$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd721385-71db-376b-8f0d-b8bd8a12c60d.roa File: fd721385-71db-376b-8f0d-b8bd8a12c60d.roa (raw, json) Hash identifier: iNdmamM/+uaLXOWLQn6hFVdAaz8rnAyp4yEg7CCtGOo= Subject key identifier: 4B:D4:65:8B:36:7E:91:2C:60:B3:26:31:FD:33:01:65:6F:2A:7F:37 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B98723F1A05D9DCD93A250C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd721385-71db-376b-8f0d-b8bd8a12c60d.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 13671 IP address blocks: 68.128.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3f:1a:05:d9:dc:d9:3a:25:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=1d53844b-1e4d-40ee-a98c-b263cc278ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:4f:0e:da:dd:4d:02:99:e2:da:d4:56:48: a9:52:4b:ba:7e:ae:59:89:4a:10:39:f8:9c:fe:ce: aa:07:4e:5c:38:08:0c:ee:ab:d4:3e:48:2a:57:6c: 31:3d:52:59:ff:36:b0:68:07:9d:9d:8b:72:e0:68: 38:d7:d9:0d:50:75:6a:88:99:1d:b5:77:5a:96:57: 07:64:9d:c6:2f:fa:b3:9f:58:70:b1:20:42:eb:15: 58:58:30:2b:79:7a:1a:a9:da:1d:ef:d8:00:49:d7: 2f:96:c1:d6:6e:e8:42:7b:5f:6f:95:4e:6c:47:75: d8:b8:db:fd:80:33:69:29:25:b8:75:64:3a:f3:09: a1:9d:16:c4:3a:82:e8:d7:62:27:30:5a:29:a3:a8: 1d:1d:b3:e2:a0:5d:a3:c5:90:e3:3e:2b:8e:58:5e: b8:d0:1a:4b:2a:32:42:12:07:85:49:6d:77:76:39: 87:21:7d:e3:41:e3:09:e0:9b:5d:cf:bc:ce:c1:58: 2b:a7:72:12:41:00:9c:0a:a8:43:0a:5f:8d:87:8b: b2:f7:eb:eb:9e:42:d4:ae:fd:ea:57:9d:5d:9c:06: 38:2e:17:9d:de:b7:39:c0:94:83:08:90:79:f5:3b: 1b:d3:db:1d:d6:21:67:90:35:ad:14:cd:8e:44:71: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D4:65:8B:36:7E:91:2C:60:B3:26:31:FD:33:01:65:6F:2A:7F:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd721385-71db-376b-8f0d-b8bd8a12c60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5d:bc:45:a8:9d:8d:bf:8d:00:af:74:62:72:5e:8b:09:23: b9:06:b7:d9:cc:ac:87:d6:c6:99:6a:54:6f:82:3f:d4:9c:04: 5b:f0:24:40:fc:e9:94:97:3d:e4:19:53:94:22:ae:68:44:64: 83:ec:db:d3:a6:d8:48:67:c6:c2:ff:31:a7:7a:d5:8e:29:2f: 12:83:23:17:da:92:d0:e8:3b:e7:91:01:1a:49:96:ba:c4:0b: bc:da:39:fd:81:e1:64:f1:1f:34:cf:0c:9b:6d:69:7b:be:a4: 72:7a:30:27:a7:ea:30:4f:fa:69:ad:a7:36:b8:8a:bf:c9:1a: 83:e5:06:c2:ff:2e:5e:4c:6e:9e:cd:0c:77:31:6c:66:51:70: e4:ea:37:8c:29:0f:db:20:23:bc:b4:e0:4a:75:8e:c3:81:5a: 19:7a:c4:26:59:71:c2:f5:12:6a:29:17:c6:28:c3:97:ba:ad: 5e:98:46:7f:ce:4a:85:21:87:5c:64:f4:36:e4:0c:40:d7:b8: 2c:6b:4c:6e:08:35:ac:75:d7:b2:62:e4:0a:50:01:e1:68:50: ad:f0:68:c6:48:07:ef:6d:9a:d1:b6:b0:c6:34:83:63:db:b8: e4:e9:3d:51:92:58:08:8d:42:e8:34:3c:89:3a:b8:cc:44:91: ec:09:a0:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcj8aBdnc2TolDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MWQ1Mzg0NGItMWU0ZC00MGVlLWE5OGMtYjI2M2NjMjc4Y2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1FPDtrdTQKZ4trUVkipUku6fq5ZiUoQOfic /s6qB05cOAgM7qvUPkgqV2wxPVJZ/zawaAednYty4Gg419kNUHVqiJkdtXdallcH ZJ3GL/qzn1hwsSBC6xVYWDAreXoaqdod79gASdcvlsHWbuhCe19vlU5sR3XYuNv9 gDNpKSW4dWQ68wmhnRbEOoLo12InMFopo6gdHbPioF2jxZDjPiuOWF640BpLKjJC EgeFSW13djmHIX3jQeMJ4Jtdz7zOwVgrp3ISQQCcCqhDCl+Nh4uy9+vrnkLUrv3q V51dnAY4Lhed3rc5wJSDCJB59Tsb09sd1iFnkDWtFM2ORHFmtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvUZYs2fpEsYLMmMf0zAWVvKn83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmQ3MjEzODUtNzFkYi0z NzZiLThmMGQtYjhiZDhhMTJjNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBdvEWonY2/jQCvdGJyXosJI7kGt9nMrIfWxplqVG+CP9ScBFvwJED8 6ZSXPeQZU5QirmhEZIPs29Om2EhnxsL/Mad61Y4pLxKDIxfaktDoO+eRARpJlrrE C7zaOf2B4WTxHzTPDJttaXu+pHJ6MCen6jBP+mmtpza4ir/JGoPlBsL/Ll5Mbp7N DHcxbGZRcOTqN4wpD9sgI7y04Ep1jsOBWhl6xCZZccL1EmopF8Yow5e6rV6YRn/O SoUhh1xk9DbkDEDXuCxrTG4INax117Ji5ApQAeFoUK3waMZIB+9tmtG2sMY0g2Pb uOTpPVGSWAiNQug0PIk6uMxEkewJoNs= -----END CERTIFICATE-----Generated at Wed Nov 5 18:05:29 2025 by rpki-client