$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa File: d521f734-db06-319b-86f6-7e5aa43f218e.roa (raw, json) Hash identifier: WbyWP/NEXgaB3p03HQNCU/2M5O3wmMwWWVZ9/axOlaQ= Subject key identifier: 17:AA:6C:25:49:89:15:EE:43:BA:4C:70:63:99:D7:78:EE:2D:AD:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD2336CD86B0212C1F6680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 68.131.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:23:36:cd:86:b0:21:2c:1f:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=940a6557-d6cd-43a7-bd93-23d53fe6b46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:0c:26:29:57:a0:21:e1:86:8c:55:ef:4a: 38:96:14:15:ae:a0:4f:5f:04:70:05:ae:23:76:69: f0:b7:76:af:c6:b2:96:7c:06:32:c9:e8:ee:8c:55: 7a:9f:ed:0a:b0:b7:da:ae:ff:aa:99:93:98:96:09: b6:18:7e:0d:10:f8:88:99:6a:3b:c4:c5:71:8f:38: 1d:62:df:3a:59:7f:3c:d0:3c:12:09:ac:b5:00:50: 63:da:20:d5:b4:3f:2f:a2:3a:f7:28:f7:09:cb:be: b8:e6:d1:45:ba:10:7d:c6:b6:bb:4c:c5:de:e7:40: 6b:26:37:69:98:fc:7e:23:11:01:41:15:92:f0:72: 43:66:67:a6:2f:3c:83:b5:33:49:2b:eb:da:75:8f: a8:c9:49:3d:1d:39:42:47:38:e5:1d:5b:c3:59:e5: 36:70:43:b8:18:be:54:63:15:1f:e4:2c:3a:d2:bf: 19:13:26:03:ab:f8:2e:83:79:b1:e4:71:24:1d:ed: fd:b1:49:d2:74:9a:c7:66:61:12:59:e8:cb:8c:1d: 2e:d2:22:50:1d:dc:ea:3f:bb:82:b6:8c:9d:40:72: 98:a8:16:14:a3:6a:44:e5:23:3c:b9:40:6e:ed:5d: 6e:ee:d6:93:7e:27:4d:94:58:e1:ac:56:6a:a0:5c: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AA:6C:25:49:89:15:EE:43:BA:4C:70:63:99:D7:78:EE:2D:AD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.131.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:da:b7:36:e0:d8:67:7d:31:26:d7:0f:5c:0b:b0:3d:7e:38: 0f:3f:74:7d:e0:ea:95:28:ea:ad:a1:d6:80:97:6a:1d:36:6c: 2c:e2:81:2c:a9:65:cd:73:b3:ea:ab:1f:e2:5d:0c:fd:dc:cb: 67:e8:13:10:7f:6b:6f:e7:c4:65:f6:78:45:54:c5:33:4a:43: c7:61:a3:2a:5e:3c:67:ea:eb:60:b6:1e:1c:a2:fb:97:eb:1b: 5c:8c:72:0c:d5:3e:70:60:31:2f:5a:44:76:4e:43:16:65:85: 43:be:e5:0a:c8:a7:db:d1:45:5a:5a:76:27:15:91:07:53:00: c7:b4:1a:23:df:58:f9:4a:7b:dd:23:04:58:d9:d3:48:e0:b0: 6a:97:bb:96:5b:17:24:93:8e:98:dd:15:ed:72:74:eb:10:f6: 3b:da:e7:4f:e2:9e:b5:e4:2f:da:46:cf:19:22:0b:65:c9:3b: 39:ae:70:14:4b:dc:36:7c:f3:10:8b:29:d6:5b:1f:ff:5b:e1: ec:c0:4d:2d:56:03:ba:cc:44:c4:7a:2a:e1:42:dd:fe:ef:24: 20:a2:e1:e5:9c:32:f9:d6:29:ad:ca:eb:af:2f:b2:c2:c9:35: e6:fd:3a:10:83:f5:d5:06:21:93:c7:4b:d9:d2:0b:b1:52:b1: 4d:a7:5f:e8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEur/SM2zYawISwfZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OTQwYTY1NTctZDZjZC00M2E3LWJkOTMtMjNkNTNmZTZiNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA194MJilXoCHhhoxV70o4lhQVrqBPXwRwBa4j dmnwt3avxrKWfAYyyejujFV6n+0KsLfarv+qmZOYlgm2GH4NEPiImWo7xMVxjzgd Yt86WX880DwSCay1AFBj2iDVtD8vojr3KPcJy7645tFFuhB9xra7TMXe50BrJjdp mPx+IxEBQRWS8HJDZmemLzyDtTNJK+vadY+oyUk9HTlCRzjlHVvDWeU2cEO4GL5U YxUf5Cw60r8ZEyYDq/gug3mx5HEkHe39sUnSdJrHZmESWejLjB0u0iJQHdzqP7uC toydQHKYqBYUo2pE5SM8uUBu7V1u7taTfidNlFjhrFZqoFxksQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBeqbCVJiRXuQ7pMcGOZ13juLa05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDUyMWY3MzQtZGIwNi0z MTliLTg2ZjYtN2U1YWE0M2YyMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADNq3NuDYZ30xJtcPXAuwPX44Dz90feDqlSjqraHWgJdqHTZsLOKBLKll zXOz6qsf4l0M/dzLZ+gTEH9rb+fEZfZ4RVTFM0pDx2GjKl48Z+rrYLYeHKL7l+sb XIxyDNU+cGAxL1pEdk5DFmWFQ77lCsin29FFWlp2JxWRB1MAx7QaI99Y+Up73SME WNnTSOCwape7llsXJJOOmN0V7XJ06xD2O9rnT+KeteQv2kbPGSILZck7Oa5wFEvc NnzzEIsp1lsf/1vh7MBNLVYDusxExHoq4ULd/u8kIKLh5Zwy+dYprcrrry+ywsk1 5v06EIP11QYhk8dL2dILsVKxTadf6A== -----END CERTIFICATE-----Generated at Wed Nov 5 02:11:09 2025 by rpki-client