$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8609d944-218a-3205-9b9a-fc5710c7f1a0.roa File: 8609d944-218a-3205-9b9a-fc5710c7f1a0.roa (raw, json) Hash identifier: y2Fgoz6Hw0L9jcPg1TH84f9EMZK7OT7o5pZ3sLKLVHs= Subject key identifier: DE:F9:2C:1E:98:D5:AF:4A:0F:A7:DC:E8:6C:2C:92:7C:0E:B8:0A:B9 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DDB7E6063BDE7A0DD6320 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8609d944-218a-3205-9b9a-fc5710c7f1a0.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 24.197.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:db:7e:60:63:bd:e7:a0:dd:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=58b2c9ca-7077-4e75-9169-b8fe51124fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:34:80:65:ae:79:00:73:47:8a:22:37:cc: 50:f8:2a:46:57:4e:a1:6e:a6:f6:af:e6:14:1e:40: 3d:79:8a:85:63:09:64:ea:49:20:2f:ec:db:70:99: 0d:c5:76:6c:97:74:7b:a5:7f:67:26:63:cb:4e:29: b8:37:6a:53:49:fd:ea:1c:e8:53:da:48:c4:fe:6e: 7b:5c:1b:c7:e0:57:92:01:47:cf:36:a6:07:36:5c: 98:1a:0d:15:ea:57:7b:6e:60:bf:dc:0d:21:6c:a5: 98:0f:22:f8:7a:2e:27:21:6e:ba:d1:22:75:81:d9: 7a:f4:b2:c1:21:dd:d1:2f:4e:87:3e:07:c8:41:75: d5:d5:f0:d0:e4:03:07:5b:1c:31:25:0d:85:2a:17: fc:06:02:e3:24:4e:a0:b4:85:ee:be:7f:95:a6:24: e8:2f:35:47:a5:05:11:01:90:e2:a9:90:a5:fb:01: 60:99:a4:44:02:85:86:b9:63:d1:0c:d9:1a:68:e9: 6e:f7:73:8c:fb:4f:e4:30:c4:27:cd:02:a8:4a:a4: e0:e2:0d:f4:3e:4a:ff:9b:fb:c4:78:c7:7b:d1:63: 1f:8a:8b:8a:06:d6:30:95:1a:87:46:3f:ca:2f:28: d7:ff:09:41:e1:5a:d2:b7:af:38:9e:a3:0d:5f:01: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F9:2C:1E:98:D5:AF:4A:0F:A7:DC:E8:6C:2C:92:7C:0E:B8:0A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8609d944-218a-3205-9b9a-fc5710c7f1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.197.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6a:bd:28:48:5c:76:41:77:93:39:69:31:42:21:68:76:06: de:22:c5:c2:60:87:fd:8c:ca:02:8a:7a:c2:f5:fd:a2:c8:b3: 56:e7:02:27:7b:45:12:a6:be:cf:32:8f:52:44:0a:fe:45:e6: b8:cc:e3:ef:9a:25:c3:71:d4:97:65:cf:d2:d8:74:22:0c:db: e2:a7:eb:a2:75:ea:00:1d:e7:f1:27:c8:e0:4b:31:25:39:1c: ee:82:48:1f:16:ec:2d:9e:3b:ab:07:ea:34:6a:b2:7a:64:cd: 8d:b3:e7:33:93:20:79:87:0a:88:b9:cd:7f:ea:15:d9:8b:d1: 37:51:3f:e3:e0:25:01:a7:ec:d2:8e:ee:8b:66:39:35:b2:f9: a6:70:ee:13:1c:63:39:da:14:e9:38:97:83:1b:c2:d8:bb:7f: 2b:93:2a:70:d1:a6:10:ed:31:f9:45:3e:cf:a5:aa:85:9e:f0: 26:d0:32:da:bf:fc:d4:a7:a5:21:89:5e:62:5f:77:52:f7:d1: 16:50:8c:24:cd:47:99:1e:f4:c9:c4:33:d5:cd:9f:a3:b6:28: 59:d0:99:d4:a9:de:79:cf:c1:7c:98:09:66:98:1b:83:e7:46: e4:9c:87:df:d5:9e:f3:dd:a0:16:08:97:f8:bb:ee:87:96:57: fe:51:02:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHdt+YGO956DdYyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NThiMmM5Y2EtNzA3Ny00ZTc1LTkxNjktYjhmZTUxMTI0ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGo0gGWueQBzR4oiN8xQ+CpGV06hbqb2r+YU HkA9eYqFYwlk6kkgL+zbcJkNxXZsl3R7pX9nJmPLTim4N2pTSf3qHOhT2kjE/m57 XBvH4FeSAUfPNqYHNlyYGg0V6ld7bmC/3A0hbKWYDyL4ei4nIW660SJ1gdl69LLB Id3RL06HPgfIQXXV1fDQ5AMHWxwxJQ2FKhf8BgLjJE6gtIXuvn+VpiToLzVHpQUR AZDiqZCl+wFgmaREAoWGuWPRDNkaaOlu93OM+0/kMMQnzQKoSqTg4g30Pkr/m/vE eMd70WMfiouKBtYwlRqHRj/KLyjX/wlB4VrSt684nqMNXwFy5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN75LB6Y1a9KD6fc6GwsknwOuAq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODYwOWQ5NDQtMjE4YS0z MjA1LTliOWEtZmM1NzEwYzdmMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGMWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFqvShIXHZBd5M5aTFCIWh2Bt4ixcJgh/2MygKKesL1/aLIs1bnAid7 RRKmvs8yj1JECv5F5rjM4++aJcNx1Jdlz9LYdCIM2+Kn66J16gAd5/EnyOBLMSU5 HO6CSB8W7C2eO6sH6jRqsnpkzY2z5zOTIHmHCoi5zX/qFdmL0TdRP+PgJQGn7NKO 7otmOTWy+aZw7hMcYznaFOk4l4Mbwti7fyuTKnDRphDtMflFPs+lqoWe8CbQMtq/ /NSnpSGJXmJfd1L30RZQjCTNR5ke9MnEM9XNn6O2KFnQmdSp3nnPwXyYCWaYG4Pn RuSch9/VnvPdoBYIl/i77oeWV/5RAiU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:25:00 2025 by rpki-client