$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e602d673-4722-3cf4-9fc1-7baeb525d19c.roa File: e602d673-4722-3cf4-9fc1-7baeb525d19c.roa (raw, json) Hash identifier: Z1HSKoVmewGVqgluZSkGRfLIN2bLqjOFpjjVEub1azw= Subject key identifier: B5:E6:DF:98:A5:4C:D2:3E:87:06:59:FB:86:99:7B:59:B4:2D:FA:DA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F803F085D74311B236A000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e602d673-4722-3cf4-9fc1-7baeb525d19c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 68.236.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:03:f0:85:d7:43:11:b2:36:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=0b7b74bd-dcd6-41cf-bce7-04e77f27d1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:7c:6c:63:4b:86:30:77:48:bd:f9:4f:4e: 89:43:6a:70:68:26:6f:10:ed:1b:19:5e:cd:e7:de: d1:11:ac:24:28:be:a4:db:8b:29:33:26:8a:58:9d: d0:96:88:2a:b6:cb:54:20:37:f6:e7:f0:43:4e:fc: 0f:23:f7:64:6b:e0:9b:ce:06:5b:89:b0:e1:85:d7: 3a:48:86:33:6a:aa:9b:dd:ec:5a:48:e1:31:2c:a9: 36:17:21:90:8d:96:07:e7:75:f1:a4:65:be:75:94: 1d:fb:5d:18:a6:24:26:70:0b:06:27:56:da:65:ac: 97:ce:9a:d8:d3:eb:be:f1:7d:44:b9:8b:ee:8a:0c: 21:71:04:0d:ef:74:4f:3a:cb:6b:40:23:e4:79:43: 57:f5:1d:f5:e2:26:c3:f3:17:a3:1f:bc:39:33:b9: 6d:1b:f6:19:19:1c:6f:ca:f9:d0:1d:d7:82:8e:32: c0:5c:06:0b:20:36:31:86:73:a0:50:9d:13:72:18: 0e:7a:35:29:57:e5:ee:8b:2c:06:e2:df:9e:88:5a: 5a:58:e0:05:2e:7f:ee:7f:7d:34:35:0f:29:de:ff: db:48:6d:ed:10:3c:7d:69:20:fd:5c:8b:e5:5b:26: ad:fa:8e:9e:da:88:2e:c7:42:d0:0e:bb:21:30:df: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:DF:98:A5:4C:D2:3E:87:06:59:FB:86:99:7B:59:B4:2D:FA:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e602d673-4722-3cf4-9fc1-7baeb525d19c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.236.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0b:68:63:0a:90:a1:d5:08:9e:62:e6:72:7d:3f:4d:6e:df: b3:50:52:6b:22:dd:f6:1a:2f:ab:c3:21:fc:56:d4:0f:bd:2e: f9:9e:55:54:80:ac:ab:51:09:97:66:c2:56:0c:d5:0f:e9:4b: 6a:05:4b:03:b7:ca:6f:eb:e9:c7:80:5b:ee:a2:40:9a:49:03: 85:2c:09:b9:fc:31:72:72:00:61:09:e3:e4:75:94:6b:b5:56: 7f:61:87:65:25:86:7d:e0:ef:36:34:c0:a8:e4:01:02:df:03: fe:28:9e:e4:9a:8d:9a:21:94:f8:fc:c6:62:97:39:89:01:e9: a0:e2:e3:f0:5f:70:78:27:17:c5:82:34:5f:c8:c0:f3:a1:dd: 0a:6d:a5:6c:2b:96:01:6a:61:a8:06:51:0d:ec:e0:ae:41:39: e0:82:b7:f3:1d:9b:ac:e7:fc:e6:0f:15:3c:fb:04:a4:df:1e: 19:7f:be:a9:b6:be:8c:65:6c:06:47:24:60:a5:80:2f:80:a1: 04:e6:f7:a6:10:5f:c7:e9:5c:f6:27:de:26:4a:ab:4b:80:65: bc:17:b6:02:3a:5d:76:21:cd:49:90:37:c5:07:fd:0e:71:a0: 2c:f5:ab:30:33:27:f5:7a:a1:05:05:6c:ea:43:c5:1b:79:89: ae:b8:ff:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+APwhddDEbI2oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MGI3Yjc0YmQtZGNkNi00MWNmLWJjZTctMDRlNzdmMjdkMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluR8bGNLhjB3SL35T06JQ2pwaCZvEO0bGV7N 597REawkKL6k24spMyaKWJ3QlogqtstUIDf25/BDTvwPI/dka+CbzgZbibDhhdc6 SIYzaqqb3exaSOExLKk2FyGQjZYH53XxpGW+dZQd+10YpiQmcAsGJ1baZayXzprY 0+u+8X1EuYvuigwhcQQN73RPOstrQCPkeUNX9R314ibD8xejH7w5M7ltG/YZGRxv yvnQHdeCjjLAXAYLIDYxhnOgUJ0TchgOejUpV+XuiywG4t+eiFpaWOAFLn/uf300 NQ8p3v/bSG3tEDx9aSD9XIvlWyat+o6e2ogux0LQDrshMN/ydwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXm35ilTNI+hwZZ+4aZe1m0LfraMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTYwMmQ2NzMtNDcyMi0z Y2Y0LTlmYzEtN2JhZWI1MjVkMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFROyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcLaGMKkKHVCJ5i5nJ9P01u37NQUmsi3fYaL6vDIfxW1A+9LvmeVVSA rKtRCZdmwlYM1Q/pS2oFSwO3ym/r6ceAW+6iQJpJA4UsCbn8MXJyAGEJ4+R1lGu1 Vn9hh2Ulhn3g7zY0wKjkAQLfA/4onuSajZohlPj8xmKXOYkB6aDi4/BfcHgnF8WC NF/IwPOh3QptpWwrlgFqYagGUQ3s4K5BOeCCt/Mdm6zn/OYPFTz7BKTfHhl/vqm2 voxlbAZHJGClgC+AoQTm96YQX8fpXPYn3iZKq0uAZbwXtgI6XXYhzUmQN8UH/Q5x oCz1qzAzJ/V6oQUFbOpDxRt5ia64/98= -----END CERTIFICATE-----Generated at Wed Nov 5 12:46:59 2025 by rpki-client