$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa File: e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa (raw, json) Hash identifier: RrZp6gdyXCZ0gnDILCbAAkU0NzHhjb+bJSS+D3EwHsM= Subject key identifier: A2:65:C2:5F:EE:0D:8A:F6:B1:5C:A7:94:95:67:13:78:73:9B:13:94 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C370EE38A0F0D3AC5E08E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 68.238.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:0e:e3:8a:0f:0d:3a:c5:e0:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=0a191e1a-bd10-4e6e-8415-0ac3430c65a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:c7:e3:00:92:90:cf:27:cc:52:a9:93:bd: ec:95:5e:94:48:12:9e:13:60:26:2c:2d:22:3c:66: b5:a4:ee:6e:e9:5e:64:a5:56:f1:c5:1e:83:59:cf: 0a:fd:1e:d5:59:63:3d:30:71:c7:ff:02:7a:8e:4a: 91:9a:86:ae:54:90:e7:12:7a:0a:50:4d:09:75:c9: 8b:ea:a7:db:3e:42:98:cd:15:89:8c:f7:65:da:cb: 4d:a7:28:f1:1d:1b:0c:25:ab:89:f2:43:b6:f4:d2: 87:5e:49:c9:ed:86:15:0c:ca:62:ca:eb:f6:21:38: 22:87:18:88:21:ba:98:ae:46:39:22:fb:13:d8:0f: de:12:92:10:d5:32:22:d3:5d:09:d9:0b:2f:b1:ec: 0e:3a:d7:76:18:c3:6f:f5:a7:7d:ce:98:9e:a2:c0: a3:0b:3f:19:84:a8:af:84:7c:f5:60:a2:a4:c1:74: 32:b2:b4:30:6d:1a:81:07:0b:bf:62:2a:b4:21:cd: aa:21:3c:f8:7a:02:b0:58:41:77:40:1c:7e:f6:4b: c9:fa:eb:b6:52:13:3e:12:a9:62:a3:11:a1:4d:79: 63:19:63:29:6e:b2:33:59:e0:56:eb:fe:da:39:7d: 88:a3:68:6b:51:8e:37:69:3f:ef:d9:f4:76:68:a7: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:65:C2:5F:EE:0D:8A:F6:B1:5C:A7:94:95:67:13:78:73:9B:13:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0b:ba:c1:db:75:30:01:97:f9:36:fb:98:dc:b2:44:ec:d2: a4:82:a9:85:87:95:f2:c7:2c:de:df:32:18:40:2e:9e:cb:48: 8e:95:57:03:21:03:37:0f:7f:d7:6c:36:83:84:ac:60:fc:d2: 97:2d:f9:41:40:25:16:29:0d:5a:4a:bb:da:51:4c:96:69:66: 46:f8:aa:15:47:cd:1c:ff:33:de:0c:68:29:9a:a6:52:f6:2d: 35:dc:5e:fa:33:e4:fc:0b:50:9e:3f:7f:48:bd:d2:35:b5:dd: a1:d7:42:51:e3:57:04:00:81:25:84:b5:83:63:e8:5b:7d:3a: 9e:72:55:16:ef:10:50:33:d3:1f:4e:f9:bc:d2:bd:66:45:01: f3:8a:f3:cc:44:be:09:ea:30:0a:36:ff:91:0c:a5:41:f8:b0: 53:a9:09:56:7b:e5:b4:67:d4:72:9d:b9:2f:48:0b:0b:ae:80: b4:09:4c:a5:51:80:74:a9:28:fb:d7:ed:b8:64:ba:a7:2b:50: 41:73:62:68:2b:c0:97:06:ad:2a:96:60:88:4c:2c:ca:0e:b3: d2:7e:14:c4:21:18:b3:a6:02:cd:58:c4:96:3c:b7:e8:14:28: 1f:cc:d7:39:44:07:97:f4:51:82:d3:45:60:6a:11:4f:78:1a: d5:38:e1:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNw7jig8NOsXgjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MGExOTFlMWEtYmQxMC00ZTZlLTg0MTUtMGFjMzQzMGM2NWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWTH4wCSkM8nzFKpk73slV6USBKeE2AmLC0i PGa1pO5u6V5kpVbxxR6DWc8K/R7VWWM9MHHH/wJ6jkqRmoauVJDnEnoKUE0JdcmL 6qfbPkKYzRWJjPdl2stNpyjxHRsMJauJ8kO29NKHXknJ7YYVDMpiyuv2ITgihxiI IbqYrkY5IvsT2A/eEpIQ1TIi010J2QsvsewOOtd2GMNv9ad9zpieosCjCz8ZhKiv hHz1YKKkwXQysrQwbRqBBwu/Yiq0Ic2qITz4egKwWEF3QBx+9kvJ+uu2UhM+Eqli oxGhTXljGWMpbrIzWeBW6/7aOX2Io2hrUY43aT/v2fR2aKcOGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJlwl/uDYr2sVynlJVnE3hzmxOUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTI0ZjAwYjUtMmY1MC0z MDViLTk3OTYtM2VmODlhYzBkZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO4BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgLusHbdTABl/k2+5jcskTs0qSCqYWHlfLHLN7fMhhALp7LSI6VVwMh AzcPf9dsNoOErGD80pct+UFAJRYpDVpKu9pRTJZpZkb4qhVHzRz/M94MaCmaplL2 LTXcXvoz5PwLUJ4/f0i90jW13aHXQlHjVwQAgSWEtYNj6Ft9Op5yVRbvEFAz0x9O +bzSvWZFAfOK88xEvgnqMAo2/5EMpUH4sFOpCVZ75bRn1HKduS9ICwuugLQJTKVR gHSpKPvX7bhkuqcrUEFzYmgrwJcGrSqWYIhMLMoOs9J+FMQhGLOmAs1YxJY8t+gU KB/M1zlEB5f0UYLTRWBqEU94GtU44ag= -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:40 2025 by rpki-client