$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa File: 7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa (raw, json) Hash identifier: ZDNlzjVa0Or4YngCkZkLgQGD7YLFarYyK2Z1wpBddTw= Subject key identifier: C2:11:00:79:21:33:F7:1B:68:82:B7:AF:68:D6:B2:70:FA:45:77:06 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821E1D2CBE53576D6F0D0D00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 395227 IP address blocks: 71.86.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:1d:2c:be:53:57:6d:6f:0d:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=aa815b40-f763-4e72-8ce1-887af6e086f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:6b:43:10:12:ca:49:8a:58:c1:2b:1b:b6: 86:61:46:1f:a1:c7:2c:a6:8a:8d:d5:f3:da:cb:95: c9:6f:df:42:e2:cc:e5:65:2d:ae:b9:6e:8d:a3:6b: d4:03:18:49:52:79:63:d1:95:9e:4e:e8:75:a6:2f: c0:48:48:fa:dd:37:70:a5:d0:12:8a:1c:24:f2:83: f4:b2:5a:bb:42:6d:20:57:3a:3a:6c:86:eb:f3:ea: e0:6d:56:38:38:8b:1d:f2:c5:d2:23:ea:d4:65:2d: cd:83:cd:86:5d:e0:ee:d3:a3:79:17:a4:be:36:36: 1f:5f:33:05:6b:86:58:38:25:53:8d:a4:28:3c:73: 3f:84:86:76:5a:28:7f:88:e7:58:ef:ec:a9:ca:af: 56:98:1e:1e:9f:d9:cf:fd:7d:66:79:07:f5:1a:12: ec:57:b8:31:82:55:7f:03:b5:c5:3e:ea:e1:e2:c5: ac:81:22:94:f1:1e:9b:68:62:b8:8d:aa:92:14:e0: 29:53:0c:55:7a:e9:fa:6c:bc:09:0d:01:da:94:93: 54:b8:7f:ab:60:c0:f5:71:bd:47:7a:9e:e9:f4:df: 8b:5f:6f:b2:3b:dd:a7:7a:d0:03:2b:4c:fc:aa:dc: 54:c8:bf:f0:dc:ae:a2:d5:e4:9b:12:92:c0:e5:ac: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:11:00:79:21:33:F7:1B:68:82:B7:AF:68:D6:B2:70:FA:45:77:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7e3fa36c-26ad-3319-a4a8-83e00a6a2f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.86.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:36:a4:7c:9e:c3:0e:9e:5c:57:e6:84:e5:0d:64:9b:3b:31: b3:1f:11:38:18:e8:4a:1a:fb:f7:de:c7:b1:9f:c0:4c:62:1d: da:bf:37:10:7e:8a:51:35:6e:85:97:c9:ea:4e:b2:3d:23:4d: 72:68:2d:b8:9a:3d:8d:66:4c:42:3a:5d:cc:02:ce:f2:40:fb: 48:a6:e4:61:cf:97:08:38:76:f7:5f:ad:92:69:cd:ba:fb:28: 83:a7:51:87:7f:21:27:7d:3d:68:a5:bf:b3:88:19:57:9e:18: 52:22:ea:19:fd:01:f5:78:8c:c1:11:cb:52:47:18:b2:71:4e: af:00:0a:58:d1:e3:e9:e8:32:6d:ab:87:c5:47:64:00:70:3f: ea:6d:96:9b:f5:cc:59:05:50:41:3f:d6:0e:94:da:97:73:b6: 67:60:eb:0c:f8:3c:4c:19:87:16:b2:d6:e7:b0:33:f1:f5:5a: 97:e5:26:65:b4:75:56:32:fa:9f:1e:04:f2:1f:0f:15:24:78: 6f:8e:b2:09:5a:e7:b7:8d:a4:35:3d:28:ab:aa:2e:d5:d6:c1: e2:68:e9:c4:d6:16:93:e6:63:d6:3e:d5:e3:91:7e:ff:50:58: 75:11:d8:6d:40:f1:70:67:43:7a:8c:9c:ac:3f:e9:6c:9c:ae: 72:f4:61:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHh0svlNXbW8NDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YWE4MTViNDAtZjc2My00ZTcyLThjZTEtODg3YWY2ZTA4NmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubdrQxASykmKWMErG7aGYUYfoccspoqN1fPa y5XJb99C4szlZS2uuW6No2vUAxhJUnlj0ZWeTuh1pi/ASEj63TdwpdASihwk8oP0 slq7Qm0gVzo6bIbr8+rgbVY4OIsd8sXSI+rUZS3Ng82GXeDu06N5F6S+NjYfXzMF a4ZYOCVTjaQoPHM/hIZ2Wih/iOdY7+ypyq9WmB4en9nP/X1meQf1GhLsV7gxglV/ A7XFPurh4sWsgSKU8R6baGK4jaqSFOApUwxVeun6bLwJDQHalJNUuH+rYMD1cb1H ep7p9N+LX2+yO92netADK0z8qtxUyL/w3K6i1eSbEpLA5ayB3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIRAHkhM/cbaIK3r2jWsnD6RXcGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvN2UzZmEzNmMtMjZhZC0z MzE5LWE0YTgtODNlMDBhNmEyZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR1b8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU2pHyeww6eXFfmhOUNZJs7MbMfETgY6Eoa+/fex7GfwExiHdq/NxB+ ilE1boWXyepOsj0jTXJoLbiaPY1mTEI6XcwCzvJA+0im5GHPlwg4dvdfrZJpzbr7 KIOnUYd/ISd9PWilv7OIGVeeGFIi6hn9AfV4jMERy1JHGLJxTq8ACljR4+noMm2r h8VHZABwP+ptlpv1zFkFUEE/1g6U2pdztmdg6wz4PEwZhxay1uewM/H1WpflJmW0 dVYy+p8eBPIfDxUkeG+Osgla57eNpDU9KKuqLtXWweJo6cTWFpPmY9Y+1eORfv9Q WHUR2G1A8XBnQ3qMnKw/6WycrnL0YWQ= -----END CERTIFICATE-----Generated at Tue Oct 21 02:31:11 2025 by rpki-client