$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6943590a-fec2-32a2-856d-92b6d32dc10c.roa File: 6943590a-fec2-32a2-856d-92b6d32dc10c.roa (raw, json) Hash identifier: zkTyOR9jwKKZY1FF+7+T+4yuiXDh2STD5WRS/o2sNBw= Subject key identifier: A7:11:8C:EB:38:68:3D:C4:DB:AC:B1:97:79:2E:E6:2F:BF:64:63:4D Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821E0C3798D8FE0443BC0E40 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6943590a-fec2-32a2-856d-92b6d32dc10c.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 97.90.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:0c:37:98:d8:fe:04:43:bc:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=a85eccb2-d3fc-4a3b-89cb-fc37ddf6c768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:bb:48:fc:6b:19:23:b5:32:a6:46:a1:e1: b0:f4:9d:dc:13:74:11:d0:af:fc:e8:b8:d5:26:04: 38:ae:df:04:83:73:73:8f:6e:45:4c:8b:12:74:6b: d6:a6:71:8f:b8:df:e9:6b:1d:fc:fb:33:85:2f:66: ad:57:d0:49:0c:5f:7a:3e:fe:de:69:1f:29:a8:42: aa:db:b1:ba:f3:27:88:ee:20:16:a8:58:15:62:d9: 13:89:ed:54:d0:39:18:fb:c1:08:1a:d7:8c:57:02: 54:03:f8:ed:64:83:bf:80:4e:6f:5f:fc:03:05:91: a8:e8:42:ce:bb:d5:1a:7a:2c:07:e8:4a:ac:c4:17: 71:b8:88:f3:42:db:c6:ab:a0:e9:3c:29:88:d6:d8: 82:30:54:90:91:bf:0c:14:bd:7a:59:ce:6c:f5:49: ea:9e:3c:6b:e7:e5:3e:2d:c3:2f:82:c2:2f:1f:7d: 82:51:2a:bf:0b:65:aa:d2:cd:11:d0:91:99:2e:0d: 4b:d1:24:d6:07:2e:80:74:79:87:6e:53:aa:88:ea: c2:7f:c8:ea:d2:57:4a:a6:76:ec:de:f5:72:ce:49: 81:d6:af:58:a1:0b:1c:ac:08:30:16:08:31:ca:f6: 52:54:88:33:90:d4:d8:fb:ed:7d:e9:e7:9a:a8:da: c3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:11:8C:EB:38:68:3D:C4:DB:AC:B1:97:79:2E:E6:2F:BF:64:63:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6943590a-fec2-32a2-856d-92b6d32dc10c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 97.90.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2f:58:0b:a0:75:05:e3:41:fc:be:36:e6:6c:e1:7a:52:7b: 50:54:6d:e7:43:6c:da:7a:c8:60:9f:0d:d4:dc:ba:a7:f8:c0: a1:52:56:b8:f0:8e:95:de:1d:e8:73:19:1c:c8:a9:d1:33:11: c2:9f:ad:3d:7c:c2:28:0d:ed:9d:76:34:11:5c:2d:a6:e2:7f: 6b:27:51:bf:c5:c2:7a:39:42:22:05:04:c2:9c:7e:8b:99:78: f9:1e:00:f6:28:8e:9f:ac:1e:09:62:f4:8d:32:cc:d7:57:fb: f8:51:97:54:d1:40:6d:ff:96:e4:02:1e:f1:1e:e6:1c:b4:69: 97:87:ce:3c:c2:f6:e4:2b:93:a6:66:cf:67:79:b5:8e:61:b4: be:77:c8:d1:b7:b8:e1:1f:a4:14:af:20:9d:e7:e1:b4:19:5b: 31:89:21:26:86:2d:95:b9:ba:75:45:1e:00:da:a5:09:b4:52: a8:09:54:3b:51:d8:01:c9:66:16:a6:bb:49:49:7b:3d:b9:58: 8e:a6:ac:09:a5:22:95:61:f0:da:c5:b4:3b:03:54:f1:5e:c0: 9c:9e:e3:5a:96:58:9c:6f:5f:53:7b:0d:9c:a7:3c:ea:8c:d1: 5c:a8:a5:93:81:63:a4:57:49:2a:40:d6:d2:01:fb:9d:0e:17: 2c:18:ba:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHgw3mNj+BEO8DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YTg1ZWNjYjItZDNmYy00YTNiLTg5Y2ItZmMzN2RkZjZjNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssm7SPxrGSO1MqZGoeGw9J3cE3QR0K/86LjV JgQ4rt8Eg3Nzj25FTIsSdGvWpnGPuN/pax38+zOFL2atV9BJDF96Pv7eaR8pqEKq 27G68yeI7iAWqFgVYtkTie1U0DkY+8EIGteMVwJUA/jtZIO/gE5vX/wDBZGo6ELO u9UaeiwH6EqsxBdxuIjzQtvGq6DpPCmI1tiCMFSQkb8MFL16Wc5s9Unqnjxr5+U+ LcMvgsIvH32CUSq/C2Wq0s0R0JGZLg1L0STWBy6AdHmHblOqiOrCf8jq0ldKpnbs 3vVyzkmB1q9YoQscrAgwFggxyvZSVIgzkNTY++196eeaqNrDlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcRjOs4aD3E26yxl3ku5i+/ZGNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjk0MzU5MGEtZmVjMi0z MmEyLTg1NmQtOTJiNmQzMmRjMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYVrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkvWAugdQXjQfy+NuZs4XpSe1BUbedDbNp6yGCfDdTcuqf4wKFSVrjw jpXeHehzGRzIqdEzEcKfrT18wigN7Z12NBFcLabif2snUb/Fwno5QiIFBMKcfouZ ePkeAPYojp+sHgli9I0yzNdX+/hRl1TRQG3/luQCHvEe5hy0aZeHzjzC9uQrk6Zm z2d5tY5htL53yNG3uOEfpBSvIJ3n4bQZWzGJISaGLZW5unVFHgDapQm0UqgJVDtR 2AHJZhamu0lJez25WI6mrAmlIpVh8NrFtDsDVPFewJye41qWWJxvX1N7DZynPOqM 0VyopZOBY6RXSSpA1tIB+50OFywYuhY= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:58 2025 by rpki-client