$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d60cb5-51f2-3446-9623-db845602f862.roa File: 08d60cb5-51f2-3446-9623-db845602f862.roa (raw, json) Hash identifier: hRC91Ov8sdZXEefzQs57neqQirwUoG/sFhkgc7yfTkc= Subject key identifier: B6:B2:1D:B1:7A:E5:AE:76:7D:12:DA:C5:93:BC:B3:3E:EE:D7:EB:88 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8D08D92B965FAE43B6A20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d60cb5-51f2-3446-9623-db845602f862.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.58.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:d0:8d:92:b9:65:fa:e4:3b:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fea53ae7-98bb-4f65-9009-bcc8f8d62f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0d:86:d9:48:36:f1:d8:ad:5a:0b:1e:2d:ae: e7:2f:bc:3d:4e:27:93:5b:76:a7:fc:fb:70:9a:de: 40:7c:89:8e:34:74:62:43:9d:ed:bc:ef:af:f5:25: 36:e9:eb:64:c0:d6:42:7c:e1:55:d5:c1:ff:88:79: b6:82:dc:49:08:03:f5:77:ed:bb:77:34:9a:7c:f1: 76:26:20:15:95:0f:2f:5b:da:a3:61:3d:32:b8:9a: b5:27:ca:16:19:95:5e:8b:c0:30:12:c3:55:05:b8: 9b:9f:e1:d5:af:03:34:57:e7:cb:d2:eb:4b:15:57: 98:75:86:c3:23:0c:c7:99:b0:ec:95:93:a3:81:09: 92:7f:0f:7b:b1:c1:a3:d4:8b:9b:c5:12:85:7f:a4: 0d:42:fe:5d:d5:12:64:48:12:b9:f3:5e:e0:9f:aa: e4:1e:d1:83:9b:a7:4f:39:ee:d3:d1:66:de:70:8f: d3:82:27:03:85:6d:5a:45:8b:03:9f:60:54:ea:dd: df:88:31:61:b1:90:39:9e:a7:10:d3:39:74:3b:a5: 52:c2:e1:38:e0:a2:70:86:18:24:a6:9c:59:82:86: 13:92:25:8d:58:10:36:7e:0a:f1:87:63:28:39:1a: ab:15:81:67:fe:1b:59:58:98:b1:b6:55:d4:44:69: f6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B2:1D:B1:7A:E5:AE:76:7D:12:DA:C5:93:BC:B3:3E:EE:D7:EB:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d60cb5-51f2-3446-9623-db845602f862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:df:61:df:65:77:a7:e7:d4:3c:c0:09:f0:a7:f6:73:d5:85: 95:99:db:16:17:59:1f:3b:7f:a0:f4:4e:50:00:7e:64:a3:b4: e4:d1:c5:e0:0c:d0:32:cc:4e:11:18:88:67:c8:67:ce:62:86: b4:81:d9:81:f5:7c:9b:b1:16:4d:20:eb:03:ca:95:68:82:0b: 75:15:b0:60:87:f8:29:76:a4:23:2b:21:c4:dc:0a:c9:44:a9: 1f:6e:85:c8:24:4d:5e:fa:40:d7:c0:67:9c:39:26:0e:7c:1f: 9b:39:ad:d9:a7:dc:65:c0:69:50:83:d3:b6:b2:31:cb:a3:8e: cd:14:3e:55:96:32:d5:82:96:3e:6b:ea:31:26:be:0c:d4:09: 57:6b:72:48:26:fa:0e:74:e2:10:df:af:76:41:67:ff:9c:72: af:de:1b:6f:46:68:a9:65:3f:67:f8:22:e6:74:f2:e5:d3:72: 8d:1d:d3:0e:2f:06:da:17:23:df:f7:b6:11:a7:36:3a:e4:98: 59:5f:dd:8a:71:2d:04:69:e2:14:65:dd:f7:45:54:aa:e1:36: 30:46:be:f1:35:d1:e8:d6:a9:e5:b6:c2:a8:f4:93:9d:66:ce: 24:59:30:9e:91:4b:48:ff:35:b6:ae:3c:43:b0:fe:bf:6a:9b: 4b:5d:32:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqNCNkrll+uQ7aiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmVhNTNhZTctOThiYi00ZjY1LTkwMDktYmNjOGY4ZDYyZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ2G2Ug28ditWgseLa7nL7w9TieTW3an/Ptw mt5AfImONHRiQ53tvO+v9SU26etkwNZCfOFV1cH/iHm2gtxJCAP1d+27dzSafPF2 JiAVlQ8vW9qjYT0yuJq1J8oWGZVei8AwEsNVBbibn+HVrwM0V+fL0utLFVeYdYbD IwzHmbDslZOjgQmSfw97scGj1IubxRKFf6QNQv5d1RJkSBK5817gn6rkHtGDm6dP Oe7T0WbecI/TgicDhW1aRYsDn2BU6t3fiDFhsZA5nqcQ0zl0O6VSwuE44KJwhhgk ppxZgoYTkiWNWBA2fgrxh2MoORqrFYFn/htZWJixtlXURGn2GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLayHbF65a52fRLaxZO8sz7u1+uIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDhkNjBjYjUtNTFmMi0z NDQ2LTk2MjMtZGI4NDU2MDJmODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/fYd9ld6fn1DzACfCn9nPVhZWZ2xYXWR87f6D0TlAAfmSjtOTRxeAM 0DLMThEYiGfIZ85ihrSB2YH1fJuxFk0g6wPKlWiCC3UVsGCH+Cl2pCMrIcTcCslE qR9uhcgkTV76QNfAZ5w5Jg58H5s5rdmn3GXAaVCD07ayMcujjs0UPlWWMtWClj5r 6jEmvgzUCVdrckgm+g504hDfr3ZBZ/+ccq/eG29GaKllP2f4IuZ08uXTco0d0w4v BtoXI9/3thGnNjrkmFlf3YpxLQRp4hRl3fdFVKrhNjBGvvE10ejWqeW2wqj0k51m ziRZMJ6RS0j/NbauPEOw/r9qm0tdMlc= -----END CERTIFICATE-----Generated at Tue Oct 21 19:23:34 2025 by rpki-client