$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa File: af075a20-4673-3bd1-bb12-ab58c38e8135.roa (raw, json) Hash identifier: G1v2Mqj8+vSUiErBqa99+QKbDJHb3siHedgZ+35BrGw= Subject key identifier: 00:A0:91:B9:67:32:B6:30:56:07:98:72:E4:D3:3E:DF:27:7A:7E:5E Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D34AEE5613B85C579CDC0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 71.87.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:34:ae:e5:61:3b:85:c5:79:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=9dbb2599-a976-4078-9e45-45775005ac81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:79:a3:d1:46:2b:df:02:1b:ba:dc:7c:34: b5:47:23:5c:b6:90:4a:81:5e:27:1b:b5:66:fc:ac: 82:43:0f:0f:b9:a3:41:3b:1a:c3:61:6b:85:53:9a: 74:37:a7:1f:f5:23:e5:35:42:46:df:a1:59:50:70: 95:5c:7d:90:b9:3b:e4:e6:d3:1c:32:1d:dc:f2:a2: 41:36:10:eb:dc:3a:4f:70:93:e6:7c:cc:ca:0b:03: 85:62:41:27:30:53:b9:29:4d:d3:ad:c3:0e:f2:61: fa:f5:39:fa:bc:30:4d:67:25:dc:76:b3:a9:4e:fa: 33:35:4a:16:45:bc:d4:3b:16:a2:80:63:8f:d0:3d: 0a:75:a2:ea:b1:5b:c1:de:16:d9:96:66:78:85:1c: 3e:9e:59:f3:6c:2b:37:13:17:c8:3f:c3:ab:97:a9: 13:b8:60:88:e2:a7:c7:00:89:26:43:95:98:81:8f: 1a:0b:5c:b2:49:42:b1:e3:65:21:d4:b6:2e:c7:63: 32:3f:ce:35:9a:cf:42:3c:d3:b6:5c:0e:eb:c5:7c: 80:a7:d3:c9:d8:f9:56:a3:e2:ef:09:73:4c:39:ff: 56:ff:b3:45:1b:87:c0:bc:b1:4b:a0:c7:79:14:f4: 2b:e1:70:33:30:7d:45:50:7d:98:65:18:38:e2:45: 4f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A0:91:B9:67:32:B6:30:56:07:98:72:E4:D3:3E:DF:27:7A:7E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af075a20-4673-3bd1-bb12-ab58c38e8135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.87.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a1:d2:7e:bd:82:41:e8:cd:ce:03:6e:13:6f:88:df:14:f7: 1b:3c:d6:a4:66:bb:01:3a:86:6e:12:e5:c1:8c:5c:d2:53:30: 63:b5:c0:ae:69:78:98:96:d0:33:d1:de:4c:b2:22:40:e1:97: 2a:e8:19:40:1a:dd:64:e8:2e:2f:59:e8:66:2c:12:8e:9b:e1: 56:90:55:d4:ad:f1:4f:8c:79:d3:fe:b4:b4:bc:b7:a3:74:1f: fe:ce:be:d0:2a:6a:a4:ed:47:7a:07:b8:cf:73:fc:7a:18:d8: 75:60:4f:97:4b:b2:3d:3a:a8:1b:3e:0c:a3:c7:09:5f:7c:1f: 9f:1f:e0:8a:96:82:a1:70:28:31:73:c5:35:ba:65:4b:6e:39: 3b:ef:80:8c:b5:db:04:82:26:5c:e4:b6:0e:6c:84:b3:94:29: cb:c8:f8:77:9e:3e:b9:62:ee:c7:24:fc:d7:00:7d:d3:b6:0a: ac:5f:70:50:7d:77:06:99:77:59:2c:89:db:1f:26:c9:6d:52: ad:78:e7:30:bf:bb:bf:30:da:ac:15:dc:95:0d:a3:f0:50:20: 15:e4:48:10:f1:91:41:9e:28:55:11:aa:21:79:7c:05:ad:70: 10:ae:00:28:1c:d4:f8:a0:40:b3:25:9c:af:74:07:82:25:7d: 20:42:43:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHTSu5WE7hcV5zcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OWRiYjI1OTktYTk3Ni00MDc4LTllNDUtNDU3NzUwMDVhYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy15o9FGK98CG7rcfDS1RyNctpBKgV4nG7Vm /KyCQw8PuaNBOxrDYWuFU5p0N6cf9SPlNUJG36FZUHCVXH2QuTvk5tMcMh3c8qJB NhDr3DpPcJPmfMzKCwOFYkEnMFO5KU3TrcMO8mH69Tn6vDBNZyXcdrOpTvozNUoW RbzUOxaigGOP0D0KdaLqsVvB3hbZlmZ4hRw+nlnzbCs3ExfIP8Orl6kTuGCI4qfH AIkmQ5WYgY8aC1yySUKx42Uh1LYux2MyP841ms9CPNO2XA7rxXyAp9PJ2PlWo+Lv CXNMOf9W/7NFG4fAvLFLoMd5FPQr4XAzMH1FUH2YZRg44kVPTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACgkblnMrYwVgeYcuTTPt8nen5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWYwNzVhMjAtNDY3My0z YmQxLWJiMTItYWI1OGMzOGU4MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR1foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGh0n69gkHozc4DbhNviN8U9xs81qRmuwE6hm4S5cGMXNJTMGO1wK5p eJiW0DPR3kyyIkDhlyroGUAa3WToLi9Z6GYsEo6b4VaQVdSt8U+MedP+tLS8t6N0 H/7OvtAqaqTtR3oHuM9z/HoY2HVgT5dLsj06qBs+DKPHCV98H58f4IqWgqFwKDFz xTW6ZUtuOTvvgIy12wSCJlzktg5shLOUKcvI+HeePrli7sck/NcAfdO2CqxfcFB9 dwaZd1ksidsfJsltUq145zC/u78w2qwV3JUNo/BQIBXkSBDxkUGeKFURqiF5fAWt cBCuACgc1PigQLMlnK90B4IlfSBCQ6k= -----END CERTIFICATE-----Generated at Mon Oct 20 02:16:47 2025 by rpki-client