$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2420a65-1e22-38ea-8651-4a1418fce6a2.roa File: a2420a65-1e22-38ea-8651-4a1418fce6a2.roa (raw, json) Hash identifier: XfXWhoK/1Nu9fK4gW7xMtfnsd+WvHLbbAsMtd6bqwTk= Subject key identifier: C9:C9:91:62:2E:09:20:EF:84:67:AE:93:D4:0C:AF:07:76:B3:F3:5F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B3126F16F4196138332CB72A0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2420a65-1e22-38ea-8651-4a1418fce6a2.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 7843 IP address blocks: 150.224.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f1:6f:41:96:13:83:32:cb:72:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=05e8d6ca-bd6d-47f9-ab83-5a40a5d2ae6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:78:d7:1e:90:02:b9:9d:7a:11:51:d6:ef: fa:33:78:81:6f:e4:6e:bb:b3:82:f4:96:d9:b3:3b: 8b:9f:e2:ad:cd:f7:cd:23:bb:82:11:13:41:80:38: 9b:b8:89:2d:62:47:d5:14:ec:ab:74:af:c0:db:8b: 57:be:e4:1d:15:e2:b0:67:21:b9:f9:4f:56:de:3e: 0f:f1:5b:b9:3d:22:44:0f:48:18:b0:cb:3c:8a:ce: a3:7c:35:43:67:41:0c:2f:22:15:a4:26:01:94:86: 19:33:70:d8:79:68:13:eb:da:6a:f1:4b:cc:34:88: 4f:4d:81:5c:8a:fa:c3:26:5b:32:3d:35:39:df:46: 02:23:19:25:ef:fb:dd:9b:ea:9a:41:e6:70:4b:56: 18:0d:c9:3f:4b:6c:14:61:74:cf:07:2e:f1:c4:b1: 4d:a3:04:e9:03:ef:fa:35:d7:d0:90:08:9c:1c:11: b5:aa:f4:dd:74:77:aa:4c:ee:eb:9d:b3:3c:6d:ca: 21:3e:a4:04:62:ce:25:d7:77:fd:d8:49:41:0d:6f: 2c:fb:78:98:a1:25:64:f5:67:c2:ac:4c:54:1e:cd: 18:74:e7:44:bc:c4:cc:84:aa:af:01:7c:c3:6d:d0: ca:52:93:79:66:65:6a:10:57:ab:0c:12:c5:c3:35: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C9:91:62:2E:09:20:EF:84:67:AE:93:D4:0C:AF:07:76:B3:F3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2420a65-1e22-38ea-8651-4a1418fce6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 150.224.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:39:1b:1a:68:99:b4:33:b2:eb:e8:41:b2:d0:da:02:81:46: 2d:30:f3:4d:3d:b2:f1:6e:e5:20:81:7e:87:c1:90:3a:7a:8b: af:6a:ee:a5:22:88:69:d1:41:c7:ba:6f:95:3b:9b:cc:d6:5b: 16:c7:7a:e0:e6:19:78:a3:f4:40:44:a5:74:9f:78:5a:15:a0: 5a:1a:17:b0:09:e7:3e:02:5e:33:3a:7d:ed:47:9b:b2:bb:3e: 8a:1d:24:52:7d:a5:eb:1b:6e:b8:c4:08:56:c9:d0:aa:0f:04: 17:72:8c:dc:f5:03:95:d6:d4:30:c7:62:ab:86:45:56:4d:b1: ad:75:68:c5:8c:22:25:b8:4a:b9:48:cd:7d:b5:bf:a3:3b:66: be:20:16:5a:38:71:63:a8:d5:9a:40:8b:46:4e:bd:66:3a:ec: f5:ff:ef:3e:fe:39:fd:10:ab:94:7f:4e:c4:f8:f2:5b:d0:9a: 67:a1:5d:a0:08:f5:93:60:9f:91:43:a4:34:2c:03:99:f0:e9: d9:db:26:96:61:5d:1f:a6:c5:4a:8d:15:b7:6a:d2:a2:23:04: e9:02:0e:33:24:b2:dd:90:d0:28:da:69:49:9d:8d:5e:c2:0a: bc:4d:cc:c1:dd:42:53:39:78:11:d1:0e:ee:e9:83:eb:05:ba: bb:b7:72:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvFvQZYTgzLLcqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk MDVlOGQ2Y2EtYmQ2ZC00N2Y5LWFiODMtNWE0MGE1ZDJhZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rx41x6QArmdehFR1u/6M3iBb+Ruu7OC9JbZ szuLn+KtzffNI7uCERNBgDibuIktYkfVFOyrdK/A24tXvuQdFeKwZyG5+U9W3j4P 8Vu5PSJED0gYsMs8is6jfDVDZ0EMLyIVpCYBlIYZM3DYeWgT69pq8UvMNIhPTYFc ivrDJlsyPTU530YCIxkl7/vdm+qaQeZwS1YYDck/S2wUYXTPBy7xxLFNowTpA+/6 NdfQkAicHBG1qvTddHeqTO7rnbM8bcohPqQEYs4l13f92ElBDW8s+3iYoSVk9WfC rExUHs0YdOdEvMTMhKqvAXzDbdDKUpN5ZmVqEFerDBLFwzWVbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnJkWIuCSDvhGeuk9QMrwd2s/NfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTI0MjBhNjUtMWUyMi0z OGVhLTg2NTEtNGExNDE4ZmNlNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBluBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw5GxpombQzsuvoQbLQ2gKBRi0w8009svFu5SCBfofBkDp6i69q7qUi iGnRQce6b5U7m8zWWxbHeuDmGXij9EBEpXSfeFoVoFoaF7AJ5z4CXjM6fe1Hm7K7 PoodJFJ9pesbbrjECFbJ0KoPBBdyjNz1A5XW1DDHYquGRVZNsa11aMWMIiW4SrlI zX21v6M7Zr4gFlo4cWOo1ZpAi0ZOvWY67PX/7z7+Of0Qq5R/TsT48lvQmmehXaAI 9ZNgn5FDpDQsA5nw6dnbJpZhXR+mxUqNFbdq0qIjBOkCDjMkst2Q0CjaaUmdjV7C CrxNzMHdQlM5eBHRDu7pg+sFuru3csc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:39:36 2025 by rpki-client