$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa File: 89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa (raw, json) Hash identifier: tqkhLVTguaXqVrrIgwQ7X+6hVKBAEbGVnspIIMAFFeQ= Subject key identifier: 62:8D:16:4F:1D:62:3D:4D:A8:3B:D1:C3:73:15:D1:FC:E9:12:9F:E9 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D59B8C8805B43175FAB74 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.191.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:59:b8:c8:80:5b:43:17:5f:ab:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=4ba98649-0d50-44a1-8146-2ef525070c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:6a:61:fd:cd:f1:f3:1e:87:ee:3a:e5:36: e4:ed:21:59:20:5e:45:41:01:23:ff:e0:f5:8a:2e: c2:87:49:fb:aa:38:f5:11:a4:42:c0:83:35:30:f7: cf:69:00:e5:e5:4d:4c:97:b8:88:19:44:0f:b5:8d: aa:bf:53:70:92:06:05:0e:55:30:1f:50:d6:0c:3b: 4b:8d:fc:97:2c:6b:f0:8a:74:88:7e:54:7f:62:2f: ca:e0:fd:69:64:29:ba:e1:11:14:34:81:06:1e:f5: ff:e5:df:a4:8e:d5:95:5f:9a:3f:62:8b:c4:ba:43: cb:d2:68:9d:e6:05:4e:27:a6:b4:06:ae:ff:ef:a9: d3:f3:76:95:27:8b:43:ad:6e:c8:57:9d:91:54:fa: d7:de:ab:bb:00:08:c5:b3:04:80:8e:49:ff:1b:70: 8e:11:f2:7a:02:24:2e:46:e9:42:ad:90:ea:a0:6f: c2:8e:ac:b7:c2:32:eb:74:ee:3a:68:29:ea:25:a1: e1:77:aa:60:f2:89:f2:cc:63:1d:82:ad:cc:88:4b: ad:f1:b9:8b:4d:f0:d4:63:ff:8b:9c:e5:65:b3:e2: 26:89:56:f1:fd:f8:9c:8b:78:9d:63:2a:cc:4c:ac: c3:3f:86:ee:72:5f:b6:6b:d2:76:80:56:79:2e:6e: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8D:16:4F:1D:62:3D:4D:A8:3B:D1:C3:73:15:D1:FC:E9:12:9F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/89b4b5fb-f0f5-39a1-b7a0-55b7057db622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d4:3c:58:ca:af:4c:03:06:b8:08:cc:a9:25:e3:e9:9a:7c: c5:73:bc:a0:43:92:53:4a:da:4a:a3:36:62:87:d3:b9:f0:cb: b3:ea:d9:b1:c2:d1:d5:62:e1:53:d0:71:be:83:e6:43:29:07: b1:cf:5b:41:da:2a:77:09:8a:a0:7e:75:a1:a8:0f:51:11:45: b5:c2:54:b5:1f:3d:64:df:d0:69:22:6d:1a:92:e9:b8:08:ae: e6:e6:fb:c1:ae:77:b5:e5:b1:dc:01:26:b1:f3:e4:08:bc:63: 2f:2c:01:c2:fa:98:f3:b2:a8:29:9b:a0:0a:26:fd:d4:47:3d: d4:23:4d:b6:01:77:95:40:6d:c6:d6:20:14:82:d1:7f:dd:50: d7:98:16:80:d9:54:b6:d0:7b:73:83:c1:4d:ce:2d:5b:18:98: c3:0e:1a:4f:ff:a8:5e:09:85:c0:11:76:c8:ed:54:21:e3:fd: 55:7c:b2:09:df:0e:c7:d1:d6:d3:b0:ad:56:33:fa:ca:83:e8: d2:46:60:b4:63:a0:ab:1c:02:5d:63:b5:26:ef:81:fd:97:b3: 47:18:f8:1a:59:e7:61:1f:8a:9d:a4:fc:a8:62:f6:14:d7:fc: 89:cb:99:ea:4c:49:22:7c:49:6c:b5:40:41:67:b8:5a:aa:b3: 26:7b:be:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVm4yIBbQxdfq3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NGJhOTg2NDktMGQ1MC00NGExLTgxNDYtMmVmNTI1MDcwYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIJqYf3N8fMeh+465Tbk7SFZIF5FQQEj/+D1 ii7Ch0n7qjj1EaRCwIM1MPfPaQDl5U1Ml7iIGUQPtY2qv1NwkgYFDlUwH1DWDDtL jfyXLGvwinSIflR/Yi/K4P1pZCm64REUNIEGHvX/5d+kjtWVX5o/YovEukPL0mid 5gVOJ6a0Bq7/76nT83aVJ4tDrW7IV52RVPrX3qu7AAjFswSAjkn/G3COEfJ6AiQu RulCrZDqoG/Cjqy3wjLrdO46aCnqJaHhd6pg8onyzGMdgq3MiEut8bmLTfDUY/+L nOVls+ImiVbx/fici3idYyrMTKzDP4bucl+2a9J2gFZ5Lm7AuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKNFk8dYj1NqDvRw3MV0fzpEp/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODliNGI1ZmItZjBmNS0z OWExLWI3YTAtNTViNzA1N2RiNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnUPFjKr0wDBrgIzKkl4+mafMVzvKBDklNK2kqjNmKH07nwy7Pq2bHC 0dVi4VPQcb6D5kMpB7HPW0HaKncJiqB+daGoD1ERRbXCVLUfPWTf0GkibRqS6bgI rubm+8Gud7XlsdwBJrHz5Ai8Yy8sAcL6mPOyqCmboAom/dRHPdQjTbYBd5VAbcbW IBSC0X/dUNeYFoDZVLbQe3ODwU3OLVsYmMMOGk//qF4JhcARdsjtVCHj/VV8sgnf DsfR1tOwrVYz+sqD6NJGYLRjoKscAl1jtSbvgf2Xs0cY+BpZ52Efip2k/Khi9hTX /InLmepMSSJ8SWy1QEFnuFqqsyZ7vro= -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:52 2025 by rpki-client