$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa File: d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa (raw, json) Hash identifier: VCcB+wUKp3nZKOixAgn+rJSvyYOrxRwfDlf1m9/Dg3M= Subject key identifier: 12:95:F9:7D:07:8E:4A:7B:2F:DB:6C:D9:A6:3E:27:DA:86:A6:9B:18 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DFBE03457DD8E9F325880 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.191.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:fb:e0:34:57:dd:8e:9f:32:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=7b40c37a-561c-4e79-897e-0ca793d0639b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:2f:5b:a7:00:fd:94:33:d5:bf:cf:cf:28: 23:29:7f:fe:17:53:3b:a2:bd:25:bb:de:01:09:b0: 65:66:c2:da:e7:bf:e2:f8:1c:c3:90:cc:87:0a:a8: 4a:71:aa:86:56:2e:42:03:55:83:ee:a6:d0:c4:e4: e9:a8:47:dc:ac:c5:65:c3:8b:6a:82:85:e5:96:e9: 7b:5e:fe:03:c2:19:86:ad:ee:be:4e:64:6f:09:0b: 76:f5:f9:ad:95:19:2a:87:68:a3:ad:9a:02:b2:50: 2c:40:48:a3:3e:51:26:ca:c5:77:0e:21:92:0b:5d: ef:ec:b3:7e:e8:20:1c:2a:40:d3:8e:59:44:34:73: df:89:6e:44:97:8a:69:c3:f8:9e:22:bc:42:a8:dc: 47:a2:82:3b:5a:2a:04:67:93:9c:d4:95:8c:45:a8: ed:21:ca:3d:c0:5e:e5:fe:62:4f:40:c4:96:73:28: bb:f7:c2:6e:2b:f3:b5:14:7f:1b:48:5a:fe:dd:e1: c6:36:82:6b:7f:03:d1:43:18:70:a7:e4:67:09:23: de:91:b9:af:db:e2:a6:90:9a:49:9d:aa:5d:05:fa: a1:47:b8:b7:7d:37:90:e6:24:1d:ad:6e:de:29:ed: 0f:f0:c6:33:49:a7:bc:b6:c3:15:de:f4:cd:1b:cf: c3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:95:F9:7D:07:8E:4A:7B:2F:DB:6C:D9:A6:3E:27:DA:86:A6:9B:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d3fac9e2-6989-36fe-a9d9-5c9ac98733f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:33:df:f3:17:75:24:e6:24:86:ca:3a:ba:f6:2b:09:b4:f0: 0c:3c:94:78:75:e7:7f:cc:49:52:bb:40:49:df:b2:c1:78:a2: 89:23:ee:26:ed:8f:f0:30:5a:18:4f:e3:42:d9:81:3a:8e:72: fe:62:5f:eb:60:be:70:86:03:58:87:1a:0d:42:72:50:3e:59: da:09:21:79:07:83:57:7b:f0:84:3a:57:5a:b5:dd:12:d1:e1: 14:bd:94:21:6f:dc:ec:2b:80:a0:f1:64:6e:c0:a1:ab:c8:7c: b1:f5:9c:15:f1:71:e7:39:0c:e5:a7:00:f4:f0:8a:c0:e1:af: 38:99:c9:fd:cc:1e:68:2f:b6:68:90:e3:70:52:42:f4:32:86: f1:0b:ce:d1:64:55:6e:71:3f:cf:c1:8c:ed:9f:66:fa:b6:0d: 5d:9c:c6:11:17:81:50:73:58:51:1d:da:c3:52:ea:77:a9:5d: 54:b0:02:bf:26:31:a1:b9:44:a8:fd:f6:92:d9:fb:a4:fa:cc: bd:19:fd:4e:dd:7a:2a:3f:af:8a:91:83:53:3e:bf:8d:72:34: 41:3c:53:c0:45:5e:8e:4d:90:1c:87:e3:62:06:39:fb:22:23: 9e:44:e7:f2:5d:e2:0f:17:c2:99:88:e5:36:86:a7:5c:24:66: f3:99:50:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHfvgNFfdjp8yWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk N2I0MGMzN2EtNTYxYy00ZTc5LTg5N2UtMGNhNzkzZDA2MzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoUvW6cA/ZQz1b/PzygjKX/+F1M7or0lu94B CbBlZsLa57/i+BzDkMyHCqhKcaqGVi5CA1WD7qbQxOTpqEfcrMVlw4tqgoXllul7 Xv4DwhmGre6+TmRvCQt29fmtlRkqh2ijrZoCslAsQEijPlEmysV3DiGSC13v7LN+ 6CAcKkDTjllENHPfiW5El4ppw/ieIrxCqNxHooI7WioEZ5Oc1JWMRajtIco9wF7l /mJPQMSWcyi798JuK/O1FH8bSFr+3eHGNoJrfwPRQxhwp+RnCSPekbmv2+KmkJpJ napdBfqhR7i3fTeQ5iQdrW7eKe0P8MYzSae8tsMV3vTNG8/DXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKV+X0Hjkp7L9ts2aY+J9qGppsYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDNmYWM5ZTItNjk4OS0z NmZlLWE5ZDktNWM5YWM5ODczM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwz3/MXdSTmJIbKOrr2Kwm08Aw8lHh153/MSVK7QEnfssF4ookj7ibt j/AwWhhP40LZgTqOcv5iX+tgvnCGA1iHGg1CclA+WdoJIXkHg1d78IQ6V1q13RLR 4RS9lCFv3OwrgKDxZG7AoavIfLH1nBXxcec5DOWnAPTwisDhrziZyf3MHmgvtmiQ 43BSQvQyhvELztFkVW5xP8/BjO2fZvq2DV2cxhEXgVBzWFEd2sNS6nepXVSwAr8m MaG5RKj99pLZ+6T6zL0Z/U7deio/r4qRg1M+v41yNEE8U8BFXo5NkByH42IGOfsi I55E5/Jd4g8XwpmI5TaGp1wkZvOZUEw= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:08 2025 by rpki-client