$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/afb8f0f9-6992-3cd1-92d5-89351782e7b3.roa File: afb8f0f9-6992-3cd1-92d5-89351782e7b3.roa (raw, json) Hash identifier: Enq3fyb62LKiLoeO91jmK7Sg6JaykL714M8TLT+8+DE= Subject key identifier: 85:80:80:FB:18:DC:A9:B1:AA:38:D2:DC:F6:D4:81:BE:00:DD:D9:30 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D59D9E3E971C95D9AC800 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/afb8f0f9-6992-3cd1-92d5-89351782e7b3.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.191.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:59:d9:e3:e9:71:c9:5d:9a:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=7bb15e3e-573e-4cbd-874f-1d433282e305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:66:44:42:f8:56:a3:b8:13:ac:d3:43:79:75: 2b:4d:23:38:e1:46:87:9d:66:16:3f:0c:a1:15:eb: d5:b6:20:06:26:11:12:b2:df:37:21:76:46:d2:4d: 3f:f7:3e:94:fd:f4:3d:87:67:98:3c:9c:aa:13:64: f4:5d:d9:22:cc:b4:1c:a2:0b:0a:8f:29:50:a0:4e: 9f:cb:15:72:5a:4a:54:55:97:25:d3:90:1b:99:1c: cb:e4:34:e7:1f:26:7c:df:73:97:0e:70:9d:f5:6e: 1a:f0:67:5c:9a:bf:90:e1:cc:f0:23:9e:d3:f9:38: 89:5c:0c:9a:c2:1d:f1:92:7f:eb:f6:46:ef:1d:09: d5:8c:e4:01:ef:b5:94:2d:7c:fc:bb:3c:d9:74:df: d8:f1:4d:4e:b8:f4:cd:69:39:ac:d3:72:47:e7:44: 5a:37:db:1f:70:c5:f6:db:6c:cc:6e:1b:da:42:32: 62:35:ce:e8:ee:81:15:11:2d:7f:05:44:b3:96:35: ea:33:71:52:ea:f1:9e:76:71:26:c1:95:be:c0:35: d3:17:ae:be:99:cb:55:74:b0:11:8b:8e:4d:91:ba: ea:97:70:9e:1f:f3:6e:f1:1c:53:b0:79:5f:dd:71: fb:55:76:49:d9:a8:0e:d1:81:c1:c3:f3:61:51:9c: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:80:80:FB:18:DC:A9:B1:AA:38:D2:DC:F6:D4:81:BE:00:DD:D9:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/afb8f0f9-6992-3cd1-92d5-89351782e7b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:40:3f:41:74:a5:ac:fe:66:e1:28:96:3a:0d:c2:03:28:ff: 31:32:5e:46:c9:25:18:53:61:ab:42:fc:cb:df:8a:96:0a:60: bf:2c:db:f0:37:9f:e2:f5:f8:27:7a:03:b7:b6:8b:fa:a5:29: 5f:ec:7d:12:28:db:d3:07:89:1a:e5:b7:4e:e5:1f:e3:31:9a: 29:46:b5:06:56:97:be:7d:cf:db:87:fd:1e:2e:0c:47:eb:03: 03:32:64:53:fd:33:1a:bb:b0:ce:c0:fb:97:99:db:1f:fe:ca: 66:63:5c:cf:f4:c1:67:87:90:20:11:0d:a9:a4:f0:c4:00:85: da:95:2c:3f:78:47:7f:41:99:db:86:3e:fa:79:8e:e8:99:d8: 1c:c6:4b:c4:55:3f:d4:50:6e:51:45:34:17:66:49:8f:69:61: 28:1b:07:db:25:4c:f1:c9:c3:32:a0:4c:f3:2d:ff:55:9c:21: 4c:01:2e:12:2f:2b:e8:31:15:da:36:90:34:8a:c1:46:09:8a: 7f:5d:9f:6e:6b:f7:5b:ec:5d:08:c0:49:36:e9:41:5e:f0:61: 99:ba:98:6d:b0:bb:54:22:19:81:4c:62:31:26:6c:c9:c7:13: 3a:54:23:b1:c3:04:3e:69:20:76:63:74:e4:df:00:d7:fd:97: 94:f7:9a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHVnZ4+lxyV2ayAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk N2JiMTVlM2UtNTczZS00Y2JkLTg3NGYtMWQ0MzMyODJlMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGZEQvhWo7gTrNNDeXUrTSM44UaHnWYWPwyh FevVtiAGJhESst83IXZG0k0/9z6U/fQ9h2eYPJyqE2T0XdkizLQcogsKjylQoE6f yxVyWkpUVZcl05AbmRzL5DTnHyZ833OXDnCd9W4a8Gdcmr+Q4czwI57T+TiJXAya wh3xkn/r9kbvHQnVjOQB77WULXz8uzzZdN/Y8U1OuPTNaTms03JH50RaN9sfcMX2 22zMbhvaQjJiNc7o7oEVES1/BUSzljXqM3FS6vGednEmwZW+wDXTF66+mctVdLAR i45Nkbrql3CeH/Nu8RxTsHlf3XH7VXZJ2agO0YHBw/NhUZzYRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWAgPsY3KmxqjjS3PbUgb4A3dkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWZiOGYwZjktNjk5Mi0z Y2QxLTkyZDUtODkzNTE3ODJlN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZAP0F0paz+ZuEoljoNwgMo/zEyXkbJJRhTYatC/MvfipYKYL8s2/A3 n+L1+Cd6A7e2i/qlKV/sfRIo29MHiRrlt07lH+MxmilGtQZWl759z9uH/R4uDEfr AwMyZFP9Mxq7sM7A+5eZ2x/+ymZjXM/0wWeHkCARDamk8MQAhdqVLD94R39BmduG Pvp5juiZ2BzGS8RVP9RQblFFNBdmSY9pYSgbB9slTPHJwzKgTPMt/1WcIUwBLhIv K+gxFdo2kDSKwUYJin9dn25r91vsXQjASTbpQV7wYZm6mG2wu1QiGYFMYjEmbMnH EzpUI7HDBD5pIHZjdOTfANf9l5T3mlU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:24:41 2025 by rpki-client