$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e07e945b-a153-3f15-9be6-98001971d8ac.roa File: e07e945b-a153-3f15-9be6-98001971d8ac.roa (raw, json) Hash identifier: l1VVmr4QpbJsYqqYDYsZeiJnQwwISDUvr5D42JPs1WY= Subject key identifier: 90:92:1F:6B:95:25:1B:4B:3D:95:1B:8E:EB:57:3C:D7:05:44:29:4D Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DF7FA35BF0EF025A12C80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e07e945b-a153-3f15-9be6-98001971d8ac.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 68.115.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:f7:fa:35:bf:0e:f0:25:a1:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=904f16ea-831f-417d-bd9c-363c016ac1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:68:68:91:70:17:e0:6b:80:83:fb:93:17: 15:f0:1c:5a:dc:63:bb:09:ee:aa:cf:26:78:8f:d6: 82:4f:47:5e:23:cf:f7:cc:f7:80:0d:2b:be:05:1a: 0d:ee:7e:c3:0a:ce:e7:4b:cb:94:b6:98:f7:17:83: a0:0d:39:df:b0:98:a0:eb:ed:6a:2e:e8:0a:a6:61: 04:d2:44:b2:2e:b9:d5:eb:79:b0:32:83:47:4e:a0: 60:ca:c2:14:e0:1c:65:8f:ae:40:a1:11:cd:a3:22: 0c:ff:45:b0:74:4f:e5:72:16:35:1c:ab:ed:7a:78: 38:c0:99:94:f7:be:65:0e:7b:07:08:e7:70:cc:3d: b2:d3:e0:73:05:9a:e9:32:3f:c3:26:10:86:4c:64: e0:6c:1b:c4:f8:d1:82:6c:5e:8e:30:2b:3e:46:42: 53:ff:1b:e8:af:66:37:f0:2a:22:35:ae:81:f4:8c: f9:38:69:bf:98:82:8f:c1:9a:ec:79:f1:34:7a:3e: b6:98:10:f7:3c:58:ad:e7:dd:6b:89:63:2b:18:bb: 5b:43:5f:45:88:b5:e1:b9:12:ea:a7:8f:fc:61:90: 45:ce:e8:0b:54:2d:b6:c1:85:60:81:95:ae:e5:94: e0:e1:c6:33:27:71:cc:be:2d:cd:91:07:7c:7c:f8: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:92:1F:6B:95:25:1B:4B:3D:95:1B:8E:EB:57:3C:D7:05:44:29:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e07e945b-a153-3f15-9be6-98001971d8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.115.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:3f:a7:19:36:8e:c9:4a:24:65:b7:bb:b6:0c:1d:19:c5:67: 72:55:46:8d:65:5e:8b:69:54:6e:ec:57:f6:61:b9:33:99:b3: 1f:c2:fe:f1:ce:c2:db:be:82:53:d2:44:22:50:26:bc:5e:1c: 15:35:fb:dc:e7:cb:98:78:2b:22:ef:63:c2:99:ca:75:00:9d: cf:a6:09:11:33:64:5f:dd:f1:58:4a:e2:7d:3b:59:c5:38:6d: f8:0f:c9:65:1e:65:27:3e:4f:c0:a4:45:37:a6:4f:7c:95:bf: a2:96:f3:7e:09:8c:7b:0f:b9:ea:aa:3c:12:6f:30:71:a3:a5: 7a:ef:4a:11:4f:42:81:94:6e:40:b1:fa:05:a8:cc:0b:f6:2a: 6f:dd:01:4b:e0:c9:9b:01:57:80:d1:a2:37:2f:a6:a7:bf:d6: ca:7a:e8:c4:7a:a4:53:54:35:8f:09:ae:7d:5d:3e:c6:69:d2: 6c:64:57:a6:ed:2e:7f:5a:92:b7:7a:72:05:1f:11:3d:1c:35: 6e:28:5e:65:29:8e:1c:2d:bc:40:ec:b4:23:55:af:ac:a1:5c: 30:63:25:ac:38:e7:0b:3a:a4:1b:29:40:b3:51:1f:df:3a:66: 79:79:bc:bb:02:5b:94:0a:f4:17:c1:f6:68:cd:9a:f6:ae:f0: 37:63:3a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHff6Nb8O8CWhLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OTA0ZjE2ZWEtODMxZi00MTdkLWJkOWMtMzYzYzAxNmFjMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN9oaJFwF+BrgIP7kxcV8Bxa3GO7Ce6qzyZ4 j9aCT0deI8/3zPeADSu+BRoN7n7DCs7nS8uUtpj3F4OgDTnfsJig6+1qLugKpmEE 0kSyLrnV63mwMoNHTqBgysIU4Bxlj65AoRHNoyIM/0WwdE/lchY1HKvteng4wJmU 975lDnsHCOdwzD2y0+BzBZrpMj/DJhCGTGTgbBvE+NGCbF6OMCs+RkJT/xvor2Y3 8CoiNa6B9Iz5OGm/mIKPwZrsefE0ej62mBD3PFit591riWMrGLtbQ19FiLXhuRLq p4/8YZBFzugLVC22wYVggZWu5ZTg4cYzJ3HMvi3NkQd8fPjJPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCSH2uVJRtLPZUbjutXPNcFRClNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTA3ZTk0NWItYTE1My0z ZjE1LTliZTYtOTgwMDE5NzFkOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARHOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMI/pxk2jslKJGW3u7YMHRnFZ3JVRo1lXotpVG7sV/ZhuTOZsx/C/vHO wtu+glPSRCJQJrxeHBU1+9zny5h4KyLvY8KZynUAnc+mCREzZF/d8VhK4n07WcU4 bfgPyWUeZSc+T8CkRTemT3yVv6KW834JjHsPueqqPBJvMHGjpXrvShFPQoGUbkCx +gWozAv2Km/dAUvgyZsBV4DRojcvpqe/1sp66MR6pFNUNY8Jrn1dPsZp0mxkV6bt Ln9akrd6cgUfET0cNW4oXmUpjhwtvEDstCNVr6yhXDBjJaw45ws6pBspQLNRH986 Znl5vLsCW5QK9BfB9mjNmvau8DdjOrE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:50 2025 by rpki-client