$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa File: a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa (raw, json) Hash identifier: qWtp/tycZ8bAxe4PcBmtvi3ZN/YEoqa5nFE9Vsr37tY= Subject key identifier: 51:32:AC:3C:B5:20:EE:C7:AC:90:66:A4:9B:42:70:90:E6:3A:C5:63 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D3FE77ECFC00EAAD79320 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 66.168.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:3f:e7:7e:cf:c0:0e:aa:d7:93:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=6641bd73-d211-444a-91d1-42a76a4a5a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:3b:18:c1:c9:fd:fd:09:84:cf:f3:71:98: 51:95:fa:27:9f:31:43:70:a5:bd:78:58:cb:1c:fe: 63:da:60:f0:af:d9:e9:db:ce:14:07:7a:21:d7:40: 5c:d7:cb:04:b3:b1:a6:69:5f:4f:c2:cf:ca:e2:5e: 06:d7:cd:00:5a:84:08:f7:0d:92:0b:90:c7:8c:ba: 65:fa:0b:8a:66:69:d1:18:16:79:a6:d3:5b:05:f1: 2b:35:e0:9a:cd:75:54:b9:07:80:9f:0b:72:7f:a8: 1f:6f:de:49:78:b5:c2:26:02:8e:69:d4:e3:5f:76: 71:b5:27:26:e8:49:41:7c:8e:e9:e9:63:18:cf:63: 7a:84:aa:20:cf:d1:ee:e3:6a:25:eb:36:00:1d:c5: 89:13:99:86:95:c6:f9:13:18:73:d8:c3:11:a5:d2: 2d:d1:9f:02:c3:33:19:ff:15:34:14:fb:92:d5:5e: db:fe:c3:3d:48:05:76:10:54:d7:b4:90:27:cf:61: 30:4c:e0:07:24:cd:1b:31:84:a1:57:60:13:7f:a9: d5:9b:a0:5a:6d:17:b3:75:e6:7a:fa:d5:ec:2f:5c: cd:57:f0:ed:9f:c5:01:3d:76:68:24:19:c7:75:61: 26:b2:65:71:73:c9:52:9f:cf:a9:63:df:f6:65:b4: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:32:AC:3C:B5:20:EE:C7:AC:90:66:A4:9B:42:70:90:E6:3A:C5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.168.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:f5:84:7f:b1:eb:a4:40:f9:55:60:60:3e:bd:19:37:00:05: 70:bf:a2:7d:ef:92:47:b0:5e:50:bc:4d:29:83:c4:1e:1a:80: a0:5d:76:e5:ac:17:fd:e9:70:00:08:70:e9:1d:95:da:a3:1a: 77:f8:fa:1e:50:2c:db:65:1b:8c:5d:36:63:7b:30:9b:c9:db: d9:2b:35:c1:1d:b8:0b:a1:1e:f6:cc:97:30:6c:ec:ca:0b:40: 9b:1a:a7:00:1b:e5:ca:43:95:08:e8:f1:0d:23:bc:12:ba:15: 72:ae:fd:e5:b0:8b:50:59:1d:52:63:5e:c1:ee:7f:45:58:95: a8:96:95:f7:02:a1:b3:9e:36:37:b7:2c:1c:05:cd:5d:a8:91: 73:87:d9:08:13:ed:f5:27:95:bf:0d:9d:f0:d6:89:0d:17:32: f4:32:c4:a8:c0:50:ab:a4:b2:cf:b6:3c:0e:02:4f:99:44:0c: b5:1e:34:cf:ea:21:c0:2c:86:b2:c3:65:2b:81:38:92:fc:91: eb:00:2b:05:07:1c:9f:56:05:66:cd:4f:7b:0b:4e:81:5a:3c: f9:5d:39:30:e7:e7:62:f9:79:39:26:f9:8f:53:e5:53:d3:c9: ea:4f:4d:10:5f:22:9f:fa:07:f9:7a:96:a1:ff:c2:bb:68:e5: 57:8b:0e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHT/nfs/ADqrXkyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NjY0MWJkNzMtZDIxMS00NDRhLTkxZDEtNDJhNzZhNGE1YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiE7GMHJ/f0JhM/zcZhRlfonnzFDcKW9eFjL HP5j2mDwr9np284UB3oh10Bc18sEs7GmaV9Pws/K4l4G180AWoQI9w2SC5DHjLpl +guKZmnRGBZ5ptNbBfErNeCazXVUuQeAnwtyf6gfb95JeLXCJgKOadTjX3ZxtScm 6ElBfI7p6WMYz2N6hKogz9Hu42ol6zYAHcWJE5mGlcb5Exhz2MMRpdIt0Z8CwzMZ /xU0FPuS1V7b/sM9SAV2EFTXtJAnz2EwTOAHJM0bMYShV2ATf6nVm6BabRezdeZ6 +tXsL1zNV/Dtn8UBPXZoJBnHdWEmsmVxc8lSn8+pY9/2ZbS/vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEyrDy1IO7HrJBmpJtCcJDmOsVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTVhZmFhM2YtOWVkYS0z ODkwLWFiMDMtZTEwYzIwYmE3NGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQqgiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALD1hH+x66RA+VVgYD69GTcABXC/on3vkkewXlC8TSmDxB4agKBdduWs F/3pcAAIcOkdldqjGnf4+h5QLNtlG4xdNmN7MJvJ29krNcEduAuhHvbMlzBs7MoL QJsapwAb5cpDlQjo8Q0jvBK6FXKu/eWwi1BZHVJjXsHuf0VYlaiWlfcCobOeNje3 LBwFzV2okXOH2QgT7fUnlb8NnfDWiQ0XMvQyxKjAUKukss+2PA4CT5lEDLUeNM/q IcAshrLDZSuBOJL8kesAKwUHHJ9WBWbNT3sLToFaPPldOTDn52L5eTkm+Y9T5VPT yepPTRBfIp/6B/l6lqH/wrto5VeLDks= -----END CERTIFICATE-----Generated at Mon Oct 20 01:58:51 2025 by rpki-client