$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa File: 5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa (raw, json) Hash identifier: /p5DumZ20fM63T84af5VltRYOndwp2lrk1vqJuRZcck= Subject key identifier: A7:27:21:5D:5C:1F:08:AC:FC:60:65:C4:03:CF:CF:E7:29:D5:07:06 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD0ED8D5B185E1264A9038 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 68.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0e:d8:d5:b1:85:e1:26:4a:90:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=9f3c5851-098e-4805-bebd-6489688fa175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:6e:e0:75:84:61:e2:6b:66:0b:50:5c:14: d5:45:7a:43:7e:33:ce:5f:a1:e2:65:56:bf:7f:2b: 3c:f9:6e:ba:07:0d:2f:ba:f8:d0:9a:4a:91:36:39: 60:a1:af:79:77:8b:67:53:b8:88:02:2f:46:22:dc: df:9e:e2:48:10:49:60:9c:82:f4:97:44:b4:d9:48: 21:57:a4:9a:7d:b7:3c:58:70:c4:c4:80:c9:ee:c3: f9:ed:70:e6:89:98:aa:f3:50:71:45:93:81:28:88: 53:c2:0e:57:7c:fc:75:16:91:19:70:4b:fe:5d:0d: ba:26:18:15:82:3d:9e:58:31:c8:87:a8:1f:e1:d5: de:09:62:28:46:c3:34:61:73:40:aa:b3:73:44:b2: e5:1e:de:75:cb:0f:af:8b:5c:ab:db:67:f0:07:e0: 07:e0:83:95:38:18:a0:10:f9:78:81:a4:c5:c0:6b: 86:5a:ce:5b:2f:66:9a:aa:12:1b:41:02:18:50:f7: d9:93:b5:a8:04:46:16:e1:34:fd:9a:15:fe:a6:90: 51:1b:bb:95:34:6a:8e:a4:75:d5:f7:70:7c:8a:f8: ae:47:1d:51:ea:e0:59:5c:8f:c5:b2:2c:86:14:31: 60:9f:8e:95:2e:c0:79:80:b0:68:3d:9c:40:56:96: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:27:21:5D:5C:1F:08:AC:FC:60:65:C4:03:CF:CF:E7:29:D5:07:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f3dc3e8-4b20-35d5-ada5-75b9b55f736c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.132.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:a1:56:4b:2a:50:24:8d:f3:65:ae:82:80:82:13:6e:b5:8a: 57:03:64:4c:76:1e:24:8d:82:bd:a7:be:17:98:d7:b8:4b:96: 1a:91:a0:f8:25:04:df:6f:6a:84:32:4f:e9:31:f6:37:3e:95: b2:f1:2a:aa:b6:6a:66:0a:4d:31:63:63:11:91:9d:32:34:d8: ca:8e:9b:5f:69:32:fa:7a:30:6b:c8:32:af:81:9b:04:2a:ae: 13:f9:e6:37:4d:0d:a8:ba:99:bc:2b:bf:9f:28:1b:f7:9a:ff: 46:c4:27:07:ee:ed:5b:9d:40:94:39:cb:fa:e7:d8:9a:69:76: 72:aa:74:c6:32:44:2d:7c:fa:09:07:b4:25:7c:e2:fa:61:71: 97:8b:ac:e6:d8:27:f7:b4:1f:00:24:66:39:23:f4:ec:73:f4: ec:c9:39:f7:53:0c:f7:39:92:ce:f9:2f:c9:be:b5:51:f3:0a: 47:1e:e4:d6:c1:a1:ba:45:30:b6:9b:54:f6:9a:d1:ba:f9:1a: ca:7a:19:13:05:c5:1e:76:1a:ac:15:dc:59:38:8b:62:d7:b6: e9:79:34:96:6f:90:c7:57:fd:d1:5f:b1:e5:27:31:8a:80:5e: af:e5:92:72:83:41:4b:cd:92:c3:36:39:59:a4:70:6c:fc:40: 0c:d5:89:24 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEur/Q7Y1bGF4SZKkDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OWYzYzU4NTEtMDk4ZS00ODA1LWJlYmQtNjQ4OTY4OGZhMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx25u4HWEYeJrZgtQXBTVRXpDfjPOX6HiZVa/ fys8+W66Bw0vuvjQmkqRNjlgoa95d4tnU7iIAi9GItzfnuJIEElgnIL0l0S02Ugh V6Safbc8WHDExIDJ7sP57XDmiZiq81BxRZOBKIhTwg5XfPx1FpEZcEv+XQ26JhgV gj2eWDHIh6gf4dXeCWIoRsM0YXNAqrNzRLLlHt51yw+vi1yr22fwB+AH4IOVOBig EPl4gaTFwGuGWs5bL2aaqhIbQQIYUPfZk7WoBEYW4TT9mhX+ppBRG7uVNGqOpHXV 93B8iviuRx1R6uBZXI/FsiyGFDFgn46VLsB5gLBoPZxAVpZg9QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKcnIV1cHwis/GBlxAPPz+cp1QcGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWYzZGMzZTgtNGIyMC0z NWQ1LWFkYTUtNzViOWI1NWY3MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAr6FWSypQJI3zZa6CgIITbrWKVwNkTHYeJI2Cvae+F5jXuEuWGpGg+CUE 329qhDJP6TH2Nz6VsvEqqrZqZgpNMWNjEZGdMjTYyo6bX2ky+nowa8gyr4GbBCqu E/nmN00NqLqZvCu/nygb95r/RsQnB+7tW51AlDnL+ufYmml2cqp0xjJELXz6CQe0 JXzi+mFxl4us5tgn97QfACRmOSP07HP07Mk591MM9zmSzvkvyb61UfMKRx7k1sGh ukUwtptU9prRuvkaynoZEwXFHnYarBXcWTiLYte26Xk0lm+Qx1f90V+x5ScxioBe r+WScoNBS82SwzY5WaRwbPxADNWJJA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:05 2025 by rpki-client