$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa File: dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa (raw, json) Hash identifier: Vhi8u+wnwb4tRkI3ySv+B454tw9qYxEe7SryvLz61Wc= Subject key identifier: A0:75:EE:96:5F:53:01:8C:8A:C2:7D:2B:CD:3F:6A:D7:2C:71:74:1A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD23141D956C51B7721A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 68.128.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:23:14:1d:95:6c:51:b7:72:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=b7dab8a9-a7c2-4f11-b9c9-b3c33d080848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:17:39:d3:98:b2:c4:90:fd:f4:0e:68:21: 99:7d:9d:a8:3c:fc:ff:3b:0e:0c:dc:57:3f:2c:38: ae:99:ae:e3:5f:dd:5d:ea:f6:dc:ed:f0:94:04:66: 1c:8b:63:ae:82:01:ff:34:fb:56:e9:1e:a0:c4:1f: 34:ce:cf:ef:91:fb:f4:71:57:6d:1b:98:5e:d0:aa: c5:3a:58:46:bf:96:d8:7d:dc:7b:4a:6c:4d:b3:ee: cf:cd:c5:4e:17:15:0a:8e:0e:66:9a:14:23:85:25: aa:2f:e7:74:66:b7:e3:35:15:b5:29:8c:0d:15:63: f9:21:64:73:04:7d:54:b0:33:b8:24:e6:c2:d3:e2: 03:0c:d9:73:2a:ce:5c:72:ae:cb:67:14:ca:41:ef: 5f:5d:0e:f0:70:dd:46:42:c1:b6:8a:09:5d:90:b8: 04:49:d6:2c:9a:96:5a:8e:51:10:8d:70:01:f8:aa: ea:ec:3f:5e:2d:89:00:d4:8d:2f:6a:85:86:b3:ad: 37:9e:bc:d7:12:ae:81:69:38:f4:e2:37:bb:7d:41: 12:29:9b:bc:d6:cc:1a:f3:de:28:70:90:dd:61:3f: ad:0c:b6:55:c2:37:ad:75:61:b5:d9:10:9f:b0:4d: e7:0d:59:10:a6:12:07:08:cb:77:99:a7:6f:75:65: 24:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:75:EE:96:5F:53:01:8C:8A:C2:7D:2B:CD:3F:6A:D7:2C:71:74:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f1:3f:63:6b:d9:cd:e9:d9:b1:c7:9e:61:35:7b:7c:63:8a: a0:94:51:94:e8:0a:1b:c1:bf:98:29:33:76:bb:40:40:e0:19: a8:33:e4:6b:3e:2b:89:72:ba:58:2f:78:e3:67:31:0b:a7:7a: 01:36:cf:b1:c5:68:df:17:ff:80:4a:03:9e:ac:f5:ce:e0:ed: 48:85:87:e4:1f:80:e0:1c:a2:f5:06:63:43:e1:c6:0d:d1:ad: 0e:93:45:b2:0b:eb:56:88:d6:44:e4:17:3c:6b:77:a8:6f:30: 8b:b8:a2:cc:a0:9d:65:fc:cf:e1:1b:19:a2:ff:0a:31:55:7e: 3a:a5:14:14:85:40:45:10:e9:bc:a2:d5:2a:1e:28:54:d6:e8: 4c:67:34:f6:d8:d2:ab:65:c4:ce:78:88:4a:87:e1:da:4b:8b: c6:4e:82:ff:67:a2:cb:98:d7:90:9b:f2:d2:40:72:0a:56:cd: 3f:d8:1b:73:58:09:62:7e:2f:cd:91:52:db:a9:d1:ab:8f:8b: 72:8a:e4:9f:da:64:d9:34:ce:df:e8:1f:74:7d:17:09:73:e4: ef:45:46:96:15:c9:33:0b:91:65:44:7a:27:fe:83:d8:89:c4: 15:0f:b9:a2:53:b6:bd:33:7d:32:f9:3d:a0:7b:11:a5:0c:f7: 87:a1:65:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SMUHZVsUbdyGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YjdkYWI4YTktYTdjMi00ZjExLWI5YzktYjNjMzNkMDgwODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI0XOdOYssSQ/fQOaCGZfZ2oPPz/Ow4M3Fc/ LDiuma7jX91d6vbc7fCUBGYci2OuggH/NPtW6R6gxB80zs/vkfv0cVdtG5he0KrF OlhGv5bYfdx7SmxNs+7PzcVOFxUKjg5mmhQjhSWqL+d0ZrfjNRW1KYwNFWP5IWRz BH1UsDO4JObC0+IDDNlzKs5ccq7LZxTKQe9fXQ7wcN1GQsG2igldkLgESdYsmpZa jlEQjXAB+Krq7D9eLYkA1I0vaoWGs603nrzXEq6BaTj04je7fUESKZu81swa894o cJDdYT+tDLZVwjetdWG12RCfsE3nDVkQphIHCMt3madvdWUkrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB17pZfUwGMisJ9K80/atcscXQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGQ1Mzc5OTctZGJlYi0z Mzk0LWFiNmEtZGRjMDU4NTJkNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRIAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7xP2Nr2c3p2bHHnmE1e3xjiqCUUZToChvBv5gpM3a7QEDgGagz5Gs+ K4lyulgveONnMQunegE2z7HFaN8X/4BKA56s9c7g7UiFh+QfgOAcovUGY0Phxg3R rQ6TRbIL61aI1kTkFzxrd6hvMIu4osygnWX8z+EbGaL/CjFVfjqlFBSFQEUQ6byi 1SoeKFTW6ExnNPbY0qtlxM54iEqH4dpLi8ZOgv9nosuY15Cb8tJAcgpWzT/YG3NY CWJ+L82RUtup0auPi3KK5J/aZNk0zt/oH3R9Fwlz5O9FRpYVyTMLkWVEeif+g9iJ xBUPuaJTtr0zfTL5PaB7EaUM94ehZT8= -----END CERTIFICATE-----Generated at Wed Nov 5 12:22:54 2025 by rpki-client