$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa File: 88ae5900-93cc-3311-a858-b4a65a1fbe39.roa (raw, json) Hash identifier: Cig8ShXP1rSyw7SjZ+SxT0/MWCJfqkrGyW8Zuvdo4AY= Subject key identifier: 7A:A0:F8:6C:3B:67:0C:40:9D:79:24:C2:08:61:7C:5F:38:2B:BE:AC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD23E4CD7D92D0403EFA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 68.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:23:e4:cd:7d:92:d0:40:3e:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=bae8e88e-529a-4ba6-a085-ea84019568b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:fa:82:aa:76:8d:cf:50:d8:70:7d:a1:3c: 47:cb:0d:7f:7a:ab:c7:9d:d1:df:be:c7:f1:ed:3f: 1a:d6:b3:65:20:5b:8e:43:42:70:62:00:c7:5d:10: 3e:81:16:ba:8a:ea:99:d6:03:97:af:19:33:af:ef: c3:21:1e:93:94:e8:59:73:04:1f:fa:c6:2d:54:4d: 84:1a:cc:ae:cd:09:0d:38:96:74:be:e5:fb:12:47: 6d:2b:7e:f4:03:8e:50:1b:ee:d8:a9:74:b6:38:85: 2a:7c:fa:f0:9d:ee:4c:19:a3:5d:71:5a:9a:8c:a9: ee:88:66:ff:8d:03:14:1e:39:f7:bb:4b:54:87:21: 86:4e:5a:c4:96:89:3d:a2:a9:4e:5e:38:d4:36:0b: 66:31:85:ef:25:c3:24:66:67:54:ad:80:83:b5:e2: 29:f6:04:b3:ed:2f:3f:eb:a1:77:11:78:bc:e1:80: b2:92:3f:e9:00:eb:2b:51:e2:5e:9c:68:d9:bd:02: ce:e5:5f:ac:29:99:a1:72:22:f3:e6:bc:94:8d:b1: c3:f8:ba:52:b0:10:aa:56:e6:ed:e8:4d:f5:a4:a4: f2:b3:e4:48:56:31:70:96:78:8e:54:42:fc:9a:4f: be:b6:6d:a3:6e:b0:7f:e1:1e:43:f3:bf:3f:f0:5f: cc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A0:F8:6C:3B:67:0C:40:9D:79:24:C2:08:61:7C:5F:38:2B:BE:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88ae5900-93cc-3311-a858-b4a65a1fbe39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:80:e2:6f:b5:b3:89:e2:ff:63:bf:64:96:71:b9:2c:15:01: a4:56:09:7f:b6:2f:de:4f:25:28:69:91:30:9c:9a:d7:a6:2b: 08:53:18:cb:1a:03:3e:54:a2:29:ef:7f:5e:07:4f:54:62:09: 7b:1b:e0:37:02:2e:48:7f:b9:ea:b1:62:6c:4d:e5:47:1e:e4: 9a:95:15:cd:a8:1b:95:f3:f9:c8:b0:0f:88:23:ae:ae:a7:0e: 0d:cc:99:6a:a9:e4:d7:10:c1:fb:f0:25:95:7c:f1:cd:de:5d: 85:29:85:9a:ec:69:59:c9:60:b6:e2:12:97:50:94:4a:89:f1: 33:c2:4b:a7:c2:09:3b:d9:5c:b7:8a:f0:ee:0c:1d:57:39:7d: b1:0e:50:d7:72:95:1c:e4:ec:0b:e2:a6:52:fc:75:c5:91:b9: 51:77:1a:bf:5c:07:95:28:52:ae:74:74:34:60:8b:7d:62:6f: 73:c3:d9:70:f6:f5:8c:19:c0:18:16:5c:f8:8d:6b:02:d0:3c: 44:34:96:38:20:fb:68:9b:88:65:a2:a0:cb:69:c7:b5:59:26: a6:77:92:a3:62:df:45:72:31:1f:e2:88:3b:6f:94:49:4b:dd: a4:a6:3e:b0:f6:fb:0a:d6:c2:cd:2c:56:7c:8c:3c:0a:99:3c: 19:22:bf:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SPkzX2S0EA++gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YmFlOGU4OGUtNTI5YS00YmE2LWEwODUtZWE4NDAxOTU2OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHj6gqp2jc9Q2HB9oTxHyw1/eqvHndHfvsfx 7T8a1rNlIFuOQ0JwYgDHXRA+gRa6iuqZ1gOXrxkzr+/DIR6TlOhZcwQf+sYtVE2E GsyuzQkNOJZ0vuX7EkdtK370A45QG+7YqXS2OIUqfPrwne5MGaNdcVqajKnuiGb/ jQMUHjn3u0tUhyGGTlrElok9oqlOXjjUNgtmMYXvJcMkZmdUrYCDteIp9gSz7S8/ 66F3EXi84YCykj/pAOsrUeJenGjZvQLO5V+sKZmhciLz5ryUjbHD+LpSsBCqVubt 6E31pKTys+RIVjFwlniOVEL8mk++tm2jbrB/4R5D878/8F/MGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqg+Gw7ZwxAnXkkwghhfF84K76sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODhhZTU5MDAtOTNjYy0z MzExLWE4NTgtYjRhNjVhMWZiZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERO4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmA4m+1s4ni/2O/ZJZxuSwVAaRWCX+2L95PJShpkTCcmtemKwhTGMsa Az5Uoinvf14HT1RiCXsb4DcCLkh/ueqxYmxN5Uce5JqVFc2oG5Xz+ciwD4gjrq6n Dg3MmWqp5NcQwfvwJZV88c3eXYUphZrsaVnJYLbiEpdQlEqJ8TPCS6fCCTvZXLeK 8O4MHVc5fbEOUNdylRzk7AviplL8dcWRuVF3Gr9cB5UoUq50dDRgi31ib3PD2XD2 9YwZwBgWXPiNawLQPEQ0ljgg+2ibiGWioMtpx7VZJqZ3kqNi30VyMR/iiDtvlElL 3aSmPrD2+wrWws0sVnyMPAqZPBkiv58= -----END CERTIFICATE-----Generated at Wed Nov 5 11:01:20 2025 by rpki-client