$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d09dc8d7-0aad-3caa-8201-fb81d2bc2051.roa File: d09dc8d7-0aad-3caa-8201-fb81d2bc2051.roa (raw, json) Hash identifier: kkiVwCrbASxMuPHrJxyQKvfv4YUSnuXeQhFtkrPoXJI= Subject key identifier: E4:18:55:BF:0B:D2:7F:C7:A3:03:38:BA:F9:FB:DF:A7:87:A7:55:99 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D5D57D15341F6B9E9A800 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d09dc8d7-0aad-3caa-8201-fb81d2bc2051.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.187.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:5d:57:d1:53:41:f6:b9:e9:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=4058c49f-cbdd-4642-9584-f0d4c1dace78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:15:1c:86:18:dc:e2:11:e4:a9:dd:d1:d0: 04:c9:ba:e0:d2:87:97:61:a4:18:91:43:4b:a3:b1: ef:8d:0f:3c:df:22:f6:49:0a:6b:ba:ef:f2:d0:67: 1f:41:ad:1b:66:b4:f6:cc:ba:1d:22:13:b5:93:ff: 2c:cb:91:83:11:6a:73:bf:d2:7c:51:52:48:71:6d: be:03:4e:b6:1c:92:b8:15:27:56:03:be:1d:a9:7b: 4b:6c:7e:82:44:3e:59:5e:33:19:ae:8b:8d:b7:58: c2:77:93:2e:61:93:88:78:6f:f2:9a:16:a6:e6:ba: b7:3f:d1:6f:bf:d3:76:2a:b0:df:a3:31:34:bd:58: a2:40:56:75:55:f2:e6:43:5c:da:13:13:14:e9:df: 5b:ad:5e:45:c5:52:53:2c:09:53:d5:c5:c6:63:d5: b4:b2:8c:a1:20:06:53:e1:6b:bf:5e:bd:eb:42:fb: 09:53:88:b0:3e:c2:29:db:9e:81:21:a2:9e:96:7b: d2:b0:3d:d6:5d:8c:bd:ee:44:de:01:d4:3e:a6:1b: 20:8c:7a:33:2d:b0:a3:0f:9d:8e:49:ed:78:b3:8e: dd:63:0f:bf:7e:2d:5c:a7:55:04:8c:de:88:d9:f2: d4:b1:c2:9e:6b:fb:36:6d:06:f1:4e:27:ce:af:82: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:18:55:BF:0B:D2:7F:C7:A3:03:38:BA:F9:FB:DF:A7:87:A7:55:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d09dc8d7-0aad-3caa-8201-fb81d2bc2051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.187.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:be:ef:c8:ab:ea:85:56:e1:6a:6b:70:56:76:7f:a5:05:07: 8b:e1:49:e9:35:cd:bd:c4:b1:e6:b4:66:4b:59:0e:49:d4:98: 1f:f4:e0:c7:17:da:fc:7c:74:79:8b:d0:55:b2:69:12:6f:52: 93:b8:68:7b:45:42:5e:0e:68:b8:4a:d6:b5:99:c4:6e:61:d2: 3d:6c:46:ac:32:50:83:a3:59:9c:9b:a9:82:76:4c:ae:f5:61: 85:18:56:3d:a7:02:2b:39:04:a9:e9:d6:47:09:55:28:d4:be: e1:76:62:1e:68:e8:51:55:e6:48:1b:a9:7c:35:0e:8d:9c:63: 65:c5:b1:28:76:e7:3b:10:90:17:95:e0:0e:79:a9:ce:e9:c1: 64:54:38:aa:fa:1b:80:af:7c:5d:9c:d1:17:0a:7f:55:39:f0: bd:fd:68:11:2e:8f:3b:24:6c:32:62:b4:ca:bb:e3:5c:a4:25: ad:a6:f8:69:96:83:88:c5:3e:ef:1b:dd:69:a0:28:8e:ef:72: be:0f:da:90:8e:11:b9:50:4a:47:96:0a:c3:f8:0e:e2:25:54: 0f:8e:67:b6:6c:53:19:e6:50:ea:7a:0d:97:92:9e:6b:3c:9b: aa:d5:d4:d9:f2:b4:f6:75:40:aa:9d:d2:49:78:b1:16:dd:d3: 93:72:ae:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHV1X0VNB9rnpqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NDA1OGM0OWYtY2JkZC00NjQyLTk1ODQtZjBkNGMxZGFjZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUwVHIYY3OIR5Knd0dAEybrg0oeXYaQYkUNL o7HvjQ883yL2SQpruu/y0GcfQa0bZrT2zLodIhO1k/8sy5GDEWpzv9J8UVJIcW2+ A062HJK4FSdWA74dqXtLbH6CRD5ZXjMZrouNt1jCd5MuYZOIeG/ymham5rq3P9Fv v9N2KrDfozE0vViiQFZ1VfLmQ1zaExMU6d9brV5FxVJTLAlT1cXGY9W0soyhIAZT 4Wu/Xr3rQvsJU4iwPsIp256BIaKelnvSsD3WXYy97kTeAdQ+phsgjHozLbCjD52O Se14s47dYw+/fi1cp1UEjN6I2fLUscKea/s2bQbxTifOr4K6mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQYVb8L0n/HowM4uvn736eHp1WZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDA5ZGM4ZDctMGFhZC0z Y2FhLTgyMDEtZmI4MWQyYmMyMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRLuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALW+78ir6oVW4WprcFZ2f6UFB4vhSek1zb3Esea0ZktZDknUmB/04McX 2vx8dHmL0FWyaRJvUpO4aHtFQl4OaLhK1rWZxG5h0j1sRqwyUIOjWZybqYJ2TK71 YYUYVj2nAis5BKnp1kcJVSjUvuF2Yh5o6FFV5kgbqXw1Do2cY2XFsSh25zsQkBeV 4A55qc7pwWRUOKr6G4CvfF2c0RcKf1U58L39aBEujzskbDJitMq741ykJa2m+GmW g4jFPu8b3WmgKI7vcr4P2pCOEblQSkeWCsP4DuIlVA+OZ7ZsUxnmUOp6DZeSnms8 m6rV1NnytPZ1QKqd0kl4sRbd05Nyrkc= -----END CERTIFICATE-----Generated at Mon Oct 20 01:59:30 2025 by rpki-client