$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa File: 857c88c7-6202-315f-a120-c9da40381623.roa (raw, json) Hash identifier: dzYIMtegCBQuEacCAuP49/QZ4hd0Emr5kpwKx+03N1o= Subject key identifier: AD:44:3B:25:19:E8:78:2D:9A:42:7B:D3:A5:93:FD:9F:4B:39:21:CF Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D5145498FCFB054F2F2C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.188.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:51:45:49:8f:cf:b0:54:f2:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=0d401044-a4f3-4f86-a18e-026ae753f0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6a:6a:7d:6b:dc:fd:6c:80:5b:f9:52:a7:f1: bb:e4:e5:e1:ba:b8:ac:00:ac:32:31:08:70:b1:60: e6:bb:8f:5e:c2:b8:e7:11:b2:16:69:c2:02:95:24: 5c:28:f0:d2:97:9d:51:40:86:7c:cf:0c:a6:9b:4f: fe:17:dc:60:50:38:3d:5d:28:53:42:ce:18:75:ff: 64:f0:16:3b:05:fa:61:5f:2d:9e:0f:27:35:24:4d: 27:df:f5:42:8c:26:b0:d2:77:7f:ea:01:18:61:8c: 56:33:b6:f8:f7:a3:29:24:68:04:d0:54:0e:2a:04: 9a:85:12:c3:96:b0:9d:39:74:46:ad:c7:e3:50:fc: a0:82:6f:c9:7e:a1:9f:6f:9a:47:c0:f6:f9:fb:5f: 56:ce:e8:52:35:57:99:8e:cc:49:25:63:57:c5:ce: 32:45:20:46:1f:90:da:50:98:75:19:f8:f0:4c:c0: b4:9e:4d:c3:0f:bc:a5:d1:1d:d1:c7:69:b5:0c:0c: 3d:15:dd:d4:d7:50:e0:1c:62:a8:f0:6a:a9:e9:0a: 50:d0:25:b4:c1:bc:ff:8b:b3:49:5c:cd:10:cc:46: a6:fe:70:bb:62:aa:11:84:2b:3d:11:c1:77:e6:1f: 19:5a:6a:f6:16:de:19:4d:0b:0f:2d:2c:f8:37:42: 74:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:44:3B:25:19:E8:78:2D:9A:42:7B:D3:A5:93:FD:9F:4B:39:21:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/857c88c7-6202-315f-a120-c9da40381623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.188.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b7:d1:3a:e3:f9:ef:b8:86:3d:6c:1a:24:9d:bf:c8:62:b9: a4:54:85:03:92:23:4b:f2:af:52:e7:f9:55:b6:f0:79:d9:d2: 34:11:8c:ec:c9:81:ce:10:19:b6:91:1b:81:ed:8b:22:cd:0e: 29:3e:ae:f9:7d:85:88:49:b3:99:46:fc:a8:4d:3c:14:26:03: ba:86:61:c1:a9:de:ee:c1:b1:97:fd:5f:b0:b4:c0:a9:ce:90: b0:fe:89:58:b6:4b:85:43:2b:52:06:ee:68:f5:b5:4d:73:7b: f7:22:d6:d1:20:0f:a7:fb:78:d4:50:97:ad:78:e6:b5:49:60: c2:e7:e2:fa:fd:09:7a:30:9c:ae:d7:18:0f:7d:df:57:92:48: 0b:2f:31:db:da:35:04:e3:e0:0e:ca:4d:c4:00:f3:1e:c1:1f: 6e:9e:55:8e:cb:0a:90:e9:a6:98:e3:e4:d5:bc:4c:4c:43:4f: b0:08:85:e2:d7:bf:51:e3:53:d3:10:91:08:17:f2:41:3a:9d: 6c:2e:bb:83:5b:12:f1:cb:e6:4b:ff:50:7c:64:f0:54:30:bc: c0:d4:cf:b8:8a:69:17:80:29:ca:84:6f:7d:d2:58:41:9b:94: ff:66:fe:8f:f5:0f:c4:db:8d:f1:66:27:5f:ab:7c:a3:5c:e0: a4:f4:06:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVFFSY/PsFTy8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MGQ0MDEwNDQtYTRmMy00Zjg2LWExOGUtMDI2YWU3NTNmMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mpqfWvc/WyAW/lSp/G75OXhurisAKwyMQhw sWDmu49ewrjnEbIWacIClSRcKPDSl51RQIZ8zwymm0/+F9xgUDg9XShTQs4Ydf9k 8BY7BfphXy2eDyc1JE0n3/VCjCaw0nd/6gEYYYxWM7b496MpJGgE0FQOKgSahRLD lrCdOXRGrcfjUPyggm/JfqGfb5pHwPb5+19WzuhSNVeZjsxJJWNXxc4yRSBGH5Da UJh1GfjwTMC0nk3DD7yl0R3Rx2m1DAw9Fd3U11DgHGKo8Gqp6QpQ0CW0wbz/i7NJ XM0QzEam/nC7YqoRhCs9EcF35h8ZWmr2Ft4ZTQsPLSz4N0J0WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1EOyUZ6HgtmkJ706WT/Z9LOSHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODU3Yzg4YzctNjIwMi0z MTVmLWExMjAtYzlkYTQwMzgxNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRLx6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG630Trj+e+4hj1sGiSdv8hiuaRUhQOSI0vyr1Ln+VW28HnZ0jQRjOzJ gc4QGbaRG4HtiyLNDik+rvl9hYhJs5lG/KhNPBQmA7qGYcGp3u7BsZf9X7C0wKnO kLD+iVi2S4VDK1IG7mj1tU1ze/ci1tEgD6f7eNRQl6145rVJYMLn4vr9CXownK7X GA9931eSSAsvMdvaNQTj4A7KTcQA8x7BH26eVY7LCpDpppjj5NW8TExDT7AIheLX v1HjU9MQkQgX8kE6nWwuu4NbEvHL5kv/UHxk8FQwvMDUz7iKaReAKcqEb33SWEGb lP9m/o/1D8TbjfFmJ1+rfKNc4KT0BkU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:47 2025 by rpki-client