$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9598d97e-8bb5-3a24-97fa-ec089c7aab8a.roa File: 9598d97e-8bb5-3a24-97fa-ec089c7aab8a.roa (raw, json) Hash identifier: EX7qwroUeYnlqToToJrH6M9WNXScuae3ZiYcQMsyt80= Subject key identifier: DC:F7:7B:2B:7A:C5:FA:84:3A:B2:EC:1B:9E:98:8A:36:ED:71:E6:99 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B98723968DF54118BE6DA5180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9598d97e-8bb5-3a24-97fa-ec089c7aab8a.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 1387 IP address blocks: 68.128.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:39:68:df:54:11:8b:e6:da:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=70fd32a4-ed6c-4686-9102-0125d9596623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2b:a6:3d:78:c0:1e:37:ea:eb:d1:c7:0d:85: e5:a8:ef:23:7a:62:c6:d8:02:5a:a9:c5:60:b5:c6: 0e:ea:a1:50:5f:da:3f:b0:83:50:95:db:a2:b4:42: 0a:0b:66:94:ba:73:65:b0:59:22:f4:6d:cc:dd:f1: b0:44:bd:27:3d:11:28:c1:d8:54:cf:ef:5f:c5:11: 2a:5b:cb:32:c8:fe:d7:bd:55:c4:2a:ed:e5:b2:80: 5e:17:4f:65:ae:71:11:cc:5b:7b:b5:dc:81:d9:71: 7b:76:34:52:1e:a4:ed:5a:2e:5f:38:75:d7:34:b4: 3e:aa:3f:f7:2a:af:83:dd:c5:8a:db:45:88:e6:f0: 4c:cf:d6:77:7c:b5:70:66:3f:16:8d:72:62:68:1d: 35:c5:29:b9:c6:50:ce:0e:ae:65:09:4b:01:25:d1: 7b:af:c8:49:bb:35:99:ac:48:89:4e:6e:6d:67:7e: ab:ee:cc:6a:5c:cd:ff:7b:7d:46:95:a8:6e:c4:a1: f1:55:fd:cf:a8:b9:fd:ff:71:ac:88:0a:a1:c1:2f: e6:99:56:a7:04:1a:42:b2:7f:ef:bc:6c:df:13:bd: c0:05:c2:83:4a:76:6b:6e:ee:12:50:d2:44:0b:09: d9:a4:37:36:45:cd:60:92:e4:8c:8c:ec:3f:30:be: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F7:7B:2B:7A:C5:FA:84:3A:B2:EC:1B:9E:98:8A:36:ED:71:E6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9598d97e-8bb5-3a24-97fa-ec089c7aab8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:48:01:2e:44:7e:2e:dc:65:98:71:02:9c:4c:f0:18:06:6f: 99:1a:d1:92:52:87:ed:5b:71:e8:ea:fc:45:c2:26:c0:2d:67: b4:c4:09:c9:ea:1b:0f:79:58:8e:90:c9:26:5d:06:7b:e9:f9: a6:01:df:70:4e:2d:7d:af:f7:84:43:f1:92:93:f9:70:1d:d9: 6c:65:e1:a8:19:ec:a0:bd:9a:f3:e8:f7:bf:67:c3:65:be:bb: ec:ed:ec:d2:b9:cb:5f:7c:b3:c8:fa:3a:90:a2:0f:d1:e3:c3: 47:a6:fb:54:1b:d7:8f:59:77:18:5d:73:05:67:3f:14:e0:0f: d9:0f:ce:80:d2:d9:86:4c:60:58:00:f1:97:27:00:90:ff:2c: 2f:ff:03:c5:1d:58:7e:84:19:11:66:88:79:3f:7a:14:d1:e8: 64:5c:ad:a5:c1:02:71:48:ca:97:0a:91:98:f3:78:12:45:f7: a2:67:b0:03:58:ef:ee:55:49:28:4e:dd:70:2f:0f:16:62:a2: f5:9a:37:09:82:dd:5c:f1:ae:2a:84:c0:d3:5c:e0:da:69:94: 22:70:40:b4:21:d4:81:31:c4:b5:aa:63:97:58:1a:8c:cf:53: 27:9b:6e:6d:51:09:d1:55:83:ef:13:33:04:76:c9:34:70:9b: 76:5e:f1:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcjlo31QRi+baUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NzBmZDMyYTQtZWQ2Yy00Njg2LTkxMDItMDEyNWQ5NTk2NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCumPXjAHjfq69HHDYXlqO8jemLG2AJaqcVg tcYO6qFQX9o/sINQlduitEIKC2aUunNlsFki9G3M3fGwRL0nPREowdhUz+9fxREq W8syyP7XvVXEKu3lsoBeF09lrnERzFt7tdyB2XF7djRSHqTtWi5fOHXXNLQ+qj/3 Kq+D3cWK20WI5vBMz9Z3fLVwZj8WjXJiaB01xSm5xlDODq5lCUsBJdF7r8hJuzWZ rEiJTm5tZ36r7sxqXM3/e31GlahuxKHxVf3PqLn9/3GsiAqhwS/mmVanBBpCsn/v vGzfE73ABcKDSnZrbu4SUNJECwnZpDc2Rc1gkuSMjOw/ML65dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz3eyt6xfqEOrLsG56YijbtceaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTU5OGQ5N2UtOGJiNS0z YTI0LTk3ZmEtZWMwODljN2FhYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRIAS5Efi7cZZhxApxM8BgGb5ka0ZJSh+1bcejq/EXCJsAtZ7TECcnq Gw95WI6QySZdBnvp+aYB33BOLX2v94RD8ZKT+XAd2Wxl4agZ7KC9mvPo979nw2W+ u+zt7NK5y198s8j6OpCiD9Hjw0em+1Qb149ZdxhdcwVnPxTgD9kPzoDS2YZMYFgA 8ZcnAJD/LC//A8UdWH6EGRFmiHk/ehTR6GRcraXBAnFIypcKkZjzeBJF96JnsANY 7+5VSShO3XAvDxZiovWaNwmC3VzxriqEwNNc4NpplCJwQLQh1IExxLWqY5dYGozP Uyebbm1RCdFVg+8TMwR2yTRwm3Ze8U0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:16 2025 by rpki-client