$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f419f5e9-909f-3cb8-a94f-2c4738bfd90e.roa File: f419f5e9-909f-3cb8-a94f-2c4738bfd90e.roa (raw, json) Hash identifier: yNsCQ7s2W6HnQ3WWe7R8h5aLSPVWoXk6k8JDeIv3lyI= Subject key identifier: 41:E0:51:52:82:B5:D5:B4:D9:A4:69:4C:51:A7:D4:36:0D:E7:FB:83 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D34EFFB63B8B1A3676200 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f419f5e9-909f-3cb8-a94f-2c4738bfd90e.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 156.19.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:34:ef:fb:63:b8:b1:a3:67:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=eff5afaf-abfa-4cfe-93e5-3bc6d1f9a74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:9b:bb:fb:39:41:f7:1f:8b:44:97:4a:a8: a8:25:33:86:ff:28:71:a8:19:9c:d9:5e:df:ee:80: b9:3b:36:22:86:d0:8e:68:85:0f:69:84:e8:65:2b: 8b:95:3b:8a:ea:21:e4:90:91:b7:39:dc:c6:3a:ba: 71:c3:0b:30:72:2b:6e:d8:f3:01:f9:70:ef:d9:1b: 9c:a0:cf:37:db:e0:56:8d:ac:75:d0:6e:85:5a:e5: d1:7c:60:36:8c:7a:82:2e:18:e2:ed:bf:c3:6e:03: 26:dd:e5:dd:94:f6:ad:02:66:6c:54:72:b4:95:ef: 8d:31:66:50:bd:10:4a:a4:5a:23:ba:e0:41:56:8b: 28:6a:79:4b:50:1a:f0:d6:87:e6:8d:79:3b:f9:ff: 2a:fd:01:56:ca:9a:ba:50:3a:d3:dd:50:9c:76:f6: 90:9f:79:03:9a:79:b2:10:dc:41:9c:a1:45:b6:f8: 44:31:9c:ea:78:78:58:2e:33:31:e4:5e:86:68:f2: 4a:ad:80:7c:33:e4:7d:46:3e:f9:df:8b:30:30:47: 48:7e:ba:84:d4:38:9c:36:7a:bc:4a:e1:8c:4e:da: 2c:6e:8d:1a:e5:56:ac:9d:c1:bd:26:61:62:f6:ea: 69:ad:05:31:cf:c6:70:af:23:62:8c:0c:c2:08:8e: 09:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E0:51:52:82:B5:D5:B4:D9:A4:69:4C:51:A7:D4:36:0D:E7:FB:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f419f5e9-909f-3cb8-a94f-2c4738bfd90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 156.19.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c7:a0:a1:46:97:c6:a2:0d:62:51:92:72:7e:e7:61:76:3f: 0e:b7:06:fc:50:f3:c1:36:75:93:3f:8d:d9:3d:a8:af:06:1d: 54:dd:90:7f:d0:29:a4:0a:62:8c:61:ea:1a:a0:5c:13:df:80: a6:b4:15:6a:30:24:d1:08:08:74:b7:fc:e3:9e:58:61:98:92: 71:d5:da:89:b9:4e:97:57:35:69:9e:c6:a2:0d:53:37:51:2c: b8:89:e3:a5:7e:5c:40:92:0a:50:de:cf:c0:0c:5a:2f:21:13: 16:db:81:b0:bb:6d:74:ea:f7:7c:7a:36:e7:bd:4b:98:a2:b3: a9:14:bd:1d:fd:83:cd:1a:01:ea:29:1d:7d:42:08:f7:a9:15: 1c:56:f3:79:1c:59:dd:b1:14:85:bd:e9:e4:8d:64:d9:f4:78: db:73:63:26:0e:97:fa:2c:1d:af:d2:c4:d2:2e:6c:7d:89:f2: 74:bb:24:39:6c:13:99:8c:44:7a:83:93:d7:05:1c:47:89:08: a8:c2:0d:5c:ed:6f:23:3e:82:b3:b6:8f:b8:cd:cb:c8:15:dd: af:da:da:5b:b9:93:52:c0:89:76:c0:9d:c3:f5:44:ab:20:e6: 36:46:26:77:3d:bc:c7:8c:a5:23:06:7b:67:3f:89:6f:e2:28: 5b:57:4f:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHTTv+2O4saNnYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZWZmNWFmYWYtYWJmYS00Y2ZlLTkzZTUtM2JjNmQxZjlhNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVibu/s5Qfcfi0SXSqioJTOG/yhxqBmc2V7f 7oC5OzYihtCOaIUPaYToZSuLlTuK6iHkkJG3OdzGOrpxwwswcitu2PMB+XDv2Ruc oM832+BWjax10G6FWuXRfGA2jHqCLhji7b/DbgMm3eXdlPatAmZsVHK0le+NMWZQ vRBKpFojuuBBVosoanlLUBrw1ofmjXk7+f8q/QFWypq6UDrT3VCcdvaQn3kDmnmy ENxBnKFFtvhEMZzqeHhYLjMx5F6GaPJKrYB8M+R9Rj7534swMEdIfrqE1DicNnq8 SuGMTtosbo0a5VasncG9JmFi9upprQUxz8ZwryNijAzCCI4JgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHgUVKCtdW02aRpTFGn1DYN5/uDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjQxOWY1ZTktOTA5Zi0z Y2I4LWE5NGYtMmM0NzM4YmZkOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnBPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTHoKFGl8aiDWJRknJ+52F2Pw63BvxQ88E2dZM/jdk9qK8GHVTdkH/Q KaQKYoxh6hqgXBPfgKa0FWowJNEICHS3/OOeWGGYknHV2om5TpdXNWmexqINUzdR LLiJ46V+XECSClDez8AMWi8hExbbgbC7bXTq93x6Nue9S5iis6kUvR39g80aAeop HX1CCPepFRxW83kcWd2xFIW96eSNZNn0eNtzYyYOl/osHa/SxNIubH2J8nS7JDls E5mMRHqDk9cFHEeJCKjCDVztbyM+grO2j7jNy8gV3a/a2lu5k1LAiXbAncP1RKsg 5jZGJnc9vMeMpSMGe2c/iW/iKFtXT74= -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:06 2025 by rpki-client