$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e40cc47a-c5cd-305f-b6dd-c2159a20d16e.roa File: e40cc47a-c5cd-305f-b6dd-c2159a20d16e.roa (raw, json) Hash identifier: 644n2NkUwD97+DJVqZOfpaR4OTtTm93lnmUMBJz82kY= Subject key identifier: 94:52:CC:B2:D8:2D:DC:D4:93:E3:6A:C2:6A:FD:CB:29:6A:39:E2:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD10707DFB073E555C0D51 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e40cc47a-c5cd-305f-b6dd-c2159a20d16e.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 68.236.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:10:70:7d:fb:07:3e:55:5c:0d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=12240be8-bb8a-4df8-a131-fbf2a5db71aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:91:79:78:8f:9a:e1:c3:f6:34:22:36:c3:57: 5a:9c:8b:a9:ff:e5:d9:1f:e2:e3:6a:7f:bd:35:95: 16:81:53:10:1c:e2:34:2f:df:7b:dd:4d:b9:d1:1b: 5d:c7:4f:de:a2:90:28:b7:82:0e:d2:5e:84:04:ee: 5b:75:09:6a:2c:86:d4:12:98:8d:44:bd:95:c2:00: 57:60:45:9b:e1:62:4b:0b:8f:5e:2b:5a:00:57:c0: c2:c3:5e:05:7c:12:28:13:c9:04:6f:32:87:99:41: dc:b8:71:ca:59:b3:cb:79:9d:ff:8b:1b:36:f8:84: bf:6d:18:56:56:4c:c8:00:80:d3:46:33:6e:d2:c7: a4:8a:b5:b8:c3:e5:6c:92:95:e2:81:d0:c1:95:a1: 8e:db:ad:cb:fd:43:c6:00:93:ac:ff:52:78:c9:48: 7a:ec:47:aa:4e:e8:b3:f1:d4:3f:f8:e5:1a:79:b3: 40:4a:ef:d8:f5:aa:07:f2:d9:20:b9:14:27:9a:17: c8:e5:f2:28:c3:74:46:3a:46:1b:72:b6:0d:21:ba: eb:72:17:3d:a4:f1:3c:d7:3d:63:9a:8a:4d:57:1a: d9:65:0d:cb:3d:6c:50:2c:9d:6a:99:56:4d:78:9c: c5:b8:08:d7:03:14:70:8f:ac:50:19:08:05:25:ef: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:52:CC:B2:D8:2D:DC:D4:93:E3:6A:C2:6A:FD:CB:29:6A:39:E2:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e40cc47a-c5cd-305f-b6dd-c2159a20d16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.236.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:17:e0:c4:b2:e0:28:e9:ad:a5:f8:e6:02:1b:84:ba:08:cc: a4:ec:19:73:9b:3d:91:92:58:19:18:dc:bc:02:09:db:ed:42: 06:8e:ae:d9:25:b8:8e:4e:e1:c8:14:4d:96:4f:0e:76:ae:51: 5e:50:9b:5b:34:32:63:c2:12:2b:fd:b3:fc:49:d1:8b:00:29: 8a:98:9b:9b:3c:aa:f0:6e:17:02:2a:a9:c3:eb:d4:d3:76:a8: 25:41:b2:fa:d0:6a:ca:ae:aa:ae:d7:30:a5:f8:e1:1d:36:e0: b9:03:4e:85:42:f4:f7:b2:40:47:48:dc:ad:fb:62:76:cc:05: 23:b4:ab:b0:5b:03:8c:d8:df:a9:8a:28:e2:c6:39:85:12:3a: b1:9e:d4:3d:7c:36:ad:19:b0:79:c9:de:9c:68:ce:aa:83:38: 7f:a4:42:45:58:6c:ee:ef:4e:58:d8:0e:f5:28:e9:e0:62:a2: c0:bc:09:62:3d:eb:6f:7d:15:32:37:b8:a2:e9:22:75:98:bf: 2b:95:31:b2:70:3a:da:99:94:4c:3b:eb:ae:95:d1:e9:9f:c8: 73:2b:1c:15:c5:24:2a:d5:66:e3:79:4f:f8:e8:6a:33:87:ab: 01:6f:ca:8a:75:8b:46:b2:b3:a9:2c:ac:b4:41:30:af:58:52: 40:ec:27:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RBwffsHPlVcDVEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MTIyNDBiZTgtYmI4YS00ZGY4LWExMzEtZmJmMmE1ZGI3MWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5F5eI+a4cP2NCI2w1danIup/+XZH+Ljan+9 NZUWgVMQHOI0L9973U250Rtdx0/eopAot4IO0l6EBO5bdQlqLIbUEpiNRL2VwgBX YEWb4WJLC49eK1oAV8DCw14FfBIoE8kEbzKHmUHcuHHKWbPLeZ3/ixs2+IS/bRhW VkzIAIDTRjNu0sekirW4w+VskpXigdDBlaGO263L/UPGAJOs/1J4yUh67EeqTuiz 8dQ/+OUaebNASu/Y9aoH8tkguRQnmhfI5fIow3RGOkYbcrYNIbrrchc9pPE81z1j mopNVxrZZQ3LPWxQLJ1qmVZNeJzFuAjXAxRwj6xQGQgFJe9JKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRSzLLYLdzUk+Nqwmr9yylqOeK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTQwY2M0N2EtYzVjZC0z MDVmLWI2ZGQtYzIxNTlhMjBkMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFROygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIX4MSy4CjpraX45gIbhLoIzKTsGXObPZGSWBkY3LwCCdvtQgaOrtkl uI5O4cgUTZZPDnauUV5Qm1s0MmPCEiv9s/xJ0YsAKYqYm5s8qvBuFwIqqcPr1NN2 qCVBsvrQasquqq7XMKX44R024LkDToVC9PeyQEdI3K37YnbMBSO0q7BbA4zY36mK KOLGOYUSOrGe1D18Nq0ZsHnJ3pxozqqDOH+kQkVYbO7vTljYDvUo6eBiosC8CWI9 6299FTI3uKLpInWYvyuVMbJwOtqZlEw7666V0emfyHMrHBXFJCrVZuN5T/joajOH qwFvyop1i0ays6ksrLRBMK9YUkDsJ3c= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:06 2025 by rpki-client