$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a22323d-a1bc-3e08-9f07-a04e4d1112f5.roa File: 4a22323d-a1bc-3e08-9f07-a04e4d1112f5.roa (raw, json) Hash identifier: KivzFZSZBer9ClCJJP8qEqd/DlYcbFzZNMXwT+7HMuY= Subject key identifier: 2E:55:9B:FF:1B:1E:C4:46:0D:23:F1:A1:E5:92:03:0B:20:4F:E8:5A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584ACB412261F445B53EE5F93780 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a22323d-a1bc-3e08-9f07-a04e4d1112f5.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 20115 IP address blocks: 159.111.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:22:61:f4:45:b5:3e:e5:f9:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=dc708255-d5c2-4576-bd30-f1b2d9db1955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b5:51:fe:5c:67:6a:49:17:6d:31:c2:34:a1: a1:75:21:f2:33:22:dc:c7:45:3d:9e:0b:31:36:c1: 1d:a7:88:a8:e2:b6:d7:80:2c:83:5a:6a:16:95:01: 23:e7:42:f3:c6:d2:05:b0:c6:6c:2e:06:f3:1b:db: 6c:bb:b3:5a:b0:c9:19:09:69:c2:e9:38:37:aa:a6: 44:b4:6f:22:70:03:80:35:02:ef:ec:6a:e9:9b:e7: a7:a3:24:a8:0d:7d:a2:c7:a1:d9:65:d3:ae:2c:76: 59:bc:dc:f3:bd:a5:0b:f9:cb:70:9c:b5:1d:65:69: 37:44:b0:6d:87:21:1d:3d:3f:bd:71:c8:9f:d8:c2: 45:84:95:0c:3d:7f:0f:80:ba:b3:ce:06:f6:da:fc: f4:76:a2:17:82:3b:fb:17:a3:96:0a:0d:68:f9:42: 0c:8c:61:b1:1c:2b:00:88:a1:25:50:ce:f3:11:28: 7b:3f:87:54:63:2f:05:07:58:ff:bb:db:db:35:a4: 34:b4:fc:e6:c0:95:a2:fe:54:08:d0:d9:cb:2f:80: 26:8e:3d:9e:ba:cd:7e:d4:ff:92:fb:16:07:70:98: 36:df:11:bb:9a:22:e9:61:33:08:3c:51:89:de:dd: 10:35:ff:6b:1b:cf:60:1e:bf:43:f2:7b:df:dc:0b: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:55:9B:FF:1B:1E:C4:46:0D:23:F1:A1:E5:92:03:0B:20:4F:E8:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4a22323d-a1bc-3e08-9f07-a04e4d1112f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 159.111.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a8:27:13:5d:5a:63:e1:09:99:fc:f2:a9:00:69:58:04:71: fb:b1:8d:42:57:ba:16:ae:2b:23:ba:9d:3b:6c:f3:c7:4c:30: 5c:8c:36:4a:a8:44:cc:c0:f0:61:1b:c4:c2:38:d8:d2:f7:50: 19:fc:77:12:36:cf:57:25:b4:f3:01:26:70:98:a7:40:96:6d: ba:4c:8b:fc:24:ed:81:0f:24:cd:4d:4f:91:1e:65:62:e7:9e: 91:b2:85:9e:58:c4:50:64:e1:ca:c4:b9:9e:96:e9:75:91:3d: b4:6d:55:f6:73:c8:15:c9:7d:37:10:ff:b1:fe:9b:66:94:e7: 8c:93:c3:6b:fe:22:51:05:d2:49:eb:fe:be:f5:18:57:67:fb: 2e:7e:02:cd:91:41:12:62:ee:b1:76:22:85:02:7b:76:37:8f: 59:c4:d7:cb:55:6b:30:fe:fa:98:67:9b:4c:24:ca:c2:25:f9: 9d:44:65:1c:70:d6:e4:fd:60:ce:54:56:cc:97:25:fc:72:63: 18:5f:0b:f5:7f:05:5b:33:d8:9d:b9:8f:25:5b:ce:24:78:dc: d2:ad:a2:36:1b:8b:28:f6:53:dd:c5:31:9a:33:c0:db:a6:7b: 94:eb:52:05:0c:32:02:a9:0d:fb:b3:8a:36:07:90:14:ad:57: be:33:3d:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQSJh9EW1PuX5N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZGM3MDgyNTUtZDVjMi00NTc2LWJkMzAtZjFiMmQ5ZGIxOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37VR/lxnakkXbTHCNKGhdSHyMyLcx0U9ngsx NsEdp4io4rbXgCyDWmoWlQEj50LzxtIFsMZsLgbzG9tsu7NasMkZCWnC6Tg3qqZE tG8icAOANQLv7Grpm+enoySoDX2ix6HZZdOuLHZZvNzzvaUL+ctwnLUdZWk3RLBt hyEdPT+9ccif2MJFhJUMPX8PgLqzzgb22vz0dqIXgjv7F6OWCg1o+UIMjGGxHCsA iKElUM7zESh7P4dUYy8FB1j/u9vbNaQ0tPzmwJWi/lQI0NnLL4Amjj2eus1+1P+S +xYHcJg23xG7miLpYTMIPFGJ3t0QNf9rG89gHr9D8nvf3At+TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5Vm/8bHsRGDSPxoeWSAwsgT+haMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGEyMjMyM2QtYTFiYy0z ZTA4LTlmMDctYTA0ZTRkMTExMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn2/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADioJxNdWmPhCZn88qkAaVgEcfuxjUJXuhauKyO6nTts88dMMFyMNkqo RMzA8GEbxMI42NL3UBn8dxI2z1cltPMBJnCYp0CWbbpMi/wk7YEPJM1NT5EeZWLn npGyhZ5YxFBk4crEuZ6W6XWRPbRtVfZzyBXJfTcQ/7H+m2aU54yTw2v+IlEF0knr /r71GFdn+y5+As2RQRJi7rF2IoUCe3Y3j1nE18tVazD++phnm0wkysIl+Z1EZRxw 1uT9YM5UVsyXJfxyYxhfC/V/BVsz2J25jyVbziR43NKtojYbiyj2U93FMZozwNum e5TrUgUMMgKpDfuzijYHkBStV74zPS8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:56 2025 by rpki-client