$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02ac5ace-7cc3-3be7-af50-1b45d1e5821f.roa File: 02ac5ace-7cc3-3be7-af50-1b45d1e5821f.roa (raw, json) Hash identifier: wf5dp+Hxu+7xrOccI+8pspmDkn0jDE+0XYM6l9Yjn5o= Subject key identifier: 6C:5B:10:0F:E7:B4:DE:A6:80:E6:B6:AF:83:06:67:E4:67:B0:E4:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA64EFF20A038AEDB39A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02ac5ace-7cc3-3be7-af50-1b45d1e5821f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.48.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:64:ef:f2:0a:03:8a:ed:b3:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=955b5a2b-18a7-40f7-9cd5-ee632d8744d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:47:ac:c2:42:37:77:76:14:1d:c3:bc:4d: 73:cd:05:76:c1:d8:8d:a5:07:1a:c7:74:62:34:81: 10:17:08:d5:48:c0:71:ed:b2:80:a3:6a:c1:bd:9f: 01:29:87:22:67:7b:1f:db:0e:fc:c5:e2:6e:52:5c: 5f:b1:33:15:6d:75:b5:e8:d7:bf:b5:5d:cf:03:1f: 98:29:0c:14:73:74:8e:f0:c2:09:a7:fe:1f:a5:d7: 9e:1b:69:83:81:fc:53:53:d4:14:c7:4b:6f:85:b0: d9:36:b6:a9:55:70:f7:74:3e:c8:6a:bb:ea:c7:36: 24:04:a2:5b:81:36:33:63:75:4f:b5:db:14:35:c1: d1:89:50:d2:55:9e:65:96:00:dc:dd:ff:ac:c1:a7: 77:f9:fe:8b:97:a1:7a:a2:5a:76:9f:e0:55:f6:ca: 29:01:06:37:14:09:17:5a:e6:dc:a0:98:42:8a:ff: 33:0e:4c:24:6d:5f:de:10:27:1b:4e:34:1b:6c:44: d7:b8:4c:5d:03:3a:75:61:a7:78:a1:40:60:f8:09: 96:92:43:2e:b7:bc:81:da:3a:da:f6:89:ac:af:00: 9d:0c:ee:92:68:17:e5:d4:49:81:f4:e3:22:32:b2: 4a:0e:cf:86:69:17:70:cb:9e:35:4d:e5:1c:a4:64: b4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5B:10:0F:E7:B4:DE:A6:80:E6:B6:AF:83:06:67:E4:67:B0:E4:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02ac5ace-7cc3-3be7-af50-1b45d1e5821f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:1d:1f:d7:b4:78:1c:f7:18:ac:5c:fe:c6:d9:ad:88:6d:d4: 8d:86:d5:db:19:5d:c2:7e:e7:d6:e2:05:93:67:f5:ef:dc:91: cb:53:b7:70:e8:48:9c:a0:09:69:4c:70:9a:5e:80:7d:5d:22: e8:63:01:13:c9:ee:0c:f7:8b:35:2b:05:ea:aa:d6:10:0f:38: 2c:f8:4c:e9:d4:a4:2e:39:a5:5b:46:5b:33:db:1c:81:c6:59: e0:cb:30:a2:a7:fd:aa:e4:c9:8f:e2:a1:80:05:c5:f4:2f:fb: e7:dd:75:69:6c:3f:fb:48:81:4e:dd:c0:2f:54:a2:17:fd:a3: 98:c3:ee:a1:96:16:c7:e1:84:6d:de:4f:f9:12:97:c4:5e:0c: 8b:f4:78:54:20:1e:5c:34:8d:82:67:00:65:b3:93:91:7f:4c: 97:f5:f1:f8:b6:79:ec:1c:22:43:a3:c7:33:bf:0a:2e:18:6b: 7d:69:fb:10:a3:3e:f7:3b:40:7e:e0:6a:a1:13:bf:9c:14:73: c4:61:5e:f2:e8:61:8b:1a:25:db:9e:fa:a5:d8:90:53:44:f4: 1d:2f:e2:e1:bf:c5:46:16:28:e1:f9:fe:dc:00:53:1d:1e:31: 40:28:fd:94:60:22:41:c3:57:9e:32:3f:42:ab:5e:0e:6b:48: 75:3e:b5:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqmTv8goDiu2zmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OTU1YjVhMmItMThhNy00MGY3LTljZDUtZWU2MzJkODc0NGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8JHrMJCN3d2FB3DvE1zzQV2wdiNpQcax3Ri NIEQFwjVSMBx7bKAo2rBvZ8BKYciZ3sf2w78xeJuUlxfsTMVbXW16Ne/tV3PAx+Y KQwUc3SO8MIJp/4fpdeeG2mDgfxTU9QUx0tvhbDZNrapVXD3dD7IarvqxzYkBKJb gTYzY3VPtdsUNcHRiVDSVZ5llgDc3f+swad3+f6Ll6F6olp2n+BV9sopAQY3FAkX WubcoJhCiv8zDkwkbV/eECcbTjQbbETXuExdAzp1Yad4oUBg+AmWkkMut7yB2jra 9omsrwCdDO6SaBfl1EmB9OMiMrJKDs+GaRdwy541TeUcpGS0fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxbEA/ntN6mgOa2r4MGZ+RnsOROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDJhYzVhY2UtN2NjMy0z YmU3LWFmNTAtMWI0NWQxZTU4MjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYdH9e0eBz3GKxc/sbZrYht1I2G1dsZXcJ+59biBZNn9e/ckctTt3Do SJygCWlMcJpegH1dIuhjARPJ7gz3izUrBeqq1hAPOCz4TOnUpC45pVtGWzPbHIHG WeDLMKKn/arkyY/ioYAFxfQv++fddWlsP/tIgU7dwC9Uohf9o5jD7qGWFsfhhG3e T/kSl8ReDIv0eFQgHlw0jYJnAGWzk5F/TJf18fi2eewcIkOjxzO/Ci4Ya31p+xCj Pvc7QH7gaqETv5wUc8RhXvLoYYsaJdue+qXYkFNE9B0v4uG/xUYWKOH5/twAUx0e MUAo/ZRgIkHDV54yP0KrXg5rSHU+tak= -----END CERTIFICATE-----Generated at Wed Oct 22 00:20:16 2025 by rpki-client