$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa File: 0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa (raw, json) Hash identifier: BvPIPm4F2u6ybzipkODHCpOT8ZigbpBVtjYu/qTp+pk= Subject key identifier: 64:CD:2E:93:A4:C5:7E:C5:1F:76:C7:3A:BE:A7:85:E3:FD:42:5D:C1 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D54352F87BB6AC01C9A00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.191.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:54:35:2f:87:bb:6a:c0:1c:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=d6c6a5a7-b8dd-4268-945e-515b5d331e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:86:72:49:42:fd:6e:0c:bf:0b:40:7c:b2: ca:c2:be:1a:e0:9e:66:0c:90:50:0d:90:67:a2:12: 9e:ca:91:af:c8:10:8b:aa:88:42:aa:a5:e7:50:14: 71:3e:c0:53:68:87:f0:e0:ee:f5:86:74:20:e6:0e: 04:92:57:35:0f:96:08:bb:3f:6c:b6:59:6e:82:2b: 57:38:bc:ac:2c:bd:82:f1:99:68:09:ee:b5:bc:ca: b1:2f:50:9c:d4:e8:c5:a3:29:7e:24:cc:a3:d2:6b: 89:ab:d2:dd:78:a8:8f:bd:c5:5f:61:87:98:b3:87: 1d:8a:be:88:59:ae:1d:d0:22:8e:b0:97:ca:07:7c: d1:9f:81:ef:f7:99:29:14:e4:3a:9d:58:87:44:70: a4:ed:56:2a:29:2e:f0:c6:2b:af:fb:74:44:1a:c5: 54:53:8d:52:76:47:16:55:6e:79:47:37:95:21:d8: e3:3f:03:31:55:39:44:fb:48:e6:85:4c:e1:12:4a: a9:a5:e1:37:0e:85:78:73:f1:76:3f:4c:05:4a:9a: 05:d3:4d:bc:cd:69:cb:2a:d1:54:d8:6e:8f:3c:5f: ad:24:e4:f2:32:f7:b8:03:13:48:28:70:b2:a6:80: 53:44:d3:dc:f7:b4:ee:73:06:87:cf:29:13:b2:18: ab:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CD:2E:93:A4:C5:7E:C5:1F:76:C7:3A:BE:A7:85:E3:FD:42:5D:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:8e:57:72:f8:92:dd:ea:e3:2a:91:cb:17:68:0a:7c:95:06: 6b:76:c6:d8:e6:92:1f:2d:b8:7e:d0:22:7d:91:3d:9c:fb:e4: 75:6c:0e:01:44:55:64:aa:d1:a5:66:de:62:99:59:29:9b:e3: 5b:93:1d:17:3e:03:fb:0d:0e:30:2f:55:59:68:20:c6:e3:ee: 6d:43:7a:49:be:59:f1:b2:f1:5d:11:a2:4a:9a:c0:7f:af:58: c2:5e:fe:2b:8f:62:04:db:70:34:7f:91:15:da:ed:2c:18:07: 13:19:50:e9:af:f7:79:43:07:ce:9e:21:b4:7d:b0:d4:7a:3e: 93:a7:7e:dc:27:1a:5d:a4:3c:14:a2:b0:bc:e1:9f:55:77:7f: 82:c4:3c:f3:5b:5e:13:7b:6d:8f:aa:05:fd:c3:30:61:8c:68: 9c:d1:30:da:42:6e:5e:1c:34:35:73:fd:38:45:7f:15:d2:c5: c9:9a:aa:e0:c1:0f:35:38:b5:f2:cc:24:10:5c:10:b9:d6:af: 8d:24:a5:61:42:1f:6f:4c:96:15:f7:d1:1b:1f:8f:37:24:e5: 63:58:49:b1:7c:ce:2b:90:cd:10:68:0b:42:98:92:79:03:05: b0:eb:24:1a:7b:c2:34:66:a0:83:70:9d:68:d5:37:29:6d:d4: e5:8e:8b:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVQ1L4e7asAcmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZDZjNmE1YTctYjhkZC00MjY4LTk0NWUtNTE1YjVkMzMxZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsCGcklC/W4MvwtAfLLKwr4a4J5mDJBQDZBn ohKeypGvyBCLqohCqqXnUBRxPsBTaIfw4O71hnQg5g4Eklc1D5YIuz9stllugitX OLysLL2C8ZloCe61vMqxL1Cc1OjFoyl+JMyj0muJq9LdeKiPvcVfYYeYs4cdir6I Wa4d0CKOsJfKB3zRn4Hv95kpFOQ6nViHRHCk7VYqKS7wxiuv+3REGsVUU41SdkcW VW55RzeVIdjjPwMxVTlE+0jmhUzhEkqppeE3DoV4c/F2P0wFSpoF0028zWnLKtFU 2G6PPF+tJOTyMve4AxNIKHCypoBTRNPc97TucwaHzykTshirTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTNLpOkxX7FH3bHOr6nheP9Ql3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMGQ4NjhiZTgtMzkxMy0z ZTQ2LTlkOGYtYTBjYjdiZDEyMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2OV3L4kt3q4yqRyxdoCnyVBmt2xtjmkh8tuH7QIn2RPZz75HVsDgFE VWSq0aVm3mKZWSmb41uTHRc+A/sNDjAvVVloIMbj7m1Dekm+WfGy8V0RokqawH+v WMJe/iuPYgTbcDR/kRXa7SwYBxMZUOmv93lDB86eIbR9sNR6PpOnftwnGl2kPBSi sLzhn1V3f4LEPPNbXhN7bY+qBf3DMGGMaJzRMNpCbl4cNDVz/ThFfxXSxcmaquDB DzU4tfLMJBBcELnWr40kpWFCH29MlhX30Rsfjzck5WNYSbF8ziuQzRBoC0KYknkD BbDrJBp7wjRmoINwnWjVNylt1OWOi7s= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:51 2025 by rpki-client