$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa File: 86dd6601-3722-3e53-99be-3f9149517813.roa (raw, json) Hash identifier: JBH63g8yqJ8Rvnt4UPXtHcyE3s7D7ig68EDUfHGjxWw= Subject key identifier: 74:13:F0:0D:9A:3A:60:C2:33:B9:3B:3B:B9:25:2B:2D:7C:03:6F:47 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D5403D5B12B875FC743A0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.191.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:54:03:d5:b1:2b:87:5f:c7:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=672ec2ed-d7e3-4b52-964b-513878f5d6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:66:4e:18:5a:fd:b6:de:68:ca:8f:98:66:50: f2:1f:25:79:dd:2c:c8:de:6c:0d:57:e6:11:35:49: 66:bc:18:ae:ec:25:0d:cc:8d:30:47:c7:bd:bd:fd: d1:24:9b:fd:8f:9c:2a:a2:5c:bb:78:7e:1a:a9:45: 15:44:fb:56:d8:ce:5d:ff:7b:46:42:ca:d8:64:bf: 22:58:3e:df:51:68:9c:4d:0c:b5:60:8a:19:bc:22: a3:0c:41:32:60:8b:e8:23:58:b3:6c:e7:74:82:16: 74:fe:da:7f:53:0d:16:a1:11:41:66:b1:60:93:66: 3e:af:97:f2:e0:00:b7:a1:fd:9b:7e:be:bc:c6:66: 1d:c4:02:0a:b7:91:82:27:37:43:1d:82:58:9b:64: e2:d7:55:d3:59:82:2d:5f:f8:c2:95:85:b1:9a:51: c9:72:ab:c4:bb:af:cd:05:de:fc:9c:db:30:38:df: 67:dc:e6:2b:21:a3:2d:2a:17:63:dd:9d:e7:22:14: e4:8d:b6:10:10:28:05:95:e4:c7:4e:9a:5a:9f:a9: 9b:b1:15:ce:db:2a:a4:6e:43:e3:0b:2c:84:80:dc: 8e:33:64:ee:52:b6:f5:08:f1:8e:2d:de:64:0d:d1: 2e:1b:e7:16:60:e2:45:c7:b1:e8:e1:f0:aa:bf:ff: 21:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:13:F0:0D:9A:3A:60:C2:33:B9:3B:3B:B9:25:2B:2D:7C:03:6F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/86dd6601-3722-3e53-99be-3f9149517813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:b0:0d:ed:ab:d7:b4:7d:fb:91:9f:cb:f7:89:e7:65:da:33: e5:89:69:63:05:b8:b1:93:96:e3:e9:46:96:cc:cc:b5:b8:47: 7d:ce:1d:9b:63:72:57:6b:45:e8:8a:48:0a:3c:5f:84:10:32: 8b:b4:5a:4e:0c:1b:f2:4d:4b:c0:7a:16:81:3e:e8:af:50:17: f3:dd:35:48:86:86:7e:aa:e4:18:f4:4d:1a:ef:b3:a3:04:52: 08:6e:66:7b:7e:c8:69:b0:36:a3:b5:64:95:57:a4:1c:73:76: 9f:0e:3e:d9:fb:01:ca:f3:be:ce:fd:d1:5b:e8:6a:37:46:1a: 99:7b:52:bd:76:f6:ae:18:3e:cc:b3:23:8e:79:6d:e5:39:d7: 1f:28:bf:10:57:a5:f7:b7:9f:40:54:9e:0a:c9:6f:d3:f3:b0: 7e:c2:d2:1a:42:a7:ae:2c:dc:63:88:95:28:29:36:ed:75:93: 34:cd:9c:32:11:87:0f:6f:c0:86:33:60:f2:36:a9:05:33:2d: da:e0:82:b0:e7:d6:ee:d4:7a:b3:80:5f:9c:7f:80:d5:33:b2: 7d:42:b1:88:21:90:00:51:00:b6:64:bb:41:d2:4a:51:52:33: 30:40:b5:68:08:fc:c3:ef:7c:f1:db:65:85:34:c8:65:fe:81: e6:22:3e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVQD1bErh1/HQ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NjcyZWMyZWQtZDdlMy00YjUyLTk2NGItNTEzODc4ZjVkNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2ZOGFr9tt5oyo+YZlDyHyV53SzI3mwNV+YR NUlmvBiu7CUNzI0wR8e9vf3RJJv9j5wqoly7eH4aqUUVRPtW2M5d/3tGQsrYZL8i WD7fUWicTQy1YIoZvCKjDEEyYIvoI1izbOd0ghZ0/tp/Uw0WoRFBZrFgk2Y+r5fy 4AC3of2bfr68xmYdxAIKt5GCJzdDHYJYm2Ti11XTWYItX/jClYWxmlHJcqvEu6/N Bd78nNswON9n3OYrIaMtKhdj3Z3nIhTkjbYQECgFleTHTppan6mbsRXO2yqkbkPj CyyEgNyOM2TuUrb1CPGOLd5kDdEuG+cWYOJFx7Ho4fCqv/8hxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQT8A2aOmDCM7k7O7klKy18A29HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODZkZDY2MDEtMzcyMi0z ZTUzLTk5YmUtM2Y5MTQ5NTE3ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6wDe2r17R9+5Gfy/eJ52XaM+WJaWMFuLGTluPpRpbMzLW4R33OHZtj cldrReiKSAo8X4QQMou0Wk4MG/JNS8B6FoE+6K9QF/PdNUiGhn6q5Bj0TRrvs6ME UghuZnt+yGmwNqO1ZJVXpBxzdp8OPtn7Acrzvs790VvoajdGGpl7Ur129q4YPsyz I455beU51x8ovxBXpfe3n0BUngrJb9PzsH7C0hpCp64s3GOIlSgpNu11kzTNnDIR hw9vwIYzYPI2qQUzLdrggrDn1u7UerOAX5x/gNUzsn1CsYghkABRALZku0HSSlFS MzBAtWgI/MPvfPHbZYU0yGX+geYiPnc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:56:40 2025 by rpki-client