$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c9da886-8592-3d7e-8b60-693223875dc2.roa File: 8c9da886-8592-3d7e-8b60-693223875dc2.roa (raw, json) Hash identifier: jtknAOcMm8Gzk3Pzp/AAS59g9puuSYfvC7UNjBvLUvI= Subject key identifier: 17:B8:96:67:47:CB:FF:3A:DA:A7:DE:DC:7C:CA:02:C0:BE:6B:89:76 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DD5E3F78F68D817D96F90 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c9da886-8592-3d7e-8b60-693223875dc2.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 24.197.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:d5:e3:f7:8f:68:d8:17:d9:6f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=584ca01d-29b5-428d-9cea-fe8517902f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f1:8d:72:5e:42:01:e1:2d:fc:bb:8e:69:34: e3:4c:98:b2:05:80:ff:8d:b3:fd:46:a4:12:24:28: f9:64:db:e8:4e:ee:16:1f:f1:77:8a:17:d4:bb:9c: e8:a8:67:08:a3:e7:5b:06:96:0b:66:29:59:42:74: 1b:97:eb:f6:24:05:ff:ad:2d:bb:11:54:3e:77:a3: 22:96:86:4c:5b:54:de:f0:84:59:3d:f3:19:2e:58: cb:76:98:8d:71:76:65:e9:e5:35:48:52:23:c0:59: 6b:18:a0:f3:6c:d2:63:7a:da:d1:a2:bd:54:2f:e4: 68:e0:d1:8e:23:39:eb:a4:06:30:eb:17:52:57:43: 3f:ca:0d:d9:22:23:65:f7:69:37:f9:da:5d:c2:ae: da:d6:03:07:f3:92:55:52:55:46:7e:1f:4c:44:4f: b7:25:4f:d6:df:1e:ed:0e:cd:72:f6:10:12:4f:15: 36:a1:25:57:8f:90:79:2b:7f:a7:ea:58:16:39:31: 18:58:23:f9:2b:85:e8:8e:d4:0d:fa:fd:d8:9c:b1: 43:c5:5f:50:03:16:03:1f:d2:c9:da:4e:d8:ba:a6: 4a:dd:f9:97:62:e2:b6:55:c6:c9:54:c5:d1:8c:7f: 8a:ac:67:22:a5:74:d5:d1:01:2b:8a:61:27:52:1e: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B8:96:67:47:CB:FF:3A:DA:A7:DE:DC:7C:CA:02:C0:BE:6B:89:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8c9da886-8592-3d7e-8b60-693223875dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.197.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:77:ba:5c:c0:69:44:87:83:a0:9f:2d:2f:7e:ae:66:9c:af: b0:dd:a5:55:3d:ef:78:32:28:8e:7b:ba:ea:61:a1:91:6b:8a: 3b:39:ed:14:67:ae:3b:2c:eb:3b:f4:fb:0e:38:c4:02:a5:c2: 3a:e1:b3:53:48:bb:22:f5:3d:03:97:a1:ee:01:6a:15:ba:ec: e1:3d:71:2a:3c:f1:73:d6:53:1d:ba:2a:69:c2:21:7c:4c:07: 85:b4:eb:5b:07:d4:b8:73:33:c1:30:26:95:bd:5d:7b:6c:53: e5:23:c0:28:ce:c2:08:76:4c:0a:c7:ee:8f:9f:06:f2:8c:65: 34:61:ee:30:2f:34:a9:fa:a7:69:8f:2f:63:2f:08:95:34:7e: dc:cf:ad:73:f4:65:01:97:8e:c3:24:42:d4:2a:57:b8:df:ba: 8d:5e:d7:f9:3b:49:34:ff:21:19:7c:a5:6b:a5:98:17:34:85: 18:c2:8a:84:8c:6d:7f:14:b4:0e:cc:8c:e3:c2:ac:44:a4:2f: 6c:a6:14:60:07:b0:35:5c:6e:8d:1e:47:7a:e9:5a:e1:92:dc: 5b:f0:37:7d:31:ff:ee:3e:a6:38:c9:0d:4e:60:ef:bb:7c:75: d7:86:cd:56:50:12:3e:7e:f1:c0:03:9b:e6:b8:c3:12:12:fb: d0:49:0e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHdXj949o2BfZb5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NTg0Y2EwMWQtMjliNS00MjhkLTljZWEtZmU4NTE3OTAyZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/GNcl5CAeEt/LuOaTTjTJiyBYD/jbP9RqQS JCj5ZNvoTu4WH/F3ihfUu5zoqGcIo+dbBpYLZilZQnQbl+v2JAX/rS27EVQ+d6Mi loZMW1Te8IRZPfMZLljLdpiNcXZl6eU1SFIjwFlrGKDzbNJjetrRor1UL+Ro4NGO IznrpAYw6xdSV0M/yg3ZIiNl92k3+dpdwq7a1gMH85JVUlVGfh9MRE+3JU/W3x7t Ds1y9hASTxU2oSVXj5B5K3+n6lgWOTEYWCP5K4XojtQN+v3YnLFDxV9QAxYDH9LJ 2k7YuqZK3fmXYuK2VcbJVMXRjH+KrGcipXTV0QErimEnUh4eswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe4lmdHy/862qfe3HzKAsC+a4l2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOGM5ZGE4ODYtODU5Mi0z ZDdlLThiNjAtNjkzMjIzODc1ZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGMXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF3ulzAaUSHg6CfLS9+rmacr7DdpVU973gyKI57uuphoZFrijs57RRn rjss6zv0+w44xAKlwjrhs1NIuyL1PQOXoe4BahW67OE9cSo88XPWUx26KmnCIXxM B4W061sH1LhzM8EwJpW9XXtsU+UjwCjOwgh2TArH7o+fBvKMZTRh7jAvNKn6p2mP L2MvCJU0ftzPrXP0ZQGXjsMkQtQqV7jfuo1e1/k7STT/IRl8pWulmBc0hRjCioSM bX8UtA7MjOPCrESkL2ymFGAHsDVcbo0eR3rpWuGS3FvwN30x/+4+pjjJDU5g77t8 ddeGzVZQEj5+8cADm+a4wxIS+9BJDoY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:34:11 2025 by rpki-client