$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e17101-8c21-3cfc-b562-1daa24438b7c.roa File: a4e17101-8c21-3cfc-b562-1daa24438b7c.roa (raw, json) Hash identifier: lOUpRPxh2bYT4ssi0qRS8eFrINDymEh1rRmfLNOFhYY= Subject key identifier: 9A:E3:62:6A:BC:19:D5:17:1B:37:72:55:87:02:6C:FF:36:A0:28:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B98723CAD4A8562421342F7F0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e17101-8c21-3cfc-b562-1daa24438b7c.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 13671 IP address blocks: 68.128.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3c:ad:4a:85:62:42:13:42:f7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=c40928ce-87db-4e7b-b98a-99e875fc871d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:82:7a:a6:c9:b8:b5:1f:80:5a:77:04:07:c4: 09:0a:d0:7f:9a:64:17:98:8e:0d:c8:c2:bf:a8:23: 01:66:0c:6a:cf:43:eb:8e:1f:3f:fb:ab:af:cf:bf: 82:94:01:ab:44:d4:e2:ba:dc:20:f6:9e:61:f0:65: e0:2a:a2:f4:43:9d:3d:5f:84:8d:02:a1:0d:d9:04: 02:30:2d:e4:cc:f5:30:83:d6:2f:c1:e4:0d:b5:52: 91:76:1c:27:28:2a:0d:f2:5f:d9:e0:19:11:e6:34: e1:18:fc:0d:a5:63:06:87:b0:0a:86:0b:de:c5:6a: f3:61:8d:87:45:a6:af:0e:f6:1d:83:0a:81:06:e0: db:01:1b:f7:11:6a:d7:58:a9:1b:ee:2a:17:2e:81: 48:ce:fd:7b:8d:a4:fb:19:96:c0:c7:f5:0e:8e:74: 2b:6e:9a:65:07:f3:1a:c5:b8:79:e3:dc:82:e0:e0: d2:8a:26:29:ca:e2:23:9f:7e:ec:35:08:a1:c2:49: e6:0d:60:54:c8:45:ae:c0:71:1c:8b:79:df:6b:c3: 0f:c5:0c:ce:12:b3:14:04:21:91:85:5d:3e:d4:b5: 5f:dd:fe:d9:4b:c1:7d:1b:b0:c0:47:c2:52:14:52: f8:01:50:69:95:18:ad:51:82:c9:11:ed:2c:c4:0c: fa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E3:62:6A:BC:19:D5:17:1B:37:72:55:87:02:6C:FF:36:A0:28:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4e17101-8c21-3cfc-b562-1daa24438b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b6:b7:dc:9e:7c:4b:f2:16:ba:ea:06:57:8b:87:94:b4:ee: 37:1c:19:b9:39:01:49:8c:9b:8c:9d:63:2e:7f:2c:00:b5:f5: 47:0d:ef:4b:88:79:2a:00:25:d6:14:7f:6b:29:e5:d6:04:34: 5a:78:a0:8f:ab:90:9e:ed:b8:b7:ae:6d:4a:49:ef:dc:5a:d6: dc:03:9e:7c:b5:c3:8f:80:e8:78:08:08:f0:4f:72:51:61:00: b3:5b:85:2b:cd:d7:51:fd:cb:0e:a7:76:91:69:f1:80:46:3b: 4f:73:99:82:f0:1b:54:99:b1:5a:8d:34:6a:3c:be:eb:9a:1e: 13:01:02:33:0f:bc:40:35:f3:49:25:5d:8e:3e:51:5e:71:94: b9:88:ac:e3:b4:3b:36:10:3f:e3:5f:f0:7a:c4:40:ef:7f:8b: c3:97:92:b9:7a:d6:4a:ba:6c:81:27:65:76:50:67:77:48:e6: 52:4c:50:46:a9:4f:6b:70:6f:68:e3:8d:01:02:8b:33:9e:49: 26:eb:fe:2b:60:be:d9:91:35:48:57:11:26:18:bc:b4:a6:47: de:8e:c2:2a:f7:41:b8:4b:c9:b3:fb:f1:b7:4a:c4:df:ed:5e: bf:0d:c2:0b:25:d5:d2:30:48:bb:3c:96:38:86:18:ee:a7:d5: 0b:13:5f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcjytSoViQhNC9/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk YzQwOTI4Y2UtODdkYi00ZTdiLWI5OGEtOTllODc1ZmM4NzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioJ6psm4tR+AWncEB8QJCtB/mmQXmI4NyMK/ qCMBZgxqz0Prjh8/+6uvz7+ClAGrRNTiutwg9p5h8GXgKqL0Q509X4SNAqEN2QQC MC3kzPUwg9YvweQNtVKRdhwnKCoN8l/Z4BkR5jThGPwNpWMGh7AKhgvexWrzYY2H RaavDvYdgwqBBuDbARv3EWrXWKkb7ioXLoFIzv17jaT7GZbAx/UOjnQrbpplB/Ma xbh549yC4ODSiiYpyuIjn37sNQihwknmDWBUyEWuwHEci3nfa8MPxQzOErMUBCGR hV0+1LVf3f7ZS8F9G7DAR8JSFFL4AVBplRitUYLJEe0sxAz6gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrjYmq8GdUXGzdyVYcCbP82oCh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTRlMTcxMDEtOGMyMS0z Y2ZjLWI1NjItMWRhYTI0NDM4YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy2t9yefEvyFrrqBleLh5S07jccGbk5AUmMm4ydYy5/LAC19UcN70uI eSoAJdYUf2sp5dYENFp4oI+rkJ7tuLeubUpJ79xa1twDnny1w4+A6HgICPBPclFh ALNbhSvN11H9yw6ndpFp8YBGO09zmYLwG1SZsVqNNGo8vuuaHhMBAjMPvEA180kl XY4+UV5xlLmIrOO0OzYQP+Nf8HrEQO9/i8OXkrl61kq6bIEnZXZQZ3dI5lJMUEap T2twb2jjjQECizOeSSbr/itgvtmRNUhXESYYvLSmR96Owir3QbhLybP78bdKxN/t Xr8Nwgsl1dIwSLs8ljiGGO6n1QsTX3c= -----END CERTIFICATE-----Generated at Wed Nov 5 14:56:18 2025 by rpki-client