$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c19985d-b919-3a02-8174-fde4ced59c01.roa File: 8c19985d-b919-3a02-8174-fde4ced59c01.roa (raw, json) Hash identifier: N39cpbUxIlHGgbNZWSBmDaqk/HvNijBrcjY2+8dn9Pc= Subject key identifier: 59:13:C8:8C:BB:C3:28:C1:98:05:93:77:A4:59:5B:2F:92:67:A6:B8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C3711B0B6C5CB930475C380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c19985d-b919-3a02-8174-fde4ced59c01.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 68.238.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:11:b0:b6:c5:cb:93:04:75:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3882df16-744d-4c2a-86cc-799d3373251b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d7:58:cd:93:be:af:f5:12:28:c7:03:78:ff: c5:1b:82:2d:7e:27:d3:b5:9e:ee:69:08:cc:64:ff: 85:c2:5f:f4:90:66:42:ec:35:f6:dc:83:89:59:82: 2c:92:83:e0:03:64:92:05:04:df:fb:26:fd:60:03: 29:da:1d:c9:05:d5:92:5b:ee:fd:f2:d2:56:43:c3: 65:55:e8:80:8b:f0:47:1b:c5:d6:a7:8d:be:df:c4: 0d:86:c9:40:01:cc:4b:bf:ca:18:5c:11:eb:ae:7a: a6:96:06:25:e3:13:49:32:8c:28:61:0c:6a:8b:4e: a2:ac:a2:91:67:7c:0e:41:2a:6e:79:6c:16:68:19: 5d:46:07:4c:f0:56:47:9f:90:ca:9b:8b:0b:7a:80: ea:ac:b9:72:9c:43:de:52:32:bc:ca:6c:a4:3f:8c: c5:de:06:61:4f:59:e5:e4:ec:39:a5:3e:21:58:2e: ba:d2:81:19:b3:a6:86:09:24:22:74:1e:c5:6c:00: 8f:e4:81:27:51:76:3e:44:29:85:47:8e:33:a2:e6: 38:40:37:f2:bd:94:7e:1c:c7:36:ac:49:33:0f:af: 50:ca:c4:57:5c:6d:4a:c3:2e:59:2b:d9:ef:b4:a9: c2:cf:f5:9f:59:ed:b7:2b:03:d1:57:0f:5a:fe:c8: 1f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:13:C8:8C:BB:C3:28:C1:98:05:93:77:A4:59:5B:2F:92:67:A6:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c19985d-b919-3a02-8174-fde4ced59c01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:a2:2d:22:37:94:b1:bc:cb:31:5b:d3:0b:6f:fa:6d:67:7d: 99:8d:b3:f2:d8:73:33:90:c7:05:7a:4f:27:ab:f8:01:80:8e: 2d:3e:06:bd:0d:00:61:93:cc:b3:06:8c:5f:64:ec:5c:bc:8d: dc:1c:8a:c9:71:e0:1a:4b:55:db:dd:bd:2c:7b:29:0a:7b:94: d5:04:2d:a5:a8:d2:79:40:f7:67:42:ba:4f:5e:2d:28:49:52: 6d:48:03:15:4f:ad:2e:c9:20:b4:c7:72:5e:bf:e4:94:a2:5f: c2:82:1a:fd:ae:c6:68:f6:0a:57:e0:22:df:d0:de:96:5e:72: d2:65:f6:25:9e:ca:51:9c:b7:ee:7b:bf:f8:47:f0:9e:e0:e5: 46:52:4f:09:86:2c:bf:f2:85:f5:a3:35:a7:96:f2:64:64:c7: 8e:89:1c:7b:4a:8c:6f:87:56:a5:1f:07:e2:3c:80:fb:c8:bc: 2e:81:b0:ff:47:cd:74:8f:7a:e5:d1:05:9d:d3:6c:d0:24:3e: 34:6b:e3:64:ba:6d:b4:e2:6b:ad:0a:01:e2:5d:0e:ed:7b:47: 1b:17:6b:e1:c2:7f:c0:7f:93:c5:66:56:08:16:e1:d0:67:a5: c4:8f:5f:7d:f8:14:f4:35:8a:ab:fd:58:01:d1:b2:ab:08:a0: cf:0c:e9:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxGwtsXLkwR1w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Mzg4MmRmMTYtNzQ0ZC00YzJhLTg2Y2MtNzk5ZDMzNzMyNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tdYzZO+r/USKMcDeP/FG4ItfifTtZ7uaQjM ZP+Fwl/0kGZC7DX23IOJWYIskoPgA2SSBQTf+yb9YAMp2h3JBdWSW+798tJWQ8Nl VeiAi/BHG8XWp42+38QNhslAAcxLv8oYXBHrrnqmlgYl4xNJMowoYQxqi06irKKR Z3wOQSpueWwWaBldRgdM8FZHn5DKm4sLeoDqrLlynEPeUjK8ymykP4zF3gZhT1nl 5Ow5pT4hWC660oEZs6aGCSQidB7FbACP5IEnUXY+RCmFR44zouY4QDfyvZR+HMc2 rEkzD69QysRXXG1Kwy5ZK9nvtKnCz/WfWe23KwPRVw9a/sgf3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkTyIy7wyjBmAWTd6RZWy+SZ6a4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGMxOTk4NWQtYjkxOS0z YTAyLTgxNzQtZmRlNGNlZDU5YzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERO6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeiLSI3lLG8yzFb0wtv+m1nfZmNs/LYczOQxwV6Tyer+AGAji0+Br0N AGGTzLMGjF9k7Fy8jdwcislx4BpLVdvdvSx7KQp7lNUELaWo0nlA92dCuk9eLShJ Um1IAxVPrS7JILTHcl6/5JSiX8KCGv2uxmj2ClfgIt/Q3pZectJl9iWeylGct+57 v/hH8J7g5UZSTwmGLL/yhfWjNaeW8mRkx46JHHtKjG+HVqUfB+I8gPvIvC6BsP9H zXSPeuXRBZ3TbNAkPjRr42S6bbTia60KAeJdDu17RxsXa+HCf8B/k8VmVggW4dBn pcSPX334FPQ1iqv9WAHRsqsIoM8M6ZA= -----END CERTIFICATE-----Generated at Sat Oct 11 00:22:07 2025 by rpki-client