$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c61109c4-5922-3548-90f3-8b7a35daff56.roa File: c61109c4-5922-3548-90f3-8b7a35daff56.roa (raw, json) Hash identifier: NlrEdDFWYzwj0ruN/qJF7D3wmap9jU634QyxhQ/WbsI= Subject key identifier: 8F:C7:BC:8C:46:37:DC:82:3C:7A:83:39:B2:5C:88:21:60:40:F7:D0 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D32F2609DB1D0B28B3D60 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c61109c4-5922-3548-90f3-8b7a35daff56.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 24.231.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:32:f2:60:9d:b1:d0:b2:8b:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=4f63e40d-649e-4f1d-89c7-9d311ec422e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:9a:e1:45:96:ef:34:1c:a1:ad:64:46:1a: 0d:54:8e:bf:df:db:f9:9a:cd:d8:1b:b3:ba:90:8f: db:42:b9:c7:15:6b:95:8c:b4:d8:a2:56:31:65:d1: e9:0e:5e:f6:f6:e4:8d:6c:f4:51:2d:f3:ab:49:50: 1e:b7:99:e2:cd:7c:7e:5e:f5:c7:07:54:65:22:2b: 52:4a:7c:0a:0c:39:b2:94:dc:9c:d3:97:68:c2:6c: 45:86:a8:46:0d:e6:c7:33:82:a7:a4:7c:50:4f:7d: ad:4b:fe:53:8d:86:75:a1:1a:30:ea:5f:05:0f:45: f4:f1:1b:3a:c8:c6:96:c2:f5:d4:b2:21:7f:aa:b9: 2f:6b:20:59:3b:75:34:6f:5e:2d:06:98:ba:96:77: 42:67:0d:e1:67:70:e4:96:6a:10:16:d7:a3:0e:81: f4:91:cf:df:f9:96:48:a4:1b:bd:05:2b:94:88:c4: f9:a2:a3:4c:e7:57:d7:5d:36:a0:e5:c4:e9:4d:a6: 1a:c4:14:4c:33:17:ea:db:92:1c:c4:ad:8e:32:74: 8d:02:ed:7c:c7:94:02:16:d0:83:82:21:f9:6e:ac: 12:8a:6e:cf:0f:21:3b:bb:3d:29:65:23:0f:67:32: b7:ce:eb:36:9c:f8:18:4f:d7:d5:08:99:9f:0b:30: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C7:BC:8C:46:37:DC:82:3C:7A:83:39:B2:5C:88:21:60:40:F7:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c61109c4-5922-3548-90f3-8b7a35daff56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.231.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a0:56:ec:23:3e:e2:90:52:1b:97:18:60:2e:86:1a:6d:28: ca:0f:3c:c7:eb:51:53:61:c9:aa:c4:68:71:d1:77:f7:d8:1e: 13:7f:43:af:26:c4:6b:9e:4e:b4:bc:bd:77:ac:6c:56:8a:26: 0d:d4:57:b9:59:a4:66:16:1a:03:0a:6d:93:fd:45:ff:e7:cb: 81:df:8f:d1:1c:19:01:e3:dc:fb:95:92:4f:16:98:a5:77:ee: 39:49:2f:f6:ff:e1:98:1f:dd:db:01:1d:10:b2:af:4b:b7:36: 85:e4:31:b4:a7:d1:47:ee:34:c7:bd:10:8d:57:f9:e7:c6:7c: 68:d2:3c:03:d9:90:78:34:fd:89:bf:81:8d:7b:0a:f3:b8:5c: 6e:65:42:48:b9:13:75:79:af:11:bb:19:14:b7:39:75:aa:9d: f9:0f:ad:cf:f4:22:82:ab:de:e1:9b:4a:0c:c7:40:99:cd:9d: 9a:21:08:6c:42:41:cd:0e:3f:ad:89:8b:ce:ea:6d:09:75:fc: bb:bc:43:3f:0e:cc:8c:80:96:c7:ba:e1:7a:84:8b:7e:f7:b9: a4:a7:c6:13:38:f6:a7:b5:41:72:d7:f9:da:8a:2f:da:03:c9: 51:8b:d3:22:32:16:99:c1:69:0e:9c:2d:88:b5:4a:09:6b:1c: a7:00:e3:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHTLyYJ2x0LKLPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NGY2M2U0MGQtNjQ5ZS00ZjFkLTg5YzctOWQzMTFlYzQyMmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNua4UWW7zQcoa1kRhoNVI6/39v5ms3YG7O6 kI/bQrnHFWuVjLTYolYxZdHpDl729uSNbPRRLfOrSVAet5nizXx+XvXHB1RlIitS SnwKDDmylNyc05dowmxFhqhGDebHM4KnpHxQT32tS/5TjYZ1oRow6l8FD0X08Rs6 yMaWwvXUsiF/qrkvayBZO3U0b14tBpi6lndCZw3hZ3DklmoQFtejDoH0kc/f+ZZI pBu9BSuUiMT5oqNM51fXXTag5cTpTaYaxBRMMxfq25IcxK2OMnSNAu18x5QCFtCD giH5bqwSim7PDyE7uz0pZSMPZzK3zus2nPgYT9fVCJmfCzAsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/HvIxGN9yCPHqDObJciCFgQPfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYzYxMTA5YzQtNTkyMi0z NTQ4LTkwZjMtOGI3YTM1ZGFmZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGOfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABygVuwjPuKQUhuXGGAuhhptKMoPPMfrUVNhyarEaHHRd/fYHhN/Q68m xGueTrS8vXesbFaKJg3UV7lZpGYWGgMKbZP9Rf/ny4Hfj9EcGQHj3PuVkk8WmKV3 7jlJL/b/4Zgf3dsBHRCyr0u3NoXkMbSn0UfuNMe9EI1X+efGfGjSPAPZkHg0/Ym/ gY17CvO4XG5lQki5E3V5rxG7GRS3OXWqnfkPrc/0IoKr3uGbSgzHQJnNnZohCGxC Qc0OP62Ji87qbQl1/Lu8Qz8OzIyAlse64XqEi373uaSnxhM49qe1QXLX+dqKL9oD yVGL0yIyFpnBaQ6cLYi1SglrHKcA41c= -----END CERTIFICATE-----Generated at Mon Oct 20 05:25:35 2025 by rpki-client