$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa File: 9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa (raw, json) Hash identifier: JvVdOs4FM0IQcsBkZE9pZxZQc53f6xpZ1A0WoCq1qCU= Subject key identifier: 4E:3D:28:EF:53:7C:72:06:94:0F:8F:02:EC:F8:32:2E:E9:FC:27:E6 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D594446736ADF2B727080 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.189.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:59:44:46:73:6a:df:2b:72:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=e8884758-2838-40fd-abb6-336328df0ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0d:31:dc:73:f4:95:09:82:d3:95:d6:80:19: 1b:bc:b1:21:b5:42:3a:1f:1a:f4:cf:0c:8f:67:42: 01:93:c8:07:7d:80:16:94:74:a1:a4:06:1d:91:f0: 41:f0:80:59:39:76:72:e3:46:0a:ec:0e:a8:7f:55: 7e:1f:8a:79:0d:5a:fc:fc:ed:f2:fd:ed:86:62:3e: d6:03:d2:a0:a6:52:b2:09:e2:2d:17:60:d0:97:48: bd:10:e7:b7:57:24:c3:d2:bd:ba:6f:4f:d2:1d:89: da:f5:ca:b5:25:9d:69:a8:74:d7:3e:01:b0:61:ec: 35:7a:ba:d5:c7:b6:90:30:35:81:24:a9:35:d1:72: 09:64:b2:e4:9b:43:df:9d:79:ea:fb:10:6d:85:43: 63:54:a4:13:38:b8:00:1c:20:f2:75:57:a9:26:3c: bf:83:54:dd:7c:f5:d5:c9:75:c1:e9:44:30:9d:94: ee:4c:9b:f2:f2:d2:84:cc:45:bb:a2:89:e6:1e:17: 5b:38:9e:f6:71:98:c6:ab:a2:13:d4:25:a5:8e:37: 8c:6c:43:f6:a5:f8:11:1b:27:ef:04:0c:a9:ef:81: a5:81:b7:01:82:03:42:55:6c:8d:7a:5a:0d:0c:f8: 56:f7:75:bc:79:b2:64:7a:f0:59:ad:e1:49:d1:f8: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3D:28:EF:53:7C:72:06:94:0F:8F:02:EC:F8:32:2E:E9:FC:27:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.189.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e2:90:0c:b8:9d:63:aa:a3:5e:a0:7e:30:17:7d:89:0c:9f: 11:f6:24:7c:65:f3:dc:6c:56:26:46:53:ab:0a:a6:1e:e6:db: d8:a5:33:8a:00:e3:a1:b7:36:fb:cf:c5:7f:8c:2e:17:2b:42: 0b:59:2b:30:1b:63:81:16:62:79:06:32:38:f1:fe:3d:65:8e: 9c:e8:ed:02:f8:5b:53:9e:31:a3:93:82:fe:74:5d:76:5f:79: 99:fb:40:28:d9:e4:7d:90:42:5a:47:a0:6f:9e:89:d7:48:6d: ef:fb:fb:cb:dc:ef:f8:ed:63:ab:e4:45:03:a8:e7:7d:37:1e: 34:40:89:27:f4:27:8d:13:14:99:8f:02:35:db:1a:0d:eb:3a: 52:e6:a8:58:6d:73:b6:fe:5b:96:d4:8a:74:cd:4a:2c:bd:f8: c5:33:71:9e:15:79:3c:7d:03:7f:7d:e9:00:2c:4c:4d:4c:4e: cf:70:7e:57:5f:c1:d7:b1:8c:50:dd:8b:5e:f1:68:ce:3e:af: 5e:07:ad:b8:ef:8e:15:6e:7e:5a:b2:f1:80:d6:64:d3:34:05: 55:cd:1e:10:96:da:40:d5:2f:02:51:8c:1b:04:d3:e4:b2:bb: 6c:c0:15:47:5f:77:8c:78:ed:cb:dc:6e:93:1e:5e:7d:7c:b2: e6:c0:a4:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVlERnNq3ytycIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZTg4ODQ3NTgtMjgzOC00MGZkLWFiYjYtMzM2MzI4ZGYwYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Q0x3HP0lQmC05XWgBkbvLEhtUI6Hxr0zwyP Z0IBk8gHfYAWlHShpAYdkfBB8IBZOXZy40YK7A6of1V+H4p5DVr8/O3y/e2GYj7W A9KgplKyCeItF2DQl0i9EOe3VyTD0r26b0/SHYna9cq1JZ1pqHTXPgGwYew1errV x7aQMDWBJKk10XIJZLLkm0PfnXnq+xBthUNjVKQTOLgAHCDydVepJjy/g1TdfPXV yXXB6UQwnZTuTJvy8tKEzEW7oonmHhdbOJ72cZjGq6IT1CWljjeMbEP2pfgRGyfv BAyp74GlgbcBggNCVWyNeloNDPhW93W8ebJkevBZreFJ0fgowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE49KO9TfHIGlA+PAuz4Mi7p/CfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWNhYTdhYTMtYjI1NS0z OTc0LWI4YmUtNjE2YTljZjdiOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7ikAy4nWOqo16gfjAXfYkMnxH2JHxl89xsViZGU6sKph7m29ilM4oA 46G3NvvPxX+MLhcrQgtZKzAbY4EWYnkGMjjx/j1ljpzo7QL4W1OeMaOTgv50XXZf eZn7QCjZ5H2QQlpHoG+eiddIbe/7+8vc7/jtY6vkRQOo5303HjRAiSf0J40TFJmP AjXbGg3rOlLmqFhtc7b+W5bUinTNSiy9+MUzcZ4VeTx9A3996QAsTE1MTs9wfldf wdexjFDdi17xaM4+r14HrbjvjhVuflqy8YDWZNM0BVXNHhCW2kDVLwJRjBsE0+Sy u2zAFUdfd4x47cvcbpMeXn18subApF4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:52 2025 by rpki-client