$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2aa52401-83ad-3a79-b663-87e9f1dbb1a7.roa File: 2aa52401-83ad-3a79-b663-87e9f1dbb1a7.roa (raw, json) Hash identifier: 5/vtZhhwBJacyjKZ5zcme9odP2MRmeUpL+hwbLGMRFg= Subject key identifier: DE:C3:A3:A0:5A:73:28:91:4F:34:7C:38:EA:A1:FA:B3:0A:2C:74:54 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D59F9DFDA9ECE51967600 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2aa52401-83ad-3a79-b663-87e9f1dbb1a7.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.191.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:59:f9:df:da:9e:ce:51:96:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=76ce07a2-4285-4dea-bff4-8a184696cdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:58:28:04:12:96:df:e7:60:25:6f:e1:0a:66: 9c:a4:d8:74:3e:c8:b0:58:b0:4d:7b:22:ed:40:2e: 1a:e1:9e:c7:35:1d:21:0c:7d:fe:a6:6d:7b:a4:7e: 79:c8:65:5b:1a:1b:1c:a1:35:c3:06:47:6b:92:20: df:38:59:a8:90:94:40:1e:f7:41:ce:30:f0:8e:0f: 49:36:8c:bc:a1:11:0a:7f:0a:7e:a4:c8:b1:85:ef: 9a:98:c8:58:12:db:fe:6a:de:ba:3e:1f:77:d3:00: 3a:e4:c4:c4:bc:dc:ec:ee:29:f0:8c:af:9f:9a:05: 6f:cd:de:dc:21:4f:f8:a3:86:84:c7:3f:3e:9f:f2: fd:f1:f6:68:33:ba:d8:98:e3:21:68:a0:ed:ac:47: 82:66:d2:43:9b:e6:d5:b9:2a:89:13:8b:e0:b8:d1: db:d6:23:7a:79:6a:0f:89:dc:c3:38:03:da:93:f6: ee:f3:43:e7:e6:b0:a2:16:27:32:a6:c9:61:71:de: f4:99:4e:a2:ef:6f:34:cf:3a:42:fb:25:27:58:99: 27:d3:b1:7c:0c:15:9c:79:57:3f:de:06:34:bc:ee: bc:30:39:0d:7c:1d:29:d9:92:40:09:13:dd:ee:e7: f0:55:59:f7:c6:c7:62:71:40:5e:8c:78:4d:ec:bd: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C3:A3:A0:5A:73:28:91:4F:34:7C:38:EA:A1:FA:B3:0A:2C:74:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2aa52401-83ad-3a79-b663-87e9f1dbb1a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:24:b7:1f:1b:81:34:b7:36:1d:71:8f:51:67:06:90:81:33: 5a:82:a4:7d:c4:92:33:b1:6c:a5:03:70:2a:95:15:77:6e:40: 39:e1:63:87:4c:f5:f1:87:1d:e7:7e:1a:f8:d0:1b:bb:12:c1: c0:47:55:1c:a8:7d:b3:bc:31:ce:22:a4:6d:6b:8c:0b:56:c5: 52:1e:99:d5:91:1d:aa:12:60:b9:60:37:7b:30:65:75:36:ee: c4:8c:97:75:98:78:f7:d8:92:0b:3a:ab:a5:06:28:88:87:d0: 4a:9c:96:22:86:4a:bd:48:90:85:27:b2:ca:16:3f:41:ec:f0: 3e:2a:3a:74:8d:fa:4a:f7:f0:24:9e:b0:15:70:cc:d7:00:fe: 5a:16:8c:38:e1:70:bd:01:4c:2d:40:05:a9:91:40:31:7f:80: 2a:3b:d5:50:03:a4:3d:4b:99:73:e9:6e:49:fe:da:2c:f1:34: 2b:4b:3a:1b:51:24:82:d7:46:b8:c5:ff:4e:e9:8c:79:b2:f2: 36:ef:60:6d:cd:40:76:e9:23:ad:47:c9:11:b1:6b:08:0b:4a: e8:b1:26:d4:6b:76:5e:1b:bd:2e:5f:4b:29:9b:63:43:f2:3e: ed:54:37:ec:2d:39:14:6e:2a:47:b4:9c:c3:f5:8d:00:42:26: 4b:e4:b7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVn539qezlGWdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NzZjZTA3YTItNDI4NS00ZGVhLWJmZjQtOGExODQ2OTZjZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlgoBBKW3+dgJW/hCmacpNh0PsiwWLBNeyLt QC4a4Z7HNR0hDH3+pm17pH55yGVbGhscoTXDBkdrkiDfOFmokJRAHvdBzjDwjg9J Noy8oREKfwp+pMixhe+amMhYEtv+at66Ph930wA65MTEvNzs7inwjK+fmgVvzd7c IU/4o4aExz8+n/L98fZoM7rYmOMhaKDtrEeCZtJDm+bVuSqJE4vguNHb1iN6eWoP idzDOAPak/bu80Pn5rCiFicypslhcd70mU6i7280zzpC+yUnWJkn07F8DBWceVc/ 3gY0vO68MDkNfB0p2ZJACRPd7ufwVVn3xsdicUBejHhN7L2d2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7Do6BacyiRTzR8OOqh+rMKLHRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmFhNTI0MDEtODNhZC0z YTc5LWI2NjMtODdlOWYxZGJiMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcktx8bgTS3Nh1xj1FnBpCBM1qCpH3EkjOxbKUDcCqVFXduQDnhY4dM 9fGHHed+GvjQG7sSwcBHVRyofbO8Mc4ipG1rjAtWxVIemdWRHaoSYLlgN3swZXU2 7sSMl3WYePfYkgs6q6UGKIiH0EqcliKGSr1IkIUnssoWP0Hs8D4qOnSN+kr38CSe sBVwzNcA/loWjDjhcL0BTC1ABamRQDF/gCo71VADpD1LmXPpbkn+2izxNCtLOhtR JILXRrjF/07pjHmy8jbvYG3NQHbpI61HyRGxawgLSuixJtRrdl4bvS5fSymbY0Py Pu1UN+wtORRuKke0nMP1jQBCJkvkt9Y= -----END CERTIFICATE-----Generated at Mon Oct 20 02:13:07 2025 by rpki-client