$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f52e791-241d-3e25-81e3-e693aafc8653.roa File: 0f52e791-241d-3e25-81e3-e693aafc8653.roa (raw, json) Hash identifier: hywiAJ8ImnlUz9rCpsXtt6chM3/ANDOExOk2N5zwSgQ= Subject key identifier: BA:F4:43:6F:BB:92:1C:91:6F:5B:B8:9A:68:9C:A1:BF:31:63:3C:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA6767803AB892B7C71500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f52e791-241d-3e25-81e3-e693aafc8653.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.48.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:67:67:80:3a:b8:92:b7:c7:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=bfaea7ce-1a27-4287-b9e5-4bdc27439eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:c6:65:f4:7a:bb:38:36:57:0f:f1:c8:df: d9:27:4f:50:a6:22:75:bd:98:a4:0b:b1:8e:ed:f0: e9:ce:2d:8f:f9:10:43:11:32:ff:10:12:a9:e3:53: 71:e4:30:92:0c:2d:89:19:87:fe:54:3d:c2:4a:63: 24:33:d4:29:1e:de:8c:12:6f:24:2c:06:0b:b7:9b: cb:ff:19:fb:99:c0:db:09:51:14:eb:4a:77:df:71: 5a:75:40:b7:98:8d:ae:88:14:d5:3a:40:91:00:d7: 50:5a:fe:cf:82:2e:2d:0d:8d:66:05:1f:44:9b:c3: 9a:bb:0c:e5:60:18:00:fc:a5:4a:92:cc:3c:00:8a: 3c:8c:79:1e:e7:42:3e:b5:da:cb:90:38:b1:61:72: ab:9f:3d:0e:01:be:10:d6:69:1f:6e:be:5b:72:d3: 5e:0e:e0:88:b9:56:8b:da:35:d6:27:ff:8b:7f:ba: a9:40:a8:f0:c3:12:bf:f3:8c:7b:ad:56:5d:f7:ae: af:c3:dd:6e:99:5a:d3:a1:38:dd:34:2e:4b:b8:be: 15:85:d6:38:2c:e7:b5:43:84:3e:f3:de:a7:dc:7a: 63:bb:35:1b:d2:76:88:da:72:b0:bb:de:b7:fc:77: 4b:26:eb:78:aa:68:01:88:c5:7f:ac:d8:59:9d:35: c6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F4:43:6F:BB:92:1C:91:6F:5B:B8:9A:68:9C:A1:BF:31:63:3C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f52e791-241d-3e25-81e3-e693aafc8653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:ea:0d:a4:2f:f8:46:70:94:f2:a9:a9:f3:5d:af:8b:ee:4e: ce:1e:57:de:2a:ed:33:76:e3:4a:8d:2f:55:21:f2:c4:89:73: 15:00:bd:f5:97:fb:7a:27:bf:ac:c8:f1:77:f3:f6:c1:35:2a: 0c:76:93:6c:2e:d2:ea:c0:6c:5d:d6:e9:6b:d5:7e:37:69:a6: bc:fe:2c:ae:d9:53:e8:46:bb:53:8d:c2:b5:99:75:f2:be:2c: 97:ae:a1:12:38:a8:e0:1d:30:fd:4e:26:b5:8f:43:45:78:4d: 53:7a:42:d8:ad:77:3f:6c:5e:2d:78:4a:93:a5:9e:97:7a:9f: 07:9c:80:26:50:c2:be:a4:d2:ec:80:43:20:76:a3:e8:97:78: e7:08:b2:af:b7:9e:7f:06:c8:a5:b3:11:55:9b:60:35:17:ee: c9:42:99:1e:29:8c:5a:8d:a8:46:77:1c:c9:92:06:ec:01:fb: 07:ba:7c:70:cd:12:1c:8b:94:00:10:69:3e:b0:2c:59:7f:ff: ef:79:a6:d2:ca:14:1e:6b:ab:9d:cc:58:90:da:37:75:dc:4a: e3:23:63:f4:19:af:3e:1a:af:e8:8a:cf:e5:e4:fc:9f:87:30: 82:cf:4e:73:d3:4a:8e:1c:9f:07:e9:40:d5:e4:6a:99:ec:77: 55:99:e2:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqmdngDq4krfHFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YmZhZWE3Y2UtMWEyNy00Mjg3LWI5ZTUtNGJkYzI3NDM5ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1zGZfR6uzg2Vw/xyN/ZJ09QpiJ1vZikC7GO 7fDpzi2P+RBDETL/EBKp41Nx5DCSDC2JGYf+VD3CSmMkM9QpHt6MEm8kLAYLt5vL /xn7mcDbCVEU60p333FadUC3mI2uiBTVOkCRANdQWv7Pgi4tDY1mBR9Em8Oauwzl YBgA/KVKksw8AIo8jHke50I+tdrLkDixYXKrnz0OAb4Q1mkfbr5bctNeDuCIuVaL 2jXWJ/+Lf7qpQKjwwxK/84x7rVZd966vw91umVrToTjdNC5LuL4VhdY4LOe1Q4Q+ 896n3HpjuzUb0naI2nKwu963/HdLJut4qmgBiMV/rNhZnTXGjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr0Q2+7khyRb1u4mmicob8xYzxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGY1MmU3OTEtMjQxZC0z ZTI1LTgxZTMtZTY5M2FhZmM4NjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANDqDaQv+EZwlPKpqfNdr4vuTs4eV94q7TN240qNL1Uh8sSJcxUAvfWX +3onv6zI8Xfz9sE1Kgx2k2wu0urAbF3W6WvVfjdpprz+LK7ZU+hGu1ONwrWZdfK+ LJeuoRI4qOAdMP1OJrWPQ0V4TVN6Qtitdz9sXi14SpOlnpd6nwecgCZQwr6k0uyA QyB2o+iXeOcIsq+3nn8GyKWzEVWbYDUX7slCmR4pjFqNqEZ3HMmSBuwB+we6fHDN EhyLlAAQaT6wLFl//+95ptLKFB5rq53MWJDaN3XcSuMjY/QZrz4ar+iKz+Xk/J+H MILPTnPTSo4cnwfpQNXkapnsd1WZ4ls= -----END CERTIFICATE-----Generated at Tue Oct 21 22:09:58 2025 by rpki-client