ec:13:ef:02:91:cb:fc:69:e5:b2:03: 91:01:b2:e3:a5:39:70:f3:4c:16:f6:ab:f3:e2:e9: dc:86:46:78:ba:89:2d:92:8b:e1:f8:6f:62:ea:a2: 17:45:e3:f2:90:c2:e5:31:8f:5e:4b:18:43:7a:42: 0b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EA:9F:6A:72:03:80:8D:AA:BB:15:F4:8F:C6:32:1E:08:4C:A9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2ce623dc-9c87-311f-8054-f95e4e4e1843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.215.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:97:18:0b:39:c4:2a:82:61:07:66:3d:68:fe:c7:eb:ce:fe: 8a:96:f7:04:dd:33:1e:8c:23:73:d6:a6:e0:5d:b8:73:5b:8d: 9f:d4:1c:74:a6:58:88:24:bf:6b:db:06:86:08:c4:24:ad:3a: b7:45:6a:46:9a:ae:91:7c:69:0d:1f:d2:8f:1a:6c:1e:e1:ff: 5d:ee:c9:d0:39:b5:25:ef:06:d0:a4:bd:23:87:f5:d3:68:3d: 8d:ef:a4:68:dd:ce:cb:bb:82:4c:c7:06:3b:be:f1:a9:1a:0c: d3:65:1b:ef:86:96:59:d5:50:49:f0:7e:b6:17:20:fa:6a:0a: ea:6a:c7:5e:21:7e:90:8a:cb:28:15:dd:72:bb:1e:28:3b:f3: 6c:5c:5d:63:f6:5a:ab:60:c8:9f:3a:67:56:9b:91:70:94:c8: 70:c1:40:63:cd:86:7d:10:a0:d7:58:f4:77:c6:9a:20:0c:20: 34:49:77:ed:b0:4b:bd:18:83:d4:92:46:6a:4d:c1:ea:81:5d: 21:80:40:68:95:43:f5:73:0f:3a:67:f5:4b:0d:68:3a:fc:40: 27:49:6c:54:85:13:eb:f1:6f:36:80:ff:f1:a8:78:fa:20:10: b1:ef:3d:e9:c5:8a:9a:4d:6a:d3:d8:af:c0:0c:ac:1f:e6:ef: e4:5b:ef:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHTBN3ehoDEDL4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YzJkYzE5Y2QtYjZlMC00OTI3LWFiYTAtNjYxMDVhMzJlMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDN3CSTfugtc9WPJ/s+2qnDI3Lmtmx2/rIqH SojJL7VOxXN+ChOb/LdwpmE3HF/3rFGnX/IE2c/5FNI1E0aSVDszYPir9kxYvn+x wsvt9aaol7FLhBBrN8HJJG50CrjXmzyEsIBMxPFQhNc0wjM9oSG/2Eq2n3zLFyQR evbEpp3TEOxnayv/2G+kqaaPN/gtzHGepb9wvnNePTgDPQxchj5xJC5Au7Dq58Ri +bPlbHpgLrCSrEFRVPvKu+koq2BmtF60t+sd7BPvApHL/GnlsgORAbLjpTlw80wW 9qvz4unchkZ4uoktkovh+G9i6qIXRePykMLlMY9eSxhDekIL7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTqn2pyA4CNqrsV9I/GMh4ITKmOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmNlNjIzZGMtOWM4Ny0z MTFmLTgwNTQtZjk1ZTRlNGUxODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQtfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGXGAs5xCqCYQdmPWj+x+vO/oqW9wTdMx6MI3PWpuBduHNbjZ/UHHSm WIgkv2vbBoYIxCStOrdFakaarpF8aQ0f0o8abB7h/13uydA5tSXvBtCkvSOH9dNo PY3vpGjdzsu7gkzHBju+8akaDNNlG++GllnVUEnwfrYXIPpqCupqx14hfpCKyygV 3XK7Hig782xcXWP2WqtgyJ86Z1abkXCUyHDBQGPNhn0QoNdY9HfGmiAMIDRJd+2w S70Yg9SSRmpNweqBXSGAQGiVQ/VzDzpn9UsNaDr8QCdJbFSFE+vxbzaA//GoePog ELHvPenFippNatPYr8AMrB/m7+Rb71I= -----END CERTIFICATE-----Generated at Mon Oct 20 04:42:57 2025 by rpki-client