$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa File: eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa (raw, json) Hash identifier: RVlsVlqCfJJkD5H1/9Rnqbu+0zg2x8JhfV4xFXIFqUk= Subject key identifier: 35:87:26:27:79:E3:6D:11:08:44:DF:EF:26:F7:9F:9C:7C:D7:C4:02 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DFD34A06C37E517A924C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.189.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:fd:34:a0:6c:37:e5:17:a9:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=77e38b48-48eb-41b4-a23d-2d26456c5f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:17:dc:5f:c6:52:88:92:f9:0f:a7:c4:e9:7f: ee:42:3d:3a:1c:0b:76:98:46:de:f8:0d:79:61:0f: f4:02:0a:e9:72:0d:46:96:70:ec:e5:b5:b3:bc:20: 5c:2e:9d:b9:a6:c0:20:a2:54:88:5d:68:7d:73:ce: f5:90:9a:cc:6c:b2:63:c5:c3:7f:2f:81:34:6f:ac: b5:0f:7e:71:dc:cb:29:35:55:7e:00:8b:b3:15:8c: 15:e6:2c:c2:99:5a:55:29:d2:7e:71:92:81:e3:bf: 48:74:5e:0d:6f:b8:87:68:0d:b7:57:f2:d7:eb:f2: 09:50:21:a0:9d:5a:39:5b:55:13:03:7f:16:79:4b: 14:71:8f:13:b5:42:20:95:ca:9b:15:9b:4c:0f:76: db:dc:0a:c8:52:fd:0b:17:fe:82:6f:2f:7d:08:a2: 81:35:4b:79:0b:9c:44:3f:c7:eb:22:e8:19:31:3e: d9:88:50:e8:bf:cd:3a:71:ab:2f:60:0e:20:ea:1c: 65:46:d6:48:ed:66:73:36:43:f2:d8:f9:4a:ca:01: a4:19:40:2b:17:16:e6:7f:0e:04:13:07:d1:96:2f: 98:4c:18:3c:bc:5e:c3:40:4e:7b:6a:c6:6e:ce:8e: 60:b1:d7:47:f1:7c:93:09:1c:a4:12:6f:de:76:90: f7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:87:26:27:79:E3:6D:11:08:44:DF:EF:26:F7:9F:9C:7C:D7:C4:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.189.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:80:d7:0f:99:ba:ae:5b:c3:b1:9f:8b:8d:b8:93:d5:ec:99: 36:7b:ba:02:38:f5:3d:6e:91:76:f0:d7:4a:2b:38:94:16:38: 1b:f1:5f:48:a4:df:f2:4d:bd:56:6a:6a:ea:fc:3d:b6:06:5f: 5f:62:5c:a6:6d:2e:c8:02:6f:7f:d0:94:c6:d3:27:41:75:67: 7d:d9:f1:79:c1:90:ab:9c:34:46:fe:dc:44:ff:76:75:b8:e2: 52:f7:7b:70:b7:c6:e8:70:6e:2e:34:54:21:9a:52:d9:73:5b: d7:1d:f8:a9:b1:0c:c2:7b:a3:54:a6:4f:a0:b1:20:5f:10:96: 7f:5d:1f:75:6f:c9:c1:a1:04:07:92:97:95:f8:34:df:c2:09: 5e:00:53:26:f4:2c:85:00:fc:c8:17:1c:6f:5a:27:0d:ca:54: 52:df:c3:06:1f:12:94:28:c1:e4:12:61:dc:d1:78:eb:b9:6b: 3b:b5:07:3d:34:d9:cd:1c:29:c2:40:40:4a:c5:cc:ef:fa:68: d5:a5:50:93:95:be:6f:d6:e7:ff:d0:4f:b1:df:f8:72:3b:c4: 50:bc:b1:14:3c:e9:96:f6:97:9e:33:9a:ed:43:0a:66:e6:a1: c6:62:1d:55:f0:29:2d:c3:c0:ec:9a:47:69:94:51:1b:a7:18: 3f:bd:a6:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHf00oGw35RepJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NzdlMzhiNDgtNDhlYi00MWI0LWEyM2QtMmQyNjQ1NmM1ZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRfcX8ZSiJL5D6fE6X/uQj06HAt2mEbe+A15 YQ/0Agrpcg1GlnDs5bWzvCBcLp25psAgolSIXWh9c871kJrMbLJjxcN/L4E0b6y1 D35x3MspNVV+AIuzFYwV5izCmVpVKdJ+cZKB479IdF4Nb7iHaA23V/LX6/IJUCGg nVo5W1UTA38WeUsUcY8TtUIglcqbFZtMD3bb3ArIUv0LF/6Cby99CKKBNUt5C5xE P8frIugZMT7ZiFDov806casvYA4g6hxlRtZI7WZzNkPy2PlKygGkGUArFxbmfw4E EwfRli+YTBg8vF7DQE57asZuzo5gsddH8XyTCRykEm/edpD3XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWHJid5420RCETf7yb3n5x818QCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZWNlYjcwNjYtZGE0OS0z OGVhLTkzZTctYTE2NWIwYWE3YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeA1w+Zuq5bw7Gfi424k9XsmTZ7ugI49T1ukXbw10orOJQWOBvxX0ik 3/JNvVZqaur8PbYGX19iXKZtLsgCb3/QlMbTJ0F1Z33Z8XnBkKucNEb+3ET/dnW4 4lL3e3C3xuhwbi40VCGaUtlzW9cd+KmxDMJ7o1SmT6CxIF8Qln9dH3VvycGhBAeS l5X4NN/CCV4AUyb0LIUA/MgXHG9aJw3KVFLfwwYfEpQoweQSYdzReOu5azu1Bz00 2c0cKcJAQErFzO/6aNWlUJOVvm/W5//QT7Hf+HI7xFC8sRQ86Zb2l54zmu1DCmbm ocZiHVXwKS3DwOyaR2mUURunGD+9pn0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:14 2025 by rpki-client