$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd1a11cf-d061-3303-aad8-3a55776a164b.roa File: cd1a11cf-d061-3303-aad8-3a55776a164b.roa (raw, json) Hash identifier: UHzfQjdWWybdQvPVI4B9XCJwqX4YLrGDg/Hti4T70TQ= Subject key identifier: 12:4F:BD:DF:05:96:49:C6:C3:BB:A5:E0:93:0F:FB:60:CC:41:AF:EA Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DFA3D247F16CC062D0A00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd1a11cf-d061-3303-aad8-3a55776a164b.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.114.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:fa:3d:24:7f:16:cc:06:2d:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=c1660cdf-979c-483b-8ed6-2d41e3035234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:43:36:4c:d0:bb:79:d6:74:af:fd:3f:f3: 14:16:24:dd:80:c1:47:0e:4e:3c:a3:20:33:6f:a8: bc:76:69:4b:04:01:f5:5d:2d:92:64:03:c3:07:b5: ff:f1:f4:58:5b:25:58:ec:35:3a:df:17:98:61:14: 31:25:e5:e9:c7:4c:00:11:0f:32:69:85:df:44:4f: f2:35:18:4d:2f:dc:b1:69:53:14:bb:c5:3d:9b:c7: da:96:ad:8e:cd:23:28:8c:f7:37:ee:d7:a4:34:ef: f7:0d:9c:f3:f2:20:45:60:74:d4:1b:fe:66:77:30: 27:de:7f:ab:ed:a9:1b:71:11:d6:9a:06:d1:87:9c: 6e:83:c6:4f:d2:56:5b:b5:26:e7:87:07:f6:b3:1b: ef:0b:38:74:34:f6:f5:98:1c:2f:d8:b4:cb:c9:07: e5:96:ca:fb:c1:c8:58:87:14:59:9b:a2:ab:f4:e9: ea:6f:65:11:fb:a3:76:4f:50:ce:ea:99:59:41:ab: 4d:42:cb:69:1d:ce:f7:3d:2d:b8:fe:0a:3b:7b:20: 19:a3:85:7f:fb:7d:19:81:12:63:9b:fc:ec:3e:a3: 56:eb:73:14:6e:e3:bc:f6:dc:ea:d9:1c:3d:8a:8d: 1e:4b:fb:c9:1a:e2:9e:95:ad:f8:6c:0f:fb:96:2a: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4F:BD:DF:05:96:49:C6:C3:BB:A5:E0:93:0F:FB:60:CC:41:AF:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd1a11cf-d061-3303-aad8-3a55776a164b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.114.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:0b:c5:d0:84:53:c8:d9:f9:68:39:20:52:06:db:65:b2:93: 03:ee:c2:f3:f8:83:1c:88:dd:8c:82:f7:8d:57:65:87:6e:65: fd:66:5f:19:0e:47:fd:42:81:61:6f:98:4f:8b:32:87:7c:55: 5a:06:cf:3e:f8:2c:07:cd:51:52:e4:80:bd:a5:c0:69:ba:4c: 17:7c:54:cb:e2:d4:72:66:13:66:28:0c:ac:2b:e3:e0:c4:69: 5e:25:b8:fa:65:5e:6c:88:94:b5:2d:91:c4:d0:1a:5e:cf:54: 0b:db:a2:4c:ec:e6:79:70:cc:e7:ce:3f:90:3f:1f:9b:d5:56: cc:9a:f3:a5:1f:52:61:fd:12:d4:e3:c4:28:90:0f:fa:e0:3d: 98:af:32:00:b3:8c:c7:42:f7:40:c1:57:d4:66:94:07:5f:4a: 67:31:db:a9:7f:2b:80:21:e7:6a:34:77:81:53:51:6e:89:40: 23:b7:d9:91:7b:e7:cf:71:2e:81:b3:e5:eb:05:9b:7a:c7:32: 1a:68:9e:4f:ce:f8:76:b8:14:39:3c:0b:db:2a:71:01:e7:72: cf:48:e1:2b:9b:2e:df:c0:84:32:0b:48:24:d9:ff:06:c3:f6: fa:69:20:82:2c:2b:d0:4f:28:21:b1:ff:f0:95:84:08:8a:8b: fa:f3:df:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHfo9JH8WzAYtCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YzE2NjBjZGYtOTc5Yy00ODNiLThlZDYtMmQ0MWUzMDM1MjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrhDNkzQu3nWdK/9P/MUFiTdgMFHDk48oyAz b6i8dmlLBAH1XS2SZAPDB7X/8fRYWyVY7DU63xeYYRQxJeXpx0wAEQ8yaYXfRE/y NRhNL9yxaVMUu8U9m8falq2OzSMojPc37tekNO/3DZzz8iBFYHTUG/5mdzAn3n+r 7akbcRHWmgbRh5xug8ZP0lZbtSbnhwf2sxvvCzh0NPb1mBwv2LTLyQfllsr7wchY hxRZm6Kr9Onqb2UR+6N2T1DO6plZQatNQstpHc73PS24/go7eyAZo4V/+30ZgRJj m/zsPqNW63MUbuO89tzq2Rw9io0eS/vJGuKela34bA/7lircVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJPvd8FlknGw7ul4JMP+2DMQa/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2QxYTExY2YtZDA2MS0z MzAzLWFhZDgtM2E1NTc3NmExNjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRHLUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8LxdCEU8jZ+Wg5IFIG22WykwPuwvP4gxyI3YyC941XZYduZf1mXxkO R/1CgWFvmE+LMod8VVoGzz74LAfNUVLkgL2lwGm6TBd8VMvi1HJmE2YoDKwr4+DE aV4luPplXmyIlLUtkcTQGl7PVAvbokzs5nlwzOfOP5A/H5vVVsya86UfUmH9EtTj xCiQD/rgPZivMgCzjMdC90DBV9RmlAdfSmcx26l/K4Ah52o0d4FTUW6JQCO32ZF7 589xLoGz5esFm3rHMhponk/O+Ha4FDk8C9sqcQHncs9I4SubLt/AhDILSCTZ/wbD 9vppIIIsK9BPKCGx//CVhAiKi/rz32w= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:53 2025 by rpki-client