$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa File: ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa (raw, json) Hash identifier: XpK6tpReALTbKhEzeHPXZDAfwoXt6jtag8j1q47NGaw= Subject key identifier: 9D:78:3C:5B:9D:95:A9:5E:71:12:13:4F:A1:41:4B:B8:4B:FB:B1:85 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7D8DE28E6253671648AE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 68.163.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d8:de:28:e6:25:36:71:64:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=10b123ec-40fa-4e7e-8501-3990414afa6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f8:18:c3:d1:87:ff:43:d9:c0:d6:fe:11:b0: 35:05:71:3d:11:4b:da:46:42:e2:0c:29:6e:42:57: e8:af:bc:9f:61:46:bb:14:e2:47:2c:9d:78:04:18: 8d:5a:16:96:bb:35:52:85:45:72:32:17:4d:bc:45: 04:b5:39:c2:23:a7:bf:05:04:64:63:cd:6c:1c:c1: 8d:9f:bd:93:15:81:8a:a7:50:39:8e:f7:39:13:d0: 4a:50:cf:b0:b9:0c:08:0c:27:be:ad:47:98:56:fc: 85:66:59:eb:e8:b6:0b:dd:16:43:1a:0b:31:6e:6f: f1:1f:ec:f2:13:aa:3e:12:4b:5e:5a:91:cb:03:0a: a3:51:d6:2b:b4:8f:8c:43:83:76:50:01:70:79:1f: 8d:dd:eb:7e:87:d3:a2:ac:bf:1c:e4:62:1c:63:05: e7:65:21:ce:e8:c7:6e:24:40:bd:20:23:17:40:9e: 51:5c:cc:12:36:83:ac:b9:5b:63:fe:e7:2c:41:b1: 82:86:d7:f3:ad:d7:de:57:2d:8a:48:17:ad:b7:79: ee:9e:2a:bd:ca:60:dd:14:5c:cb:e3:c4:15:61:50: 92:90:e3:90:dd:8f:89:dd:77:e6:86:5f:2c:50:45: 50:a3:3b:2b:ce:87:77:27:8f:b9:6d:37:84:fb:aa: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:78:3C:5B:9D:95:A9:5E:71:12:13:4F:A1:41:4B:B8:4B:FB:B1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac8f4225-26ea-3e05-b70a-3c127d3b9c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.163.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d4:d6:73:ce:54:19:8c:38:97:c8:93:84:9f:e7:a6:02:11: 61:10:39:62:10:7f:3e:76:82:d0:06:3e:2b:73:9b:d7:c8:6a: fc:41:6b:82:94:57:38:9f:4a:02:da:26:37:f5:00:57:e9:d5: 73:f4:24:30:94:05:64:5d:e3:0f:ff:55:47:3c:5f:77:36:6a: 3e:7b:c5:19:3a:4c:da:1e:e0:68:44:36:ee:00:99:f7:e6:47: 62:75:03:12:90:02:ac:d0:cb:84:db:7a:13:31:a7:fe:eb:db: 8a:b5:7a:ed:8a:9c:e0:6e:ee:1c:8e:08:5c:00:1e:6c:44:6e: 28:26:fd:d8:84:5b:5b:90:b6:cc:62:86:0d:dc:63:0a:16:1c: 3e:6c:e4:48:c5:46:07:35:28:75:21:25:ba:54:25:13:90:0b: f9:ee:5a:0c:a4:21:70:5b:45:14:e5:30:80:6c:34:68:58:2c: 42:c5:de:57:79:c0:a8:19:78:ec:31:4b:0b:ba:da:ab:c7:54: e9:a3:b0:c3:f2:0f:75:e4:1d:8f:a2:61:31:16:5b:2d:76:ab: 7f:2a:a5:3c:80:e3:63:ee:25:af:68:0a:55:04:f8:bd:92:04: a8:16:9b:b3:63:53:b8:00:4a:4b:5d:0e:4e:49:1a:07:d0:6f: d6:ae:35:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99jeKOYlNnFkiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MTBiMTIzZWMtNDBmYS00ZTdlLTg1MDEtMzk5MDQxNGFmYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PgYw9GH/0PZwNb+EbA1BXE9EUvaRkLiDClu Qlfor7yfYUa7FOJHLJ14BBiNWhaWuzVShUVyMhdNvEUEtTnCI6e/BQRkY81sHMGN n72TFYGKp1A5jvc5E9BKUM+wuQwIDCe+rUeYVvyFZlnr6LYL3RZDGgsxbm/xH+zy E6o+EkteWpHLAwqjUdYrtI+MQ4N2UAFweR+N3et+h9OirL8c5GIcYwXnZSHO6Mdu JEC9ICMXQJ5RXMwSNoOsuVtj/ucsQbGChtfzrdfeVy2KSBett3nuniq9ymDdFFzL 48QVYVCSkOOQ3Y+J3Xfmhl8sUEVQozsrzod3J4+5bTeE+6rwrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ14PFudlalecRITT6FBS7hL+7GFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWM4ZjQyMjUtMjZlYS0z ZTA1LWI3MGEtM2MxMjdkM2I5YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRKNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7U1nPOVBmMOJfIk4Sf56YCEWEQOWIQfz52gtAGPitzm9fIavxBa4KU VzifSgLaJjf1AFfp1XP0JDCUBWRd4w//VUc8X3c2aj57xRk6TNoe4GhENu4Amffm R2J1AxKQAqzQy4TbehMxp/7r24q1eu2KnOBu7hyOCFwAHmxEbigm/diEW1uQtsxi hg3cYwoWHD5s5EjFRgc1KHUhJbpUJROQC/nuWgykIXBbRRTlMIBsNGhYLELF3ld5 wKgZeOwxSwu62qvHVOmjsMPyD3XkHY+iYTEWWy12q38qpTyA42PuJa9oClUE+L2S BKgWm7NjU7gASktdDk5JGgfQb9auNZA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:10 2025 by rpki-client