$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b35745d3-9816-3e5f-aabf-f2934a6876e1.roa File: b35745d3-9816-3e5f-aabf-f2934a6876e1.roa (raw, json) Hash identifier: TGNf0/bJdPFBcUw3y+ZlXBIB52ysGAT4Jpp9WqHQ3OU= Subject key identifier: 69:80:90:D3:37:31:53:FF:16:17:8C:62:CD:48:46:4A:B9:54:FC:87 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DF80C101B0F010973EEE0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b35745d3-9816-3e5f-aabf-f2934a6876e1.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.115.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:f8:0c:10:1b:0f:01:09:73:ee:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=6b683bb3-691b-40a6-bb06-320164c200e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:84:a3:24:5c:2d:0e:31:22:cc:ad:c2:f6: 9e:04:88:14:8c:5f:82:33:bd:22:e1:d4:45:cd:e8: 25:76:ee:14:4f:6d:23:cc:c0:71:e1:c8:a8:27:5c: c3:21:3c:4b:5d:e1:8e:e8:60:51:19:d7:66:2c:45: 6f:50:25:49:ea:4e:ee:dc:dd:3b:1f:cd:95:eb:0a: c0:5e:b1:15:01:1f:13:af:68:58:9c:91:66:41:5d: 66:68:8f:49:bb:12:35:ee:2f:87:cb:1e:fd:c5:1f: a4:0f:8a:17:75:d2:90:3a:9c:75:c8:4e:c9:92:5b: 3c:cc:bb:6c:bc:c6:25:77:80:6a:00:3e:ac:be:f4: c1:2e:15:21:2e:6c:93:1c:f2:8a:11:ad:21:b2:c2: a0:c4:31:d5:8c:7d:90:60:89:16:5d:2e:77:55:5e: ea:9b:3a:2c:0d:ca:01:3c:2d:ac:35:53:b0:5e:f3: b6:eb:d7:51:e7:eb:83:9e:7c:63:e5:ed:fd:82:ac: ca:47:11:2f:3a:ac:98:c3:19:17:ea:fd:f1:e4:d6: 4a:02:b4:ef:89:17:a9:ce:ce:58:ac:70:e7:88:9b: cf:30:bc:dd:12:b0:72:7f:0f:34:3e:35:7d:30:9d: 41:2c:10:80:ba:d4:d2:91:7c:26:e3:72:ee:f0:00: 11:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:80:90:D3:37:31:53:FF:16:17:8C:62:CD:48:46:4A:B9:54:FC:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b35745d3-9816-3e5f-aabf-f2934a6876e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.115.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d2:a9:3d:f3:53:bd:25:79:bd:31:57:17:d2:8e:fd:37:cf: 5a:01:66:f5:3d:22:dd:81:24:6b:dd:31:85:22:06:0c:bb:3d: 8e:a0:cf:3f:14:aa:fa:e1:98:a6:7b:0a:5f:86:09:83:f0:d2: 28:e9:60:85:05:d4:d8:29:da:fe:58:d7:aa:aa:0f:2a:c0:b2: eb:19:48:47:0a:10:10:c3:c2:a4:75:1a:00:5a:b1:36:8c:d5: 91:f7:6e:5b:d2:f0:35:26:58:ff:d8:a9:7c:5f:db:1d:08:04: 1e:4b:1f:7a:48:be:9e:01:97:07:bc:14:4a:c2:d4:16:bd:ab: d3:c4:e3:b7:41:20:54:ee:5a:b6:fb:05:66:ae:99:d6:40:d5: 3d:c1:5a:ed:0e:4f:c7:7a:cc:90:89:38:9a:8b:9e:ee:1d:12: 0f:bc:8d:4b:1c:28:98:96:4d:6e:e2:d7:d7:c0:62:25:e9:0e: 02:76:da:48:d2:88:84:4a:55:81:da:23:fa:c0:af:f0:8f:40: 64:71:2d:5a:8a:03:ef:47:42:eb:dc:9d:15:db:b9:29:05:21: 28:da:87:14:72:bc:16:d0:26:13:4b:cb:5d:44:45:3b:f9:93: 1e:6b:1b:5a:a6:d3:09:33:84:87:4f:fb:52:60:92:63:7a:36: c6:ec:4d:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHfgMEBsPAQlz7uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NmI2ODNiYjMtNjkxYi00MGE2LWJiMDYtMzIwMTY0YzIwMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0OEoyRcLQ4xIsytwvaeBIgUjF+CM70i4dRF zegldu4UT20jzMBx4cioJ1zDITxLXeGO6GBRGddmLEVvUCVJ6k7u3N07H82V6wrA XrEVAR8Tr2hYnJFmQV1maI9JuxI17i+Hyx79xR+kD4oXddKQOpx1yE7Jkls8zLts vMYld4BqAD6svvTBLhUhLmyTHPKKEa0hssKgxDHVjH2QYIkWXS53VV7qmzosDcoB PC2sNVOwXvO269dR5+uDnnxj5e39gqzKRxEvOqyYwxkX6v3x5NZKArTviRepzs5Y rHDniJvPMLzdErByfw80PjV9MJ1BLBCAutTSkXwm43Lu8AARCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmAkNM3MVP/FheMYs1IRkq5VPyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjM1NzQ1ZDMtOTgxNi0z ZTVmLWFhYmYtZjI5MzRhNjg3NmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARHPZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHSqT3zU70leb0xVxfSjv03z1oBZvU9It2BJGvdMYUiBgy7PY6gzz8U qvrhmKZ7Cl+GCYPw0ijpYIUF1Ngp2v5Y16qqDyrAsusZSEcKEBDDwqR1GgBasTaM 1ZH3blvS8DUmWP/YqXxf2x0IBB5LH3pIvp4Blwe8FErC1Ba9q9PE47dBIFTuWrb7 BWaumdZA1T3BWu0OT8d6zJCJOJqLnu4dEg+8jUscKJiWTW7i19fAYiXpDgJ22kjS iIRKVYHaI/rAr/CPQGRxLVqKA+9HQuvcnRXbuSkFISjahxRyvBbQJhNLy11ERTv5 kx5rG1qm0wkzhIdP+1JgkmN6NsbsTXo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:21 2025 by rpki-client