$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/652a09b9-25b2-30d2-b96c-7fffa4418198.roa File: 652a09b9-25b2-30d2-b96c-7fffa4418198.roa (raw, json) Hash identifier: dYOjLM70DvllgpwGhze/5JXgPJdnrf/vQXlYsgh1Euc= Subject key identifier: 16:8F:0A:53:F0:B9:31:F6:4E:45:37:A0:04:25:40:E5:91:D1:71:41 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D32E21F475F304018B000 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/652a09b9-25b2-30d2-b96c-7fffa4418198.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 24.196.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:32:e2:1f:47:5f:30:40:18:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=c10a6929-b4fa-457d-a216-a97f0a3114f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:2c:e5:bd:c5:b7:2c:00:cb:09:f6:91:84: 34:b2:e0:86:a9:a4:1f:6b:c8:17:0e:a4:0f:9d:c2: a1:34:7f:94:38:c8:ef:4c:98:f2:c6:e3:19:4a:d1: ea:20:d1:c0:75:c3:87:2a:c6:aa:da:d2:b1:f6:fa: 5c:5b:40:83:76:e8:65:c1:3d:75:1a:27:3a:20:0a: bc:e5:95:c1:f9:6e:2a:4b:90:2f:22:35:49:8c:f5: 35:33:dd:73:29:c4:61:5d:a3:6c:31:da:40:ae:8a: fd:fe:58:47:9b:f7:3c:80:fd:33:20:6a:79:66:4b: df:55:39:8a:37:70:52:e6:9d:c2:99:53:e2:a2:df: 04:3f:83:c9:bb:4f:3a:d6:c7:27:fa:27:c3:ff:1a: 31:1f:4e:23:43:dd:c8:04:d1:da:30:94:e2:6d:95: 07:ac:f0:97:c3:fc:fd:96:b4:8f:a3:e0:d9:8a:8a: b5:0a:e1:4e:04:fa:43:b5:4a:06:6f:72:fa:27:1e: 58:2d:b1:0b:bd:56:5f:5b:28:e4:0d:87:43:b4:b3: 45:3c:64:19:19:df:97:03:0c:ee:ac:e5:e3:93:0e: c5:2c:98:d0:ab:d2:eb:c0:92:9d:35:4f:5b:23:22: 0a:83:bc:c3:ef:3e:ec:35:7a:fd:6f:24:1c:cc:d2: c2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8F:0A:53:F0:B9:31:F6:4E:45:37:A0:04:25:40:E5:91:D1:71:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/652a09b9-25b2-30d2-b96c-7fffa4418198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.196.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:35:12:c5:36:7e:83:1f:53:8c:af:fe:ab:e0:60:eb:68:1c: 36:7c:fa:31:0f:51:49:bd:71:78:45:8f:37:ff:b2:38:33:b6: 80:fa:50:d4:19:49:43:d6:78:fc:da:0f:d4:63:c4:a8:d7:08: 18:8b:17:f9:c8:3b:0c:ca:69:5f:3c:4f:20:54:41:d2:e3:37: 26:1a:c1:b8:3c:38:04:14:c1:07:d3:18:69:99:ed:bf:e1:63: ef:4b:fd:d6:e4:08:b7:29:5f:9d:6b:ba:98:af:87:74:40:c6: b0:02:f3:f1:f0:5d:24:25:44:90:9c:08:b8:57:a8:2b:c6:d1: be:0e:b2:fb:60:84:b2:b2:26:66:a7:49:fe:2e:0b:12:66:01: 97:fc:c9:62:f6:1f:e5:17:e3:13:e2:e9:0b:2f:7d:9f:b3:3c: 80:81:c3:4c:e7:8f:47:0d:03:bc:02:51:32:39:c3:e5:67:fc: e9:54:64:2c:08:90:aa:38:bc:8d:53:86:66:af:83:ba:2c:54: e6:6e:25:0c:95:e4:ee:d3:ca:af:cc:11:1f:7c:f8:5b:73:c9: ff:7e:53:89:6d:45:cb:a7:7c:5e:43:51:e0:65:fd:07:f8:26: 6f:0d:aa:48:88:6e:e1:95:27:45:44:51:97:5b:b4:8a:7a:e8: bf:cb:94:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHTLiH0dfMEAYsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YzEwYTY5MjktYjRmYS00NTdkLWEyMTYtYTk3ZjBhMzExNGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJYs5b3FtywAywn2kYQ0suCGqaQfa8gXDqQP ncKhNH+UOMjvTJjyxuMZStHqINHAdcOHKsaq2tKx9vpcW0CDduhlwT11Gic6IAq8 5ZXB+W4qS5AvIjVJjPU1M91zKcRhXaNsMdpAror9/lhHm/c8gP0zIGp5ZkvfVTmK N3BS5p3CmVPiot8EP4PJu0861scn+ifD/xoxH04jQ93IBNHaMJTibZUHrPCXw/z9 lrSPo+DZioq1CuFOBPpDtUoGb3L6Jx5YLbELvVZfWyjkDYdDtLNFPGQZGd+XAwzu rOXjkw7FLJjQq9LrwJKdNU9bIyIKg7zD7z7sNXr9byQczNLCZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaPClPwuTH2TkU3oAQlQOWR0XFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjUyYTA5YjktMjViMi0z MGQyLWI5NmMtN2ZmZmE0NDE4MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGMTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA1EsU2foMfU4yv/qvgYOtoHDZ8+jEPUUm9cXhFjzf/sjgztoD6UNQZ SUPWePzaD9RjxKjXCBiLF/nIOwzKaV88TyBUQdLjNyYawbg8OAQUwQfTGGmZ7b/h Y+9L/dbkCLcpX51rupivh3RAxrAC8/HwXSQlRJCcCLhXqCvG0b4OsvtghLKyJman Sf4uCxJmAZf8yWL2H+UX4xPi6QsvfZ+zPICBw0znj0cNA7wCUTI5w+Vn/OlUZCwI kKo4vI1Thmavg7osVOZuJQyV5O7Tyq/MER98+Ftzyf9+U4ltRcunfF5DUeBl/Qf4 Jm8NqkiIbuGVJ0VEUZdbtIp66L/LlDE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:53 2025 by rpki-client