$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb7a48b-258c-3ef5-bcb7-e4352567fe62.roa File: 0fb7a48b-258c-3ef5-bcb7-e4352567fe62.roa (raw, json) Hash identifier: DViJ5POpsP65ZqMdgkaKhN1kuJ3wjAwCjis1TWENqmw= Subject key identifier: D2:70:24:0E:C5:F4:91:5B:C1:36:80:5A:46:A9:D4:38:4A:C5:18:09 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B98724A5C57E1918AF1EF5378 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb7a48b-258c-3ef5-bcb7-e4352567fe62.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 13671 IP address blocks: 68.128.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4a:5c:57:e1:91:8a:f1:ef:53:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=76667f37-a6c1-4168-a4af-b66b79adef88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:38:e1:9e:23:cc:ba:7b:c5:d9:66:73:9f:82: d4:e6:f6:ae:06:f0:0a:6d:cf:fb:3a:03:7d:8d:8e: 52:de:a1:95:d3:de:15:ec:db:54:c6:37:3b:b9:5f: cf:77:e8:99:ea:50:fb:cc:f5:06:cb:cf:f1:0c:d3: 80:9e:44:aa:d4:83:3b:b7:74:d9:6c:59:5e:bc:25: f9:6c:49:34:5f:c3:c3:d3:07:1c:e4:b1:8f:cf:a1: 60:f3:fc:9a:59:f7:50:39:a1:7c:49:c9:4b:b9:e3: fa:54:e3:bd:9f:ed:a6:eb:6e:95:bd:47:67:9e:a9: 5a:c8:2b:28:77:52:52:44:c4:61:66:e8:18:ef:0c: 0f:9e:3d:70:ed:0c:0a:1b:2d:54:1d:ba:e0:f4:5f: da:ad:5f:c5:dc:6a:0e:b7:90:11:b0:ae:42:9b:2a: 8d:60:5f:54:ad:60:c8:5c:52:f9:95:67:f7:b3:82: 0f:1b:b1:2b:59:ca:1b:6f:54:e8:10:ab:ca:9f:b6: 6f:95:f0:12:01:f7:5b:a6:86:1e:91:0c:af:d4:ab: df:7b:1e:d6:fe:4a:b2:64:bc:f1:9a:3b:fa:32:62: ae:97:30:57:9c:72:db:ad:c3:a1:58:14:c1:7d:9d: 7d:73:92:3b:7c:25:af:81:4f:f0:24:0f:c9:38:2b: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:70:24:0E:C5:F4:91:5B:C1:36:80:5A:46:A9:D4:38:4A:C5:18:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb7a48b-258c-3ef5-bcb7-e4352567fe62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:15:92:8a:6f:c7:58:00:b6:36:b9:af:90:37:1b:b5:da:65: 6e:a6:2d:32:50:22:ce:d8:36:1a:ae:37:10:f1:fb:aa:b7:78: 48:20:0e:70:38:9d:3a:9d:a1:ae:d5:1e:f4:c4:36:43:c3:66: 57:77:18:9a:2b:e2:79:11:20:35:4b:ab:f5:4c:b5:83:58:4e: be:17:2b:3c:e2:1e:f4:c6:6f:60:e4:b9:f9:0c:d8:d4:ea:e9: b5:af:41:eb:f5:6f:4c:29:f6:18:ae:33:0e:83:1a:2b:b6:a7: eb:b1:fb:79:0f:ca:06:cd:80:df:28:0d:a3:93:89:e6:2a:01: b1:50:88:c9:03:1e:07:2a:89:3c:cc:0e:12:5d:aa:2c:63:67: 2d:ff:e8:1f:3c:33:07:3a:53:17:00:ca:98:bf:5f:67:2d:fc: 70:15:d8:00:f1:f2:6d:5b:0c:a4:64:9d:15:c3:0b:e7:86:53: b1:9d:cf:bc:af:c8:d1:cf:41:c6:12:96:23:f1:8e:68:43:1e: 9b:0d:b0:53:08:08:64:50:25:ce:6d:7b:21:af:50:0d:4d:b3: 4d:04:f1:8a:5e:5a:30:83:89:a8:d8:18:78:87:71:fd:98:e0: dc:f5:b5:9a:d1:c3:03:1e:64:16:72:5d:f9:df:df:cf:c3:84: f7:1a:70:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckpcV+GRivHvU3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NzY2NjdmMzctYTZjMS00MTY4LWE0YWYtYjY2Yjc5YWRlZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTjhniPMunvF2WZzn4LU5vauBvAKbc/7OgN9 jY5S3qGV094V7NtUxjc7uV/Pd+iZ6lD7zPUGy8/xDNOAnkSq1IM7t3TZbFlevCX5 bEk0X8PD0wcc5LGPz6Fg8/yaWfdQOaF8SclLueP6VOO9n+2m626VvUdnnqlayCso d1JSRMRhZugY7wwPnj1w7QwKGy1UHbrg9F/arV/F3GoOt5ARsK5CmyqNYF9UrWDI XFL5lWf3s4IPG7ErWcobb1ToEKvKn7ZvlfASAfdbpoYekQyv1Kvfex7W/kqyZLzx mjv6MmKulzBXnHLbrcOhWBTBfZ19c5I7fCWvgU/wJA/JOCsghQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJwJA7F9JFbwTaAWkap1DhKxRgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGZiN2E0OGItMjU4Yy0z ZWY1LWJjYjctZTQzNTI1NjdmZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgVkopvx1gAtja5r5A3G7XaZW6mLTJQIs7YNhquNxDx+6q3eEggDnA4 nTqdoa7VHvTENkPDZld3GJor4nkRIDVLq/VMtYNYTr4XKzziHvTGb2DkufkM2NTq 6bWvQev1b0wp9hiuMw6DGiu2p+ux+3kPygbNgN8oDaOTieYqAbFQiMkDHgcqiTzM DhJdqixjZy3/6B88Mwc6UxcAypi/X2ct/HAV2ADx8m1bDKRknRXDC+eGU7Gdz7yv yNHPQcYSliPxjmhDHpsNsFMICGRQJc5teyGvUA1Ns00E8YpeWjCDiajYGHiHcf2Y 4Nz1tZrRwwMeZBZyXfnf38/DhPcacK0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:18:16 2025 by rpki-client