$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b9be93b-81bb-30e1-ad89-4cb63b462d46.roa File: 4b9be93b-81bb-30e1-ad89-4cb63b462d46.roa (raw, json) Hash identifier: 28SoyhBsDSAjAYTeeUMH9quo6SxF8MlRItk/h4GwmqU= Subject key identifier: 98:ED:D5:ED:7C:D3:89:9D:CD:25:D3:1F:D0:41:70:19:39:C3:4E:EB Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B68FC9C6BCDEFAF5C6B9AAA00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b9be93b-81bb-30e1-ad89-4cb63b462d46.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 20001 IP address blocks: 168.148.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9c:6b:cd:ef:af:5c:6b:9a:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=f9f475d3-d0d3-44b3-b4ab-d6495ad156a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:ab:09:c3:1e:b1:73:84:35:43:04:48:54: 8f:51:be:0d:ac:c3:e6:70:43:3d:13:82:e6:d4:70: e2:42:b7:2c:37:b4:98:c2:11:2f:1f:71:9f:68:33: 60:d9:8d:c3:aa:8e:7c:e8:6f:9e:a1:a0:1e:03:9b: e9:64:d5:c1:c4:cc:6e:f2:50:ae:e1:14:b1:82:5a: c2:1d:c3:b3:09:40:10:44:f1:e4:f4:bb:fb:80:af: 8b:6b:dd:6f:6a:dc:aa:0d:16:83:b7:13:b4:0f:ff: 83:ac:7e:c7:2d:be:2d:ac:ac:64:e7:00:cc:ba:6e: ee:7e:71:a5:d2:65:1d:4c:ef:fb:14:a7:25:42:5e: 00:48:3a:d6:54:fb:03:a9:a4:1d:61:84:34:7b:c1: d8:fc:93:99:f6:37:43:a1:02:09:b1:f2:53:da:3c: 22:1a:ee:a8:39:64:07:5f:86:87:84:a0:f8:57:86: 4e:38:15:a9:14:aa:d2:fc:51:36:10:f2:44:4d:a9: 3f:f5:17:d2:d1:ef:ba:d1:b1:af:f0:65:fa:3d:3d: bb:03:9c:b2:3c:63:c2:5b:a9:09:05:2d:a0:95:e8: b4:49:0c:f0:92:c6:52:9d:59:d3:1f:a5:69:4e:da: 92:33:d7:0e:9b:31:2b:20:04:d9:e5:ca:33:ab:bc: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:ED:D5:ED:7C:D3:89:9D:CD:25:D3:1F:D0:41:70:19:39:C3:4E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b9be93b-81bb-30e1-ad89-4cb63b462d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 168.148.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:db:9c:8c:f7:90:4c:09:0d:d0:3b:5c:d2:69:30:fb:74:a8: fa:04:13:20:cc:e1:68:fa:d9:d7:b4:dd:c5:fc:22:bd:a4:8e: 47:50:f6:05:4c:9c:b2:2b:32:7c:ae:fb:9f:d9:30:e2:66:9d: c4:0d:99:78:5b:e0:50:b2:b1:d5:c5:4f:f3:c1:d3:71:03:b6: 03:37:93:5c:78:90:5e:71:57:fe:39:13:29:76:c4:9e:bc:9a: 98:80:e8:fe:5a:1a:f8:1d:12:ca:c5:21:90:80:c9:39:0c:0d: 59:b9:21:04:da:7f:23:e4:6e:05:10:37:5d:05:68:c0:ff:cf: 5a:8f:f5:c3:e5:07:1d:0f:0b:1b:7c:27:75:e6:0f:f6:d6:0a: 34:f1:72:25:ff:86:d4:d0:4d:ca:1b:79:fd:63:99:bb:8b:ba: 52:56:82:d7:b2:7b:d5:88:ef:44:33:7d:ae:b3:f7:ae:db:6d: 61:c0:f8:f7:7e:23:c8:73:c0:3c:1b:ea:7a:10:fa:f5:4c:06: 17:e6:ec:04:f4:07:f6:ca:48:c6:a2:6a:0e:ce:16:80:5d:4e: 16:89:5d:ef:ab:e3:e2:f6:21:23:0b:eb:2e:9c:31:88:c1:19: c8:ab:08:55:6d:97:a3:1b:c6:21:52:fa:1e:0e:20:13:41:51: b2:5d:2a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/Jxrze+vXGuaqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZjlmNDc1ZDMtZDBkMy00NGIzLWI0YWItZDY0OTVhZDE1NmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxCrCcMesXOENUMESFSPUb4NrMPmcEM9E4Lm 1HDiQrcsN7SYwhEvH3GfaDNg2Y3Dqo586G+eoaAeA5vpZNXBxMxu8lCu4RSxglrC HcOzCUAQRPHk9Lv7gK+La91vatyqDRaDtxO0D/+DrH7HLb4trKxk5wDMum7ufnGl 0mUdTO/7FKclQl4ASDrWVPsDqaQdYYQ0e8HY/JOZ9jdDoQIJsfJT2jwiGu6oOWQH X4aHhKD4V4ZOOBWpFKrS/FE2EPJETak/9RfS0e+60bGv8GX6PT27A5yyPGPCW6kJ BS2glei0SQzwksZSnVnTH6VpTtqSM9cOmzErIATZ5cozq7yCHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjt1e1804mdzSXTH9BBcBk5w07rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGI5YmU5M2ItODFiYi0z MGUxLWFkODktNGNiNjNiNDYyZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/bnIz3kEwJDdA7XNJpMPt0qPoEEyDM4Wj62de03cX8Ir2kjkdQ9gVM nLIrMnyu+5/ZMOJmncQNmXhb4FCysdXFT/PB03EDtgM3k1x4kF5xV/45Eyl2xJ68 mpiA6P5aGvgdEsrFIZCAyTkMDVm5IQTafyPkbgUQN10FaMD/z1qP9cPlBx0PCxt8 J3XmD/bWCjTxciX/htTQTcobef1jmbuLulJWgteye9WI70Qzfa6z967bbWHA+Pd+ I8hzwDwb6noQ+vVMBhfm7AT0B/bKSMaiag7OFoBdThaJXe+r4+L2ISML6y6cMYjB GcirCFVtl6MbxiFS+h4OIBNBUbJdKgo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:38:49 2025 by rpki-client