$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4c8a23c3-25b3-3d02-aad0-1db6d2e69fdd.roa File: 4c8a23c3-25b3-3d02-aad0-1db6d2e69fdd.roa (raw, json) Hash identifier: tf7xaNbYZdYIkxd4ZO1kTxTT74289mx/65eTuzRAHLU= Subject key identifier: 75:B2:DC:E4:23:FE:39:CF:87:23:8E:46:15:65:63:0C:6C:F2:34:66 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D5556AF675EC9BAA8E580 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4c8a23c3-25b3-3d02-aad0-1db6d2e69fdd.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.114.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:55:56:af:67:5e:c9:ba:a8:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=d8b810a6-1ffe-488b-a10e-4c2c7261b97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:a7:35:29:b3:06:d4:ba:14:c6:63:7e:17: 2c:38:e5:b7:5c:4d:e0:16:54:4f:87:8d:e1:1a:e4: 66:9d:b9:52:46:d5:d0:c9:42:e7:e2:3b:c5:54:01: 5b:4a:c0:69:50:fe:9f:ab:ea:35:0e:ea:ea:90:4d: 57:be:b1:c2:6b:b6:58:2a:ab:bf:53:55:d6:46:0a: f9:91:f3:e7:56:e1:42:d7:a3:bc:e9:6b:4f:33:f5: b7:c1:e3:25:8d:62:11:98:11:59:f9:e9:88:35:50: 5f:8b:98:bc:f3:2c:60:1f:be:9b:a1:15:e8:31:8c: 3c:d5:c7:6f:74:bc:5c:4d:95:d7:1c:69:a1:8d:f3: 4d:06:2c:39:fb:e8:60:99:2c:f5:6e:c9:f5:2c:e4: 3e:82:9a:49:ea:c8:06:32:1a:4f:65:02:36:4a:a6: 2e:40:6e:93:54:13:1e:9f:00:13:ae:3f:2b:00:5c: c3:ed:7a:07:96:f4:79:2c:11:93:e4:ed:27:1d:89: ca:cf:46:c8:95:78:ba:42:65:e6:35:ad:6d:25:b5: 9b:9f:ff:2d:10:5e:4f:05:52:5e:7f:77:4c:ca:ac: 1e:3d:f2:98:39:36:53:04:55:16:59:fe:f1:78:8e: e2:83:dd:ee:69:70:02:71:70:7e:ab:36:b7:db:60: 95:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B2:DC:E4:23:FE:39:CF:87:23:8E:46:15:65:63:0C:6C:F2:34:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4c8a23c3-25b3-3d02-aad0-1db6d2e69fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.114.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:cf:35:97:ce:df:7a:22:00:84:12:01:c8:23:c8:66:0c:97: c4:39:4e:9b:32:66:5c:0b:5d:ad:59:96:5f:e3:31:88:88:d6: 81:3d:7d:6f:cf:65:c0:19:5a:b8:e2:97:40:22:cd:9d:0c:75: 90:fb:74:66:f7:25:44:3b:95:08:6b:97:c5:cb:be:20:4f:eb: 95:74:af:d0:b1:d5:d3:a3:c8:77:77:f8:6a:59:d6:95:98:a0: 88:14:cf:ea:8b:50:8f:6d:31:03:fa:a3:75:95:76:37:92:b5: 7f:ad:5f:34:3b:d8:b0:30:cd:32:4a:61:88:e2:a9:d7:16:31: da:41:d5:9d:a1:69:d7:20:f5:3b:b3:25:c9:dc:a8:e6:d5:6b: c4:04:c1:95:60:c4:09:7f:ed:1b:96:b7:82:d3:02:9c:ac:34: 84:dd:33:80:ca:05:ef:27:79:48:b8:31:38:e9:7a:21:27:f2: 6e:66:fa:e2:d4:a0:91:28:95:f2:09:91:42:3b:ff:75:b2:65: 91:37:c9:4d:be:e4:4f:fa:18:ab:5d:a9:06:c2:d1:3f:ee:81: 05:f4:4d:c2:6b:14:dc:06:75:61:33:d0:c1:24:25:f0:f6:4f: 70:54:bd:d8:c3:7d:87:1b:8a:26:0b:9e:b4:42:eb:0c:d8:47: bd:2f:c6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVVWr2deybqo5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZDhiODEwYTYtMWZmZS00ODhiLWExMGUtNGMyYzcyNjFiOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU6nNSmzBtS6FMZjfhcsOOW3XE3gFlRPh43h GuRmnblSRtXQyULn4jvFVAFbSsBpUP6fq+o1DurqkE1XvrHCa7ZYKqu/U1XWRgr5 kfPnVuFC16O86WtPM/W3weMljWIRmBFZ+emINVBfi5i88yxgH76boRXoMYw81cdv dLxcTZXXHGmhjfNNBiw5++hgmSz1bsn1LOQ+gppJ6sgGMhpPZQI2SqYuQG6TVBMe nwATrj8rAFzD7XoHlvR5LBGT5O0nHYnKz0bIlXi6QmXmNa1tJbWbn/8tEF5PBVJe f3dMyqwePfKYOTZTBFUWWf7xeI7ig93uaXACcXB+qza322CVcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWy3OQj/jnPhyOORhVlYwxs8jRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGM4YTIzYzMtMjViMy0z ZDAyLWFhZDAtMWRiNmQyZTY5ZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPPNZfO33oiAIQSAcgjyGYMl8Q5TpsyZlwLXa1Zll/jMYiI1oE9fW/P ZcAZWrjil0AizZ0MdZD7dGb3JUQ7lQhrl8XLviBP65V0r9Cx1dOjyHd3+GpZ1pWY oIgUz+qLUI9tMQP6o3WVdjeStX+tXzQ72LAwzTJKYYjiqdcWMdpB1Z2hadcg9Tuz JcncqObVa8QEwZVgxAl/7RuWt4LTApysNITdM4DKBe8neUi4MTjpeiEn8m5m+uLU oJEolfIJkUI7/3WyZZE3yU2+5E/6GKtdqQbC0T/ugQX0TcJrFNwGdWEz0MEkJfD2 T3BUvdjDfYcbiiYLnrRC6wzYR70vxrs= -----END CERTIFICATE-----Generated at Mon Oct 20 01:58:45 2025 by rpki-client