$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc352fdc-5a98-30fe-84e9-3f9ea455be61.roa File: cc352fdc-5a98-30fe-84e9-3f9ea455be61.roa (raw, json) Hash identifier: l+OoRdwQMLMu5rXGIN81mh4fDsQAibWakxprBNbkQeA= Subject key identifier: 35:30:AF:52:CF:BA:BE:5E:B8:B1:39:AC:B4:51:61:29:77:0C:6E:69 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DF5CA352DD14995A1BD80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc352fdc-5a98-30fe-84e9-3f9ea455be61.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.115.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:f5:ca:35:2d:d1:49:95:a1:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=0ab833d0-8e2f-49af-9da0-93ca1957f718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:93:d0:a5:25:74:56:cd:80:1b:bf:fe:bc: c4:61:e4:c7:3c:e6:42:22:d1:0b:59:f5:56:8b:a8: 22:e1:dc:4c:6f:6e:ba:9c:34:29:1c:81:7e:da:8d: fa:26:dd:ea:8d:86:a4:52:42:5c:f0:b7:94:2a:76: 53:3e:67:b2:67:9b:0a:a1:a4:ae:5d:90:0f:01:be: 6f:09:d1:a8:43:79:b6:65:0d:58:1f:7b:66:a7:2b: 5f:87:e6:a4:b5:74:f1:ed:43:2c:76:b7:b3:17:24: 07:e4:94:05:3f:29:73:70:d4:28:c1:67:4b:ea:30: 60:ab:84:63:62:89:15:01:d2:4d:e8:74:58:80:de: 5e:5e:1c:e6:40:eb:86:4d:5f:8a:cc:fb:71:73:ca: 4f:1c:e4:32:44:93:5a:dc:19:84:d1:fc:8a:4f:08: 0d:3f:54:72:1d:10:d0:21:85:53:f6:a4:30:2b:22: 20:f0:02:16:ca:c1:18:5d:8e:6e:f3:ba:ef:ac:d1: a0:93:92:7e:d3:5a:8d:6f:65:91:65:ef:33:33:fe: 2a:16:68:db:87:5c:97:13:a9:7c:1a:8b:0b:89:65: 96:16:61:56:1b:fb:12:7c:26:67:8c:f6:a3:ac:4d: 63:44:14:d4:20:51:c8:a0:a6:b0:be:24:95:b0:16: 6c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:30:AF:52:CF:BA:BE:5E:B8:B1:39:AC:B4:51:61:29:77:0C:6E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cc352fdc-5a98-30fe-84e9-3f9ea455be61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.115.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:16:bd:b7:1d:9d:6e:53:e7:36:9a:7e:65:69:ca:c1:49:6d: a4:c9:14:c0:6d:aa:97:68:8a:fd:47:dd:1f:42:da:2e:12:67: ab:53:e0:9a:77:cb:70:0a:14:db:50:d0:8f:93:02:99:e2:fe: 06:38:f4:85:29:39:61:85:25:45:51:64:d6:72:7b:72:c2:b5: 2d:cf:da:79:e0:d1:07:8b:7b:96:63:6d:81:ed:00:e3:bb:84: 1b:f9:78:19:7b:23:cd:98:d5:ac:bc:12:c9:00:1b:99:05:ed: e3:9c:35:4a:5f:b9:62:3c:06:9d:aa:12:d7:94:11:60:2a:ab: 92:d9:69:14:ed:60:64:21:0a:71:e1:74:1b:a5:65:0e:43:92: fb:aa:23:18:06:e9:f7:4d:d3:c3:d3:2f:56:ba:1f:ca:c5:f7: ad:b7:6c:af:5c:0c:6d:ce:ba:44:52:17:7b:55:e3:89:f3:37: eb:40:36:42:3b:25:5b:97:5f:7e:eb:99:4a:ed:c5:5d:22:0d: ad:63:97:fd:da:6e:18:84:7c:09:09:71:f9:28:6d:d9:b4:3c: ef:41:c5:79:46:5e:3e:41:b2:cb:83:df:a1:f3:a8:b2:1b:7e: 5f:68:b7:df:79:ce:16:c8:a6:c9:55:48:bf:e9:ad:c9:c7:96: 7f:b7:2e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHfXKNS3RSZWhvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MGFiODMzZDAtOGUyZi00OWFmLTlkYTAtOTNjYTE5NTdmNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp92T0KUldFbNgBu//rzEYeTHPOZCItELWfVW i6gi4dxMb266nDQpHIF+2o36Jt3qjYakUkJc8LeUKnZTPmeyZ5sKoaSuXZAPAb5v CdGoQ3m2ZQ1YH3tmpytfh+aktXTx7UMsdrezFyQH5JQFPylzcNQowWdL6jBgq4Rj YokVAdJN6HRYgN5eXhzmQOuGTV+KzPtxc8pPHOQyRJNa3BmE0fyKTwgNP1RyHRDQ IYVT9qQwKyIg8AIWysEYXY5u87rvrNGgk5J+01qNb2WRZe8zM/4qFmjbh1yXE6l8 GosLiWWWFmFWG/sSfCZnjPajrE1jRBTUIFHIoKawviSVsBZsFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUwr1LPur5euLE5rLRRYSl3DG5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2MzNTJmZGMtNWE5OC0z MGZlLTg0ZTktM2Y5ZWE0NTViZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUWvbcdnW5T5zaafmVpysFJbaTJFMBtqpdoiv1H3R9C2i4SZ6tT4Jp3 y3AKFNtQ0I+TApni/gY49IUpOWGFJUVRZNZye3LCtS3P2nng0QeLe5ZjbYHtAOO7 hBv5eBl7I82Y1ay8EskAG5kF7eOcNUpfuWI8Bp2qEteUEWAqq5LZaRTtYGQhCnHh dBulZQ5DkvuqIxgG6fdN08PTL1a6H8rF9623bK9cDG3OukRSF3tV44nzN+tANkI7 JVuXX37rmUrtxV0iDa1jl/3abhiEfAkJcfkobdm0PO9BxXlGXj5BssuD36HzqLIb fl9ot995zhbIpslVSL/prcnHln+3LpI= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:35 2025 by rpki-client