$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/43cb95bf-32bb-367f-b969-2f91bc5ab261.roa File: 43cb95bf-32bb-367f-b969-2f91bc5ab261.roa (raw, json) Hash identifier: y8xBNPkJtYh88irXBQdUbeS+hAhclbxuGhK2qoQyMx4= Subject key identifier: D0:3F:42:B8:89:8A:45:A7:15:27:BF:4E:5B:09:83:AE:E2:A2:63:0A Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BC53AF9BF8A7456755EED1AD0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/43cb95bf-32bb-367f-b969-2f91bc5ab261.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 14061 IP address blocks: 68.183.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:f9:bf:8a:74:56:75:5e:ed:1a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=4d541d51-d9d4-4919-9dac-997e9b91e908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:a3:38:34:fc:ba:8a:69:12:90:b1:89:d3: 4f:c2:12:ce:b9:de:d9:21:d7:a6:01:ee:5e:a4:a1: 27:6e:50:a2:36:19:d9:bb:e2:db:4c:53:db:0d:6e: ac:54:d8:5c:ca:0c:f1:b2:6a:45:11:db:be:15:61: 35:b0:db:58:89:0d:67:84:8f:b8:d1:0e:dc:9a:10: b1:be:b2:50:b8:61:27:2d:16:cd:91:87:fc:ea:02: fc:6a:3d:ba:a9:84:0d:52:2f:ed:8c:cc:75:8e:9c: 30:60:95:5b:3a:f8:35:ea:61:e9:df:c1:e8:8c:b9: 04:3e:ca:07:63:20:97:81:d1:77:4e:6b:9d:f3:28: 14:47:e4:c7:6f:90:28:5c:f1:f8:13:5f:e6:a5:83: 9f:05:02:f0:38:73:92:e0:c1:64:79:75:e4:6f:0c: fc:79:ee:9e:ed:d8:e3:b1:51:a8:fc:b4:c1:bb:35: a2:e8:57:30:aa:fd:ae:3c:fa:96:2f:1e:35:c9:69: 21:90:fa:4b:a0:22:e7:0e:fc:e0:1b:ff:39:ad:f9: d7:87:e5:f4:91:97:7d:47:7a:aa:0f:5b:4f:db:bb: 68:f3:0b:c6:47:51:66:e2:29:1a:e3:bf:4e:ac:17: 5a:2b:03:0e:29:18:d6:14:c4:bf:f2:4a:c6:b8:3d: 17:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3F:42:B8:89:8A:45:A7:15:27:BF:4E:5B:09:83:AE:E2:A2:63:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/43cb95bf-32bb-367f-b969-2f91bc5ab261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 68.183.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:1a:12:1a:e7:43:8f:4f:23:b5:62:59:95:c4:9f:c1:f4:c1: 04:57:78:15:3e:ce:ea:d7:92:69:0b:b7:19:5a:b5:97:f9:39: ed:d1:7c:58:75:4a:2f:1c:02:b4:41:9f:ff:52:4a:0a:e0:53: 1c:b8:1c:c3:eb:68:c2:b3:b2:de:fd:fd:d4:2b:02:4e:53:b5: 1c:58:39:28:45:09:5e:36:76:aa:3b:dd:02:98:a4:a5:9d:1f: 9c:d9:40:6a:6a:5b:b5:5e:1f:09:eb:ed:5b:b4:f7:48:5b:a3: bc:ea:f4:78:32:22:69:bc:6a:24:cd:f2:62:50:65:08:2d:bf: 8b:f6:43:cd:d0:d1:74:1b:eb:1d:39:0d:b0:5d:ec:58:0d:80: a0:f0:38:3b:25:56:91:50:ec:c1:f9:30:42:b7:a8:c8:19:50: 90:ae:27:61:aa:cf:82:35:b5:eb:c3:e0:03:fd:23:16:b6:b5: 3a:fd:92:15:a7:b1:97:47:2b:c7:30:13:b1:56:5a:03:16:7f: 3b:8f:df:58:4c:e7:8f:d7:15:d8:89:7c:7d:2c:75:49:dd:ad: f8:8d:a7:ab:61:e0:47:84:91:76:3d:f0:26:5f:99:f9:d8:34: 04:3a:ce:2f:c0:17:ad:18:ea:dc:52:4e:18:9d:6d:3d:9c:5d: 82:04:72:ab -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEvFOvm/inRWdV7tGtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NGQ1NDFkNTEtZDlkNC00OTE5LTlkYWMtOTk3ZTliOTFlOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit2jODT8uoppEpCxidNPwhLOud7ZIdemAe5e pKEnblCiNhnZu+LbTFPbDW6sVNhcygzxsmpFEdu+FWE1sNtYiQ1nhI+40Q7cmhCx vrJQuGEnLRbNkYf86gL8aj26qYQNUi/tjMx1jpwwYJVbOvg16mHp38HojLkEPsoH YyCXgdF3Tmud8ygUR+THb5AoXPH4E1/mpYOfBQLwOHOS4MFkeXXkbwz8ee6e7djj sVGo/LTBuzWi6Fcwqv2uPPqWLx41yWkhkPpLoCLnDvzgG/85rfnXh+X0kZd9R3qq D1tP27to8wvGR1Fm4ika479OrBdaKwMOKRjWFMS/8krGuD0XzQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNA/QriJikWnFSe/TlsJg67iomMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNDNjYjk1YmYtMzJiYi0z NjdmLWI5NjktMmY5MWJjNWFiMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARLcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqRoSGudDj08jtWJZlcSfwfTBBFd4FT7O6teSaQu3GVq1l/k57dF8WHVK LxwCtEGf/1JKCuBTHLgcw+towrOy3v391CsCTlO1HFg5KEUJXjZ2qjvdApikpZ0f nNlAampbtV4fCevtW7T3SFujvOr0eDIiabxqJM3yYlBlCC2/i/ZDzdDRdBvrHTkN sF3sWA2AoPA4OyVWkVDswfkwQreoyBlQkK4nYarPgjW168PgA/0jFra1Ov2SFaex l0crxzATsVZaAxZ/O4/fWEznj9cV2Il8fSx1Sd2t+I2nq2HgR4SRdj3wJl+Z+dg0 BDrOL8AXrRjq3FJOGJ1tPZxdggRyqw== -----END CERTIFICATE-----Generated at Fri Nov 7 02:32:52 2025 by rpki-client