$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2673c159-ad61-356a-8bfc-b59dd51da1e5.roa File: 2673c159-ad61-356a-8bfc-b59dd51da1e5.roa (raw, json) Hash identifier: ynks74Truz78sNDjSpnFGOVERInBS8s+/z914ehdztI= Subject key identifier: 50:5E:32:81:FB:29:B8:0F:68:E7:DE:4C:10:07:89:2B:DE:D0:77:27 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DFCFBB4FBC86F8A71CB00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2673c159-ad61-356a-8bfc-b59dd51da1e5.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.186.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:fc:fb:b4:fb:c8:6f:8a:71:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=f8cf011c-3d5b-466c-9f61-afdbd1571989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9e:23:8e:37:cf:79:2f:a7:96:52:6d:3a:10: f9:1e:84:42:c6:8e:cc:40:f3:1b:c1:28:a4:a3:54: 9d:32:30:8c:dc:23:62:80:e3:c4:13:de:1e:c1:d7: 48:78:95:82:9c:4b:0a:6f:04:63:91:ea:ee:a8:3b: a2:14:31:4d:bc:ba:a8:89:9f:54:d5:81:0a:79:53: 1d:c0:81:9f:71:db:d9:f9:b8:ec:34:15:99:e4:7d: fe:dc:21:0f:4a:24:d6:fc:bf:15:af:75:48:21:81: eb:fd:e6:5b:24:72:4a:41:20:c9:fb:bd:c8:51:43: 34:eb:05:8e:48:e5:33:c0:89:f8:64:42:56:46:a7: ff:d6:7d:86:07:5b:20:24:62:80:0f:39:be:31:32: 17:52:64:fb:1e:7a:0b:dc:c5:f2:5b:04:3a:1d:5f: d7:e6:f6:8d:f5:40:11:20:e8:e0:1c:57:a1:b9:53: 9b:0a:e9:1b:ee:83:b4:ce:63:31:fa:00:f3:3b:2a: 04:cd:e1:0a:59:96:55:87:4b:35:d1:98:e7:10:0c: e3:4d:34:76:7e:f4:b9:5d:3e:e7:77:fa:6e:e1:0e: b8:b9:08:ee:f4:fc:6a:2b:93:cc:c2:f8:06:c9:b6: 4a:d0:77:10:5b:95:5b:21:bf:57:da:8f:23:ff:16: d2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5E:32:81:FB:29:B8:0F:68:E7:DE:4C:10:07:89:2B:DE:D0:77:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2673c159-ad61-356a-8bfc-b59dd51da1e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.186.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b4:be:dd:f0:c8:2c:63:9f:91:e3:0a:30:00:23:b4:ce:39: dc:d4:95:8a:d7:22:87:95:df:83:54:b4:08:a5:5e:5b:4d:d8: 49:e8:80:8b:5f:b5:99:c8:d6:76:90:ea:99:aa:d1:4c:ef:47: 50:18:26:94:0f:d1:63:62:16:82:ef:c9:2f:86:fa:b0:8b:80: 8d:e8:d0:49:ad:d9:e8:2c:f8:91:59:41:72:19:9b:42:c6:d2: 50:39:a6:3d:0d:e5:57:6b:05:74:0d:3e:d9:0e:48:6d:70:93: 68:13:31:07:1b:a0:2a:5f:d1:43:d2:34:28:d5:ec:24:46:57: 09:dc:cc:2d:f0:59:cc:ec:f4:0a:7a:b5:12:ae:76:ea:ce:ff: 2e:96:98:9d:45:f6:d0:6f:d2:ed:4a:67:23:2c:2b:40:f3:f4: 0c:3c:47:02:ee:64:3e:0a:94:9e:31:b8:72:a4:99:70:de:79: a9:7a:ae:73:d7:8e:3d:47:1a:42:61:58:ad:00:ec:ae:c3:9c: 50:ca:94:b1:1e:90:b0:7d:29:d9:4e:22:07:60:7e:5e:09:cf: a4:e4:20:c4:56:bf:c5:d7:08:50:01:8c:5a:a4:ca:6e:18:b8: e3:50:57:d9:da:6f:98:9d:5f:50:b6:46:b5:4d:2c:77:04:63: 70:11:4e:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHfz7tPvIb4pxywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZjhjZjAxMWMtM2Q1Yi00NjZjLTlmNjEtYWZkYmQxNTcxOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp4jjjfPeS+nllJtOhD5HoRCxo7MQPMbwSik o1SdMjCM3CNigOPEE94ewddIeJWCnEsKbwRjkeruqDuiFDFNvLqoiZ9U1YEKeVMd wIGfcdvZ+bjsNBWZ5H3+3CEPSiTW/L8Vr3VIIYHr/eZbJHJKQSDJ+73IUUM06wWO SOUzwIn4ZEJWRqf/1n2GB1sgJGKADzm+MTIXUmT7HnoL3MXyWwQ6HV/X5vaN9UAR IOjgHFehuVObCukb7oO0zmMx+gDzOyoEzeEKWZZVh0s10ZjnEAzjTTR2fvS5XT7n d/pu4Q64uQju9PxqK5PMwvgGybZK0HcQW5VbIb9X2o8j/xbSfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBeMoH7KbgPaOfeTBAHiSve0HcnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjY3M2MxNTktYWQ2MS0z NTZhLThiZmMtYjU5ZGQ1MWRhMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJq0vt3wyCxjn5HjCjAAI7TOOdzUlYrXIoeV34NUtAilXltN2EnogItf tZnI1naQ6pmq0UzvR1AYJpQP0WNiFoLvyS+G+rCLgI3o0Emt2egs+JFZQXIZm0LG 0lA5pj0N5VdrBXQNPtkOSG1wk2gTMQcboCpf0UPSNCjV7CRGVwnczC3wWczs9Ap6 tRKudurO/y6WmJ1F9tBv0u1KZyMsK0Dz9Aw8RwLuZD4KlJ4xuHKkmXDeeal6rnPX jj1HGkJhWK0A7K7DnFDKlLEekLB9KdlOIgdgfl4Jz6TkIMRWv8XXCFABjFqkym4Y uONQV9nab5idX1C2RrVNLHcEY3ARTvo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:41 2025 by rpki-client