$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/8e1fbf84-9072-388c-955a-53f6be63eb70.roa File: 8e1fbf84-9072-388c-955a-53f6be63eb70.roa (raw, json) Hash identifier: r7e17tAujGUG6YQZDqqoPXoUD4He2XtmftCSM601UmA= Subject key identifier: 67:A7:33:7C:AB:25:99:98:08:99:58:FA:B2:72:54:21:EF:C8:93:FF Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584B8BE20DCC0C0D1970F7C41100 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/8e1fbf84-9072-388c-955a-53f6be63eb70.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 42 IP address blocks: 68.65.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:0d:cc:0c:0d:19:70:f7:c4:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=db34234e-3d64-4c58-bfa8-6361db27582a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:52:76:65:c5:e1:8a:f7:ae:80:05:b4:eb: ae:69:68:4f:d2:d9:48:2f:90:ec:4d:c7:2b:03:07: 34:e9:78:3d:f4:8b:90:2e:67:9a:43:3f:f3:88:10: a6:67:3e:26:47:45:2b:85:07:64:c9:a2:07:67:7f: cf:fa:7a:d1:f9:e8:2d:9c:30:bd:b1:8f:fa:ac:59: 60:d8:ab:8e:89:42:5f:a1:2c:74:0e:77:e4:c1:90: 82:4d:d8:f3:bd:22:83:5f:9e:ef:86:c8:6f:f5:51: 60:23:05:e6:92:a2:4c:d2:f5:74:fb:66:5e:14:80: d9:88:9f:38:a4:57:eb:6e:60:8d:22:80:ac:e3:74: 4a:ba:2d:8a:ba:0a:14:85:da:2f:1b:f0:6f:f6:13: 3f:2c:05:11:3b:cb:12:ae:17:9f:ad:0b:2c:bb:c2: 6f:6e:49:4b:4b:bc:ce:92:2c:24:d7:6f:d6:83:8f: d2:a9:95:e0:f7:00:a6:56:f0:f8:b8:47:5b:6b:a0: 12:7c:a0:f9:1e:85:96:35:47:79:0f:47:61:f2:a7: f6:ca:cb:82:79:d3:35:de:16:81:0c:75:08:be:14: 8c:15:59:23:53:f9:ce:1d:ac:52:a6:d8:8c:04:ef: f6:5d:3e:60:a4:70:44:5a:d2:8d:af:53:76:75:2f: 65:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A7:33:7C:AB:25:99:98:08:99:58:FA:B2:72:54:21:EF:C8:93:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/8e1fbf84-9072-388c-955a-53f6be63eb70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 68.65.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7d:1a:a0:02:e5:1e:c9:2a:17:47:66:27:72:1a:7c:20:8d: d2:47:72:58:fb:e5:77:a0:94:7b:af:bd:15:08:3c:35:16:97: 39:85:38:b4:15:b7:04:68:fb:fc:f2:64:55:90:bb:2c:84:91: 7d:77:74:e2:9f:79:97:8a:83:43:05:03:9d:59:ce:c5:05:52: 9f:b2:43:6d:b9:08:c1:b7:0e:15:ae:e4:09:43:25:a0:a6:d7: d8:8f:dd:98:02:d0:72:a9:59:a3:2c:62:9d:4f:7e:8c:a4:24: 23:28:4e:26:6f:ed:5e:83:2c:79:6c:84:65:d2:d0:6f:1e:99: 84:0e:73:13:7e:e5:f5:a2:21:45:54:52:14:18:e8:1c:98:fe: 76:2f:c2:22:18:fa:53:05:d3:02:0c:0d:66:54:f0:9b:64:5e: 02:01:1d:24:a6:4e:17:b9:9e:d7:5c:93:73:4d:40:97:1c:2d: fc:a3:fb:fa:d7:7d:94:5e:01:d9:06:c2:b8:02:07:4c:b1:38: e9:2b:7d:dd:0c:7c:52:1a:88:29:9f:1d:34:76:34:95:df:f0: fe:bb:96:ed:59:95:de:e9:33:dc:7b:0a:82:e9:5a:11:82:6c: 6a:22:6e:a7:38:c6:f2:26:ba:42:46:41:45:d1:e1:25:d9:e3: 1c:f4:8a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4g3MDA0ZcPfEEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZGIzNDIzNGUtM2Q2NC00YzU4LWJmYTgtNjM2MWRiMjc1ODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3pSdmXF4Yr3roAFtOuuaWhP0tlIL5DsTccr Awc06Xg99IuQLmeaQz/ziBCmZz4mR0UrhQdkyaIHZ3/P+nrR+egtnDC9sY/6rFlg 2KuOiUJfoSx0DnfkwZCCTdjzvSKDX57vhshv9VFgIwXmkqJM0vV0+2ZeFIDZiJ84 pFfrbmCNIoCs43RKui2KugoUhdovG/Bv9hM/LAURO8sSrhefrQssu8JvbklLS7zO kiwk12/Wg4/SqZXg9wCmVvD4uEdba6ASfKD5HoWWNUd5D0dh8qf2ysuCedM13haB DHUIvhSMFVkjU/nOHaxSptiMBO/2XT5gpHBEWtKNr1N2dS9lQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGenM3yrJZmYCJlY+rJyVCHvyJP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvOGUxZmJmODQtOTA3Mi0z ODhjLTk1NWEtNTNmNmJlNjNlYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl9GqAC5R7JKhdHZidyGnwgjdJHclj75XeglHuvvRUIPDUWlzmFOLQV twRo+/zyZFWQuyyEkX13dOKfeZeKg0MFA51ZzsUFUp+yQ225CMG3DhWu5AlDJaCm 19iP3ZgC0HKpWaMsYp1PfoykJCMoTiZv7V6DLHlshGXS0G8emYQOcxN+5fWiIUVU UhQY6ByY/nYvwiIY+lMF0wIMDWZU8JtkXgIBHSSmThe5ntdck3NNQJccLfyj+/rX fZReAdkGwrgCB0yxOOkrfd0MfFIaiCmfHTR2NJXf8P67lu1Zld7pM9x7CoLpWhGC bGoibqc4xvImukJGQUXR4SXZ4xz0isg= -----END CERTIFICATE-----Generated at Tue Oct 28 13:22:57 2025 by rpki-client