$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c9db6995-f8d0-3d90-9144-5c8de094255c.roa File: c9db6995-f8d0-3d90-9144-5c8de094255c.roa (raw, json) Hash identifier: AtlQpAHrD3W9K6vKn3TPKi1v1lPQ86xP7hlPxOEUKf4= Subject key identifier: 0A:09:6F:A0:57:69:F8:FD:59:98:70:54:CB:F0:53:3C:B5:B3:3A:8D Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DFD5CC6C1ED0D1D3E7E00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c9db6995-f8d0-3d90-9144-5c8de094255c.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.190.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:fd:5c:c6:c1:ed:0d:1d:3e:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=a152e609-1997-4d52-9327-d974b025a8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:bd:2d:d1:ff:07:94:5b:1e:ce:58:e5:01: 0b:38:13:cc:3d:0a:a7:44:45:d1:fb:44:a6:ac:e2: 55:f5:6b:e3:a4:30:2d:d0:7a:88:3f:37:0f:20:e7: 1c:16:8d:e1:29:7b:10:43:10:f0:f8:db:7b:f7:e2: 3a:41:9a:ef:0b:51:79:00:3c:f9:00:24:54:fc:d7: 4d:61:27:df:7e:fa:94:cb:6e:a4:23:8e:85:63:8e: f0:92:09:1a:48:ef:f6:04:cf:b4:a0:d6:9f:85:49: ae:53:e2:47:8b:1e:f8:4f:15:11:45:f6:8f:32:55: 41:8f:57:4c:5f:ee:0b:12:41:8a:96:b9:da:67:b0: 7b:d8:00:5d:f9:d7:cf:33:8c:4c:b1:0a:d3:0d:f2: 8b:60:54:a0:2f:23:81:a5:56:73:ff:67:5e:f2:6f: fe:ce:86:84:35:31:c1:91:cf:1a:3f:7b:3d:6e:5a: c1:c7:87:f0:96:4f:c4:54:46:4d:25:8e:5f:20:80: f9:8e:8b:3a:69:ea:0c:3c:c5:89:25:ac:f1:e6:68: 09:15:7e:b0:9c:e6:77:1f:02:dc:72:2e:b3:7e:44: e8:5f:ea:c1:58:73:dc:a2:cb:e9:fa:a6:00:03:a7: 05:43:66:a3:51:98:e0:1e:a3:0d:72:36:55:5d:42: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:09:6F:A0:57:69:F8:FD:59:98:70:54:CB:F0:53:3C:B5:B3:3A:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c9db6995-f8d0-3d90-9144-5c8de094255c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.190.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f6:94:c6:08:26:d7:ff:79:f0:54:3e:0d:61:70:6d:5d:31: 18:5f:19:0f:c1:62:89:0d:53:f9:1c:fe:fd:b6:06:e4:7f:24: f0:c6:8f:f3:1a:7c:86:1e:d4:33:fa:64:30:ec:8c:50:ab:9d: 71:50:ac:bf:f6:e6:2d:d5:2a:e9:36:91:22:07:ad:73:bd:ce: a2:ba:df:37:32:5b:0a:f8:b7:61:78:e5:b8:06:97:41:7f:23: 86:0f:9d:29:80:f5:a1:e1:2c:b1:77:84:85:85:d0:cf:eb:87: 10:47:7a:cd:24:c1:73:3c:3c:b3:dc:32:f9:4a:15:ab:30:50: c4:f2:47:a5:f7:f7:34:43:fa:3b:73:5e:b2:8e:db:55:92:99: 23:62:37:25:26:69:11:35:1d:86:67:4b:50:6e:0a:eb:58:c4: aa:9b:e9:52:36:3c:ec:66:bc:b1:e9:18:f3:74:44:61:49:6e: de:aa:31:ba:3e:61:52:b6:43:bd:6a:77:99:92:0f:a4:c2:63: 03:44:a0:ed:7b:76:49:86:c4:c8:b5:47:78:f2:01:1a:47:59: 17:68:f1:63:e8:3f:4d:77:57:c5:56:be:a0:4b:63:a7:4f:39: ad:42:61:2f:a9:09:20:b6:58:e8:02:77:7c:61:02:52:0e:79: a6:9e:70:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHf1cxsHtDR0+fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YTE1MmU2MDktMTk5Ny00ZDUyLTkzMjctZDk3NGIwMjVhOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9q9LdH/B5RbHs5Y5QELOBPMPQqnREXR+0Sm rOJV9WvjpDAt0HqIPzcPIOccFo3hKXsQQxDw+Nt79+I6QZrvC1F5ADz5ACRU/NdN YSfffvqUy26kI46FY47wkgkaSO/2BM+0oNafhUmuU+JHix74TxURRfaPMlVBj1dM X+4LEkGKlrnaZ7B72ABd+dfPM4xMsQrTDfKLYFSgLyOBpVZz/2de8m/+zoaENTHB kc8aP3s9blrBx4fwlk/EVEZNJY5fIID5jos6aeoMPMWJJazx5mgJFX6wnOZ3HwLc ci6zfkToX+rBWHPcosvp+qYAA6cFQ2ajUZjgHqMNcjZVXUJQ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoJb6BXafj9WZhwVMvwUzy1szqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYzlkYjY5OTUtZjhkMC0z ZDkwLTkxNDQtNWM4ZGUwOTQyNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn2lMYIJtf/efBUPg1hcG1dMRhfGQ/BYokNU/kc/v22BuR/JPDGj/Ma fIYe1DP6ZDDsjFCrnXFQrL/25i3VKuk2kSIHrXO9zqK63zcyWwr4t2F45bgGl0F/ I4YPnSmA9aHhLLF3hIWF0M/rhxBHes0kwXM8PLPcMvlKFaswUMTyR6X39zRD+jtz XrKO21WSmSNiNyUmaRE1HYZnS1BuCutYxKqb6VI2POxmvLHpGPN0RGFJbt6qMbo+ YVK2Q71qd5mSD6TCYwNEoO17dkmGxMi1R3jyARpHWRdo8WPoP013V8VWvqBLY6dP Oa1CYS+pCSC2WOgCd3xhAlIOeaaecEk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:35 2025 by rpki-client