$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b644cfe2-b9a6-3efe-9ea9-7fd79c654755.roa File: b644cfe2-b9a6-3efe-9ea9-7fd79c654755.roa (raw, json) Hash identifier: +oBEIgGDjdZh+GboqgEQM0rhBfV1EnBh6fX94McOH94= Subject key identifier: 3D:BE:D6:ED:5F:19:ED:A0:2C:43:50:EF:C3:12:C2:FD:0F:B8:D1:7B Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DE9F095260F0C0650F540 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b644cfe2-b9a6-3efe-9ea9-7fd79c654755.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 66.188.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:e9:f0:95:26:0f:0c:06:50:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=22716069-00b3-427b-8350-7103c1900405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:3d:34:7a:da:af:4a:98:4b:e9:6d:de:70: bc:80:94:60:c0:72:b9:9e:cf:00:27:61:66:77:48: 69:f0:54:67:4d:99:81:7f:2d:c3:22:09:cc:68:f2: 7a:bb:14:71:d8:e3:f2:b8:40:89:17:a4:52:56:88: 81:c8:0e:50:56:f9:05:16:02:e5:c9:6c:90:6a:b2: 84:7e:6e:e1:9f:3b:5d:88:8d:b1:16:a7:e1:d6:e6: bd:57:41:a0:b0:b0:4d:5e:81:fa:94:b8:5b:f6:f7: 27:87:2a:be:b3:cb:00:ad:b8:e8:b6:81:0b:08:a0: c0:9d:b0:c7:22:ac:56:9b:9b:45:f7:39:32:d9:7a: a1:0e:49:a5:23:1f:8e:52:49:1f:1c:e0:7e:54:24: 6c:7a:b3:c2:3c:33:c1:0b:bf:08:d7:37:84:e2:41: be:98:56:08:06:30:72:2e:03:1c:33:d8:85:1c:af: 22:fd:f7:c6:4a:84:74:64:dc:e0:66:ed:6f:67:14: 83:16:7e:d7:72:5c:bd:eb:71:23:bb:cf:0a:83:8b: fa:1f:14:bf:fd:08:0b:0a:c4:46:e3:49:d9:81:35: 2b:a1:c5:76:22:1d:ab:9b:8c:b7:93:bf:3d:3b:ae: 10:86:f0:1e:d2:a8:da:d1:d2:46:55:90:b0:85:aa: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BE:D6:ED:5F:19:ED:A0:2C:43:50:EF:C3:12:C2:FD:0F:B8:D1:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b644cfe2-b9a6-3efe-9ea9-7fd79c654755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.188.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:33:c0:90:ea:f1:9b:3c:bb:de:00:ab:11:9f:a0:90:00:46: e3:3a:25:03:51:20:7a:71:87:8e:0c:6c:be:16:7a:08:6e:8d: 8f:d6:7b:4b:f6:4c:0e:83:0f:45:30:dd:a6:c9:3b:2c:af:22: e7:67:c1:32:04:65:bc:9f:3d:35:1c:0e:dd:dd:32:d2:9a:5e: e9:af:cb:9e:87:40:94:67:4a:4a:fa:87:54:43:a3:f9:d4:f5: 9d:6c:99:28:c9:2b:5f:6b:11:d9:0d:ea:5f:da:fa:84:ba:c1: 02:75:6f:5c:8c:d7:57:84:e7:9e:36:00:62:55:cf:d9:9e:c0: 1f:1a:82:cb:35:25:4c:23:8c:65:49:0a:4a:67:49:66:62:42: 0e:ae:e0:00:f2:43:a2:70:99:60:89:2a:b7:a8:58:6c:9c:4f: de:1a:ad:3c:5b:dd:e5:2a:0a:63:49:47:b2:26:5f:43:06:16: fd:45:46:26:17:20:aa:fa:62:5c:e6:ca:18:6a:b8:c1:f4:5b: 57:d8:11:f8:d2:72:1b:75:21:01:d6:8d:73:73:56:93:00:e5: e7:5d:6c:1c:90:9d:4a:a2:9b:0f:6f:bf:1f:f6:31:88:1b:c5: 4d:70:5b:ae:5c:d7:87:18:fa:7f:28:1a:0f:ac:4d:da:00:a8: bb:43:98:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHenwlSYPDAZQ9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MjI3MTYwNjktMDBiMy00MjdiLTgzNTAtNzEwM2MxOTAwNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnE9NHrar0qYS+lt3nC8gJRgwHK5ns8AJ2Fm d0hp8FRnTZmBfy3DIgnMaPJ6uxRx2OPyuECJF6RSVoiByA5QVvkFFgLlyWyQarKE fm7hnztdiI2xFqfh1ua9V0GgsLBNXoH6lLhb9vcnhyq+s8sArbjotoELCKDAnbDH IqxWm5tF9zky2XqhDkmlIx+OUkkfHOB+VCRserPCPDPBC78I1zeE4kG+mFYIBjBy LgMcM9iFHK8i/ffGSoR0ZNzgZu1vZxSDFn7Xcly963Eju88Kg4v6HxS//QgLCsRG 40nZgTUrocV2Ih2rm4y3k789O64QhvAe0qja0dJGVZCwhap9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2+1u1fGe2gLENQ78MSwv0PuNF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjY0NGNmZTItYjlhNi0z ZWZlLTllYTktN2ZkNzljNjU0NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQrzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEzwJDq8Zs8u94AqxGfoJAARuM6JQNRIHpxh44MbL4WeghujY/We0v2 TA6DD0Uw3abJOyyvIudnwTIEZbyfPTUcDt3dMtKaXumvy56HQJRnSkr6h1RDo/nU 9Z1smSjJK19rEdkN6l/a+oS6wQJ1b1yM11eE5542AGJVz9mewB8agss1JUwjjGVJ CkpnSWZiQg6u4ADyQ6JwmWCJKreoWGycT94arTxb3eUqCmNJR7ImX0MGFv1FRiYX IKr6YlzmyhhquMH0W1fYEfjScht1IQHWjXNzVpMA5eddbByQnUqimw9vvx/2MYgb xU1wW65c14cY+n8oGg+sTdoAqLtDmEE= -----END CERTIFICATE-----Generated at Mon Oct 20 01:59:17 2025 by rpki-client