$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5a0cfd2-2434-36fe-ad3f-0d9f9b03ac70.roa File: a5a0cfd2-2434-36fe-ad3f-0d9f9b03ac70.roa (raw, json) Hash identifier: ca5GAdnx7NTCjx4LzB0NT2mnE+FRwSydluOUQhbfSxM= Subject key identifier: DD:84:18:4D:B7:76:5C:68:84:B3:AB:18:8D:E3:67:A0:74:F4:F2:8C Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D51E98E3D3EA4B3134480 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5a0cfd2-2434-36fe-ad3f-0d9f9b03ac70.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.118.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:51:e9:8e:3d:3e:a4:b3:13:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=9c61639b-5958-40ab-9d81-6b4ccb46bab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:d8:91:47:cd:ea:ba:01:e9:d4:00:75:ee: 17:52:ea:3c:71:b8:9d:c0:60:95:25:c7:ff:13:2d: c2:1f:ef:bb:f7:41:40:03:63:39:4f:d3:6e:5d:ef: 0a:b7:f8:7b:7f:76:20:81:f7:03:cc:88:32:89:7d: 90:21:30:c8:5d:fd:4b:eb:0e:f8:57:56:5a:14:9f: 41:bc:8d:0d:a5:77:ae:ef:f3:02:c7:e3:3d:16:b6: f5:b5:f8:2e:8f:12:a4:36:43:4f:a6:33:4d:6e:59: 65:96:52:85:44:10:a9:44:33:81:5a:ad:3f:47:07: ac:ff:94:9f:32:4f:06:79:7d:89:3f:89:79:65:76: 40:3e:3f:5e:bf:96:2a:27:09:3f:f1:c1:f1:97:f1: f2:db:7a:2b:73:b5:e5:d0:a6:43:e5:ac:9d:59:d8: 9b:3c:52:04:f0:bf:56:ab:16:dd:55:d0:b9:1b:88: 4f:6f:20:be:6c:16:a9:9d:47:a5:b2:46:e9:c5:58: e0:0c:d0:49:df:68:00:21:91:5f:fd:46:b1:63:5c: 9b:7e:bc:88:9c:8f:e9:63:9d:68:55:25:41:2f:34: c0:4c:37:f9:88:64:c1:2a:19:21:27:27:e0:85:78: a1:d7:b3:72:02:44:37:4f:59:0e:f1:6c:7c:33:2b: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:84:18:4D:B7:76:5C:68:84:B3:AB:18:8D:E3:67:A0:74:F4:F2:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5a0cfd2-2434-36fe-ad3f-0d9f9b03ac70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.118.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:31:dc:ae:1d:09:f5:c6:87:87:bd:4b:9a:ff:bf:6c:99:b9: 2c:79:83:fb:f5:53:e6:51:87:83:18:36:8e:5b:3e:93:76:5e: 65:b6:0b:c5:d0:1f:e8:de:c3:49:90:6c:df:81:94:ac:57:be: 80:86:f1:d1:e6:eb:03:87:25:05:b6:ec:a1:81:df:c4:86:e5: 11:09:37:6d:c9:dd:19:c2:f2:d6:66:fc:3f:c2:27:93:55:86: e2:da:a2:47:0d:7a:1b:59:75:48:a1:a2:ab:4f:5e:14:90:a2: 6b:02:fa:d9:78:6e:a7:7b:42:86:83:35:d0:02:7b:46:ee:d9: e4:6c:b4:66:a4:ba:dd:37:fa:69:9f:1c:9b:29:61:c4:d0:71: 6f:d9:c9:3f:5d:ea:b0:0d:a3:44:53:b8:49:37:20:ad:81:cf: 72:06:88:f5:82:a5:08:0f:59:da:0a:ca:3c:68:64:73:d5:49: 95:21:1a:1e:5f:92:34:7e:e9:11:23:f8:6e:7c:c9:78:c1:14: 39:32:a2:2e:cf:be:cc:48:7b:0d:44:1d:91:d1:d7:43:9f:68: 96:97:7e:62:2c:e4:c2:0e:fb:6a:c8:42:6b:89:a5:ee:a6:a6: 51:4b:ae:59:10:96:2b:8a:3a:35:f1:a6:43:14:59:5b:d4:fb: 4b:00:11:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVHpjj0+pLMTRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OWM2MTYzOWItNTk1OC00MGFiLTlkODEtNmI0Y2NiNDZiYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM3YkUfN6roB6dQAde4XUuo8cbidwGCVJcf/ Ey3CH++790FAA2M5T9NuXe8Kt/h7f3YggfcDzIgyiX2QITDIXf1L6w74V1ZaFJ9B vI0NpXeu7/MCx+M9Frb1tfgujxKkNkNPpjNNblllllKFRBCpRDOBWq0/Rwes/5Sf Mk8GeX2JP4l5ZXZAPj9ev5YqJwk/8cHxl/Hy23orc7Xl0KZD5aydWdibPFIE8L9W qxbdVdC5G4hPbyC+bBapnUelskbpxVjgDNBJ32gAIZFf/UaxY1ybfryInI/pY51o VSVBLzTATDf5iGTBKhkhJyfghXih17NyAkQ3T1kO8Wx8MytiDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2EGE23dlxohLOrGI3jZ6B09PKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTVhMGNmZDItMjQzNC0z NmZlLWFkM2YtMGQ5ZjliMDNhYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRHZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQx3K4dCfXGh4e9S5r/v2yZuSx5g/v1U+ZRh4MYNo5bPpN2XmW2C8XQ H+jew0mQbN+BlKxXvoCG8dHm6wOHJQW27KGB38SG5REJN23J3RnC8tZm/D/CJ5NV huLaokcNehtZdUihoqtPXhSQomsC+tl4bqd7QoaDNdACe0bu2eRstGakut03+mmf HJspYcTQcW/ZyT9d6rANo0RTuEk3IK2Bz3IGiPWCpQgPWdoKyjxoZHPVSZUhGh5f kjR+6REj+G58yXjBFDkyoi7PvsxIew1EHZHR10OfaJaXfmIs5MIO+2rIQmuJpe6m plFLrlkQliuKOjXxpkMUWVvU+0sAEVs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:17 2025 by rpki-client