$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa File: 6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa (raw, json) Hash identifier: PC59wY1+mluR9hTL3qq/96bMgFvU4g7psTBELS6/rzs= Subject key identifier: E8:85:27:BE:BE:EB:2E:1B:53:A6:2A:6D:21:99:D9:18:E7:44:05:70 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD2325FE751A1D3A15B380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 68.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:23:25:fe:75:1a:1d:3a:15:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=eff9039b-e25b-49ce-b9a4-ed070bcf136a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5d:d4:cf:01:d6:d1:ec:7a:92:a0:51:f9:65: dc:d1:d0:96:79:45:7e:4b:83:0c:71:62:4d:4b:ac: 55:9e:a2:12:23:b2:af:72:93:29:27:3b:ca:2d:71: cf:6f:4f:92:eb:ad:1a:8c:d8:f4:f2:70:b5:ec:d7: 15:15:66:db:8a:f3:cf:2b:9e:90:10:51:55:ea:c6: cd:5f:ba:39:92:2a:48:f3:fd:b1:fa:4a:4d:1f:29: e5:6f:f3:9f:d1:e6:79:05:55:45:e5:c6:6a:02:80: b6:76:10:d9:17:3c:1b:fb:df:f1:ba:57:1e:85:65: d5:40:dd:c8:61:18:6b:a1:66:a8:ce:61:0f:37:d8: ca:3f:fd:08:e0:2e:47:d9:ce:c1:55:66:2e:9f:39: 27:ba:b7:a0:63:a5:80:86:20:b2:a2:95:f2:b8:8f: 2e:75:79:fe:5b:10:b0:08:4a:b0:b0:fd:06:8a:21: 97:c6:bb:16:0c:eb:82:38:bd:cf:ab:ee:1f:0b:a5: a6:32:a9:1d:25:d1:af:f7:35:69:4d:4a:7f:4c:19: c4:2d:df:f0:5c:76:88:3a:07:1a:b9:13:2e:38:ec: 63:7a:9c:8e:b0:b7:c1:02:74:cd:b6:4e:a6:72:45: d4:f8:63:b0:e8:a9:08:e6:91:41:19:2f:d5:ee:d1: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:85:27:BE:BE:EB:2E:1B:53:A6:2A:6D:21:99:D9:18:E7:44:05:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6e26d6a5-832f-389e-8540-5b846dc7e8b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f8:e6:e2:a9:a3:0a:a8:c1:2b:12:86:f8:fc:fc:47:7d:69: 89:66:b7:a8:08:c8:df:3b:99:5e:ac:1f:ca:2f:b1:e3:a7:ab: be:c5:72:7d:f1:eb:41:35:07:cd:ee:77:a4:86:e9:86:b3:40: 64:2a:3f:4a:cb:a6:11:7b:be:0d:5d:e6:ef:59:00:e6:28:39: 1f:79:dc:6c:fd:ff:ca:5d:32:cf:af:6d:0e:27:25:ee:77:2f: 6e:ac:c2:17:e0:09:4e:b8:47:b8:f9:b5:0a:17:88:73:5b:a9: c1:5c:68:25:49:26:94:62:15:63:84:be:71:07:c6:1e:c5:5a: a3:9c:da:19:2d:fe:60:7b:92:98:b6:92:3c:23:52:56:76:65: df:ac:bd:21:b6:4d:56:b8:5f:85:87:1c:6a:22:a8:c6:44:19: 8e:34:63:cf:ad:73:6f:38:7d:18:e6:89:f3:8e:e2:42:10:cc: 87:d1:ea:f9:ba:54:a8:09:97:06:1f:e0:4c:a7:39:c7:f6:23: 19:b3:e1:8f:be:54:21:e1:84:df:00:3d:69:6f:c6:d5:69:fa: a5:6f:d9:f0:69:df:ad:a6:2d:f1:7b:4e:4f:60:6e:46:a0:a6: 69:31:30:c3:d0:15:d7:2b:02:bd:92:1a:12:34:63:5e:88:0e: 32:03:09:94 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEur/SMl/nUaHToVs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZWZmOTAzOWItZTI1Yi00OWNlLWI5YTQtZWQwNzBiY2YxMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk13UzwHW0ex6kqBR+WXc0dCWeUV+S4MMcWJN S6xVnqISI7KvcpMpJzvKLXHPb0+S660ajNj08nC17NcVFWbbivPPK56QEFFV6sbN X7o5kipI8/2x+kpNHynlb/Of0eZ5BVVF5cZqAoC2dhDZFzwb+9/xulcehWXVQN3I YRhroWaozmEPN9jKP/0I4C5H2c7BVWYunzknuregY6WAhiCyopXyuI8udXn+WxCw CEqwsP0GiiGXxrsWDOuCOL3Pq+4fC6WmMqkdJdGv9zVpTUp/TBnELd/wXHaIOgca uRMuOOxjepyOsLfBAnTNtk6mckXU+GOw6KkI5pFBGS/V7tHiMQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOiFJ76+6y4bU6YqbSGZ2RjnRAVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmUyNmQ2YTUtODMyZi0z ODllLTg1NDAtNWI4NDZkYzdlOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQ/jm4qmjCqjBKxKG+Pz8R31piWa3qAjI3zuZXqwfyi+x46ervsVyffHr QTUHze53pIbphrNAZCo/SsumEXu+DV3m71kA5ig5H3ncbP3/yl0yz69tDicl7ncv bqzCF+AJTrhHuPm1CheIc1upwVxoJUkmlGIVY4S+cQfGHsVao5zaGS3+YHuSmLaS PCNSVnZl36y9IbZNVrhfhYccaiKoxkQZjjRjz61zbzh9GOaJ847iQhDMh9Hq+bpU qAmXBh/gTKc5x/YjGbPhj75UIeGE3wA9aW/G1Wn6pW/Z8GnfraYt8XtOT2BuRqCm aTEww9AV1ysCvZIaEjRjXogOMgMJlA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:16:07 2025 by rpki-client