$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/634698a1-1aaa-353d-8393-713fabcfb9a1.roa File: 634698a1-1aaa-353d-8393-713fabcfb9a1.roa (raw, json) Hash identifier: iXQlVFjWc6rugPbJDgKJuIkCBhUQmJe37MlDJys5bKY= Subject key identifier: 3F:9F:68:3F:40:D5:61:72:EE:B5:B7:27:6C:A9:A7:3A:DA:3D:72:82 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C370F3C72D2C83EE38DA500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/634698a1-1aaa-353d-8393-713fabcfb9a1.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 68.238.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:0f:3c:72:d2:c8:3e:e3:8d:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=0edbcf6a-a1eb-4d07-8942-f6a5eee3fa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:9f:97:fe:a3:68:b0:53:9f:08:8a:1d:f3: da:2d:27:06:d0:f1:d6:85:aa:e3:67:55:9f:c2:77: 76:10:a7:ae:6a:09:29:7a:8e:fc:23:42:35:b0:ab: 9b:fd:bd:c4:72:24:d9:0a:f3:f1:60:24:a3:11:53: 9b:0f:eb:a9:63:88:28:95:fe:c1:f8:55:e0:d0:ca: 8b:7e:a2:02:c0:c1:6c:ed:1c:91:8a:19:5d:01:c4: 75:1d:61:f6:27:df:b1:87:f0:c8:ad:35:70:33:74: 32:54:61:1d:49:69:f6:83:36:5e:8a:dd:68:80:69: bc:58:54:6d:d3:69:a4:75:94:6a:64:f5:4d:ed:ec: bf:14:d4:82:34:0f:03:a4:6b:a1:53:b0:4b:14:dd: fd:e2:7e:5f:6c:1d:df:44:02:5b:32:94:2b:9c:9e: 0a:9b:cf:eb:1d:4e:be:73:25:20:4d:99:84:ce:85: 20:95:e1:02:e3:73:70:50:df:11:45:10:f8:7d:47: 44:90:c6:39:f4:10:83:71:a2:26:77:d3:f1:d5:6c: c0:b2:5b:ed:18:d0:33:a2:ab:9b:63:af:b8:ce:94: 24:1d:2c:79:ff:b1:3b:e8:3d:54:c5:04:b3:d3:a9: 5a:89:e3:df:91:2c:96:4d:40:1d:24:7d:f2:eb:43: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9F:68:3F:40:D5:61:72:EE:B5:B7:27:6C:A9:A7:3A:DA:3D:72:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/634698a1-1aaa-353d-8393-713fabcfb9a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:46:b1:40:b1:9a:74:d6:7b:e3:16:1c:d7:5d:ae:0b:db:92: 33:06:ea:36:84:57:7f:b3:c2:dc:1c:da:3f:9b:3c:0d:61:0c: 35:95:f6:2f:a3:88:f8:44:9b:ee:43:8a:9f:f2:7c:fd:9f:a0: 0d:b3:5b:81:8f:46:00:e1:9a:68:2c:89:cb:9e:9e:07:b9:9f: 41:4e:78:bf:ac:ec:59:f9:5d:d0:f7:a7:0b:b5:ab:f1:39:d7: b0:61:8d:db:14:e8:d5:b9:b5:8b:29:a3:0f:13:cf:4d:69:83: e7:d1:4c:d2:fc:68:c4:3f:64:f2:7a:38:b3:3f:65:b7:50:8d: 28:31:da:2e:3d:98:b3:5f:d4:35:cd:3b:cf:09:85:79:71:b1: f7:39:ad:81:52:b7:60:02:92:f0:01:d0:fb:ca:44:02:31:bd: 46:d5:b9:e5:a5:4e:e6:24:0b:1d:7b:7d:57:80:21:61:9a:4d: 77:79:2f:e0:1b:e3:c7:23:80:75:7c:ce:ba:a3:bb:c9:f4:40: 71:69:b3:5d:89:b0:68:26:f3:49:c2:5a:77:36:b4:ed:2e:4b: 31:c7:3b:66:61:57:98:91:5c:13:74:e1:fa:d2:00:2d:db:e3: 39:4b:be:7d:ce:91:ce:c7:8b:30:63:02:c3:06:69:a3:94:a5: e6:dc:5a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNw88ctLIPuONpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MGVkYmNmNmEtYTFlYi00ZDA3LTg5NDItZjZhNWVlZTNmYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfefl/6jaLBTnwiKHfPaLScG0PHWharjZ1Wf wnd2EKeuagkpeo78I0I1sKub/b3EciTZCvPxYCSjEVObD+upY4golf7B+FXg0MqL fqICwMFs7RyRihldAcR1HWH2J9+xh/DIrTVwM3QyVGEdSWn2gzZeit1ogGm8WFRt 02mkdZRqZPVN7ey/FNSCNA8DpGuhU7BLFN394n5fbB3fRAJbMpQrnJ4Km8/rHU6+ cyUgTZmEzoUgleEC43NwUN8RRRD4fUdEkMY59BCDcaImd9Px1WzAslvtGNAzoqub Y6+4zpQkHSx5/7E76D1UxQSz06laiePfkSyWTUAdJH3y60PYWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+faD9A1WFy7rW3J2yppzraPXKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjM0Njk4YTEtMWFhYS0z NTNkLTgzOTMtNzEzZmFiY2ZiOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5GsUCxmnTWe+MWHNddrgvbkjMG6jaEV3+zwtwc2j+bPA1hDDWV9i+j iPhEm+5Dip/yfP2foA2zW4GPRgDhmmgsicuenge5n0FOeL+s7Fn5XdD3pwu1q/E5 17BhjdsU6NW5tYspow8Tz01pg+fRTNL8aMQ/ZPJ6OLM/ZbdQjSgx2i49mLNf1DXN O88JhXlxsfc5rYFSt2ACkvAB0PvKRAIxvUbVueWlTuYkCx17fVeAIWGaTXd5L+Ab 48cjgHV8zrqju8n0QHFps12JsGgm80nCWnc2tO0uSzHHO2ZhV5iRXBN04frSAC3b 4zlLvn3Okc7HizBjAsMGaaOUpebcWtQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:27:12 2025 by rpki-client