$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa File: 3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa (raw, json) Hash identifier: DTfT9W2eWwvLbCy73norAiVOo4HggFtaL7k58zVuz78= Subject key identifier: 87:DB:03:C3:A4:4B:34:2E:3B:B5:DE:AE:A1:83:A3:FC:88:E5:4F:E5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B9872478EA3D3F146DF3EC380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 13671 IP address blocks: 68.128.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:47:8e:a3:d3:f1:46:df:3e:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=89437bb9-c9ae-4133-9bcc-b93e8ab6e8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:23:19:ab:fa:9d:5b:71:8d:2a:fd:ba:7f:3f: bb:02:ec:e3:a2:24:04:f5:84:31:8f:a0:90:91:25: bd:f9:10:7d:60:3f:f9:bf:48:33:12:98:77:e3:b6: e6:04:ae:25:e8:8d:73:c2:e9:e8:f0:8a:42:83:69: e8:d7:6a:15:57:7e:8a:41:09:4f:ef:47:fd:2c:d4: da:b4:42:8c:02:09:5f:7b:0a:6a:da:12:f5:3c:9e: 02:63:55:86:54:eb:9f:7c:9d:7c:e5:7c:15:c7:43: 74:47:1b:62:f3:86:7c:27:d9:ed:f2:5e:82:b2:2a: 17:ee:92:a3:a4:2f:eb:80:8e:37:98:39:96:40:39: 98:0a:49:d4:a4:64:8f:e2:7c:81:fc:48:f9:6e:ae: b1:59:f4:2f:3f:4e:d8:89:da:1c:de:e4:10:c8:27: a9:7e:b1:69:2c:9e:cb:6a:c7:22:d5:eb:1b:4e:1a: 9b:95:e6:34:dc:cd:a7:08:39:a7:c9:cf:e2:23:9d: fa:00:93:60:74:86:8f:a9:ab:aa:df:4f:10:92:19: a3:ff:79:99:4f:e9:5c:23:fa:78:db:5a:2f:9b:16: 3c:83:b7:76:6b:b8:3c:83:b5:9a:a1:b3:68:57:30: 17:bd:f3:4c:b2:83:8c:8a:3b:c3:e7:90:49:69:49: c8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DB:03:C3:A4:4B:34:2E:3B:B5:DE:AE:A1:83:A3:FC:88:E5:4F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a8:59:39:d1:05:fd:22:d6:40:4e:33:47:95:be:bd:69:b9: 79:0b:e7:23:0c:7f:a2:75:17:3a:08:c0:b0:42:2e:3f:fb:7d: 2f:af:a1:b6:37:0b:e0:9e:3a:6f:f4:10:d5:f8:29:5b:de:73: 0b:a6:36:f4:8b:b1:e0:86:1d:61:55:96:4a:4b:7a:cb:c0:5e: 08:6e:aa:ef:d4:83:38:c1:3a:c4:c3:2f:f8:ac:0e:62:b2:8e: af:bc:6a:df:f5:fa:3e:7f:0e:2f:14:54:51:be:e7:cf:a3:8d: 6f:2e:75:7b:91:8c:0d:13:8f:e2:fd:65:26:32:2f:f1:de:8a: 43:33:f4:b3:60:9b:2b:74:f1:f1:b7:ef:2e:1e:cf:45:d6:d9: 5a:db:88:02:f5:95:49:2b:e6:74:51:79:ff:bb:5c:a4:e9:a7: d2:c0:9d:84:28:d8:3e:d1:05:09:01:64:6a:7d:bc:73:6e:33: d9:48:8a:f4:fe:86:97:cc:91:2e:e8:f1:81:92:04:50:c6:77: 71:f1:58:52:21:1a:4a:9d:ed:59:3f:2f:e2:18:26:7b:a3:b9: 90:57:4f:22:8d:94:cb:90:6f:3f:04:d7:d0:b2:4d:0b:04:d5: bd:b9:ec:7a:fe:fb:27:bb:8b:83:4c:d4:8d:d7:50:0e:1c:28: 43:48:51:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckeOo9PxRt8+w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk ODk0MzdiYjktYzlhZS00MTMzLTliY2MtYjkzZThhYjZlOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iMZq/qdW3GNKv26fz+7AuzjoiQE9YQxj6CQ kSW9+RB9YD/5v0gzEph347bmBK4l6I1zwuno8IpCg2no12oVV36KQQlP70f9LNTa tEKMAglfewpq2hL1PJ4CY1WGVOuffJ185XwVx0N0Rxti84Z8J9nt8l6CsioX7pKj pC/rgI43mDmWQDmYCknUpGSP4nyB/Ej5bq6xWfQvP07Yidoc3uQQyCepfrFpLJ7L asci1esbThqbleY03M2nCDmnyc/iI536AJNgdIaPqauq308Qkhmj/3mZT+lcI/p4 21ovmxY8g7d2a7g8g7WaobNoVzAXvfNMsoOMijvD55BJaUnICwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfbA8OkSzQuO7XerqGDo/yI5U/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2M3ZGI5YjktNzI3ZC0z OWNmLThkZmItYjNkODY5OTFkOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqoWTnRBf0i1kBOM0eVvr1puXkL5yMMf6J1FzoIwLBCLj/7fS+vobY3 C+CeOm/0ENX4KVvecwumNvSLseCGHWFVlkpLesvAXghuqu/UgzjBOsTDL/isDmKy jq+8at/1+j5/Di8UVFG+58+jjW8udXuRjA0Tj+L9ZSYyL/HeikMz9LNgmyt08fG3 7y4ez0XW2VrbiAL1lUkr5nRRef+7XKTpp9LAnYQo2D7RBQkBZGp9vHNuM9lIivT+ hpfMkS7o8YGSBFDGd3HxWFIhGkqd7Vk/L+IYJnujuZBXTyKNlMuQbz8E19CyTQsE 1b257Hr++ye7i4NM1I3XUA4cKENIUT4= -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:10 2025 by rpki-client