$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3d78cc-5d64-3ff7-8f38-134dcfc7fab3.roa File: 1a3d78cc-5d64-3ff7-8f38-134dcfc7fab3.roa (raw, json) Hash identifier: hKnIbPwwafUj8vxzHy0wcrm4wNN0WbBnifn4VxGpVUU= Subject key identifier: 89:16:0D:78:F5:14:83:28:52:15:94:1A:F1:00:D9:0A:23:9C:A9:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8D57491027A812E699380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3d78cc-5d64-3ff7-8f38-134dcfc7fab3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.61.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:d5:74:91:02:7a:81:2e:69:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5d78310c-1a41-42af-82f2-370de8d88cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:2d:98:10:4c:cd:15:ac:c5:65:db:6b:dc: cb:a0:3b:75:76:4e:fa:3a:ed:f5:35:ff:90:ed:7d: c0:e7:1b:1f:05:55:07:e0:b8:45:29:61:b3:a7:b1: a7:a4:84:ec:ea:c6:02:1d:30:1c:a9:0f:9f:3c:32: 81:aa:4d:3f:62:c9:b9:7b:85:56:9b:d9:ee:54:11: a3:49:7e:ac:3b:f6:07:0d:9d:87:12:8c:be:95:f2: b1:68:d5:14:9c:e0:a1:8f:e3:57:12:21:06:ac:6e: 97:d5:b9:79:d9:6f:9d:c7:ad:87:45:ef:d9:dc:d9: ff:ce:87:44:ab:80:41:f2:1c:cf:01:f7:0d:7e:ee: a8:f4:47:1a:18:65:1f:fd:b3:b8:74:b4:7e:e9:1e: 9a:b7:c6:c4:24:f0:63:aa:b1:5a:8b:92:b8:29:75: 1b:6a:bc:51:a9:ae:77:a6:42:6b:5b:d8:e5:da:8d: 14:5d:96:43:5a:7c:dd:32:3b:fc:78:ec:9c:d7:cd: e7:6e:b9:08:8f:f4:58:89:63:a8:d8:5e:d6:5d:71: 4d:ed:7f:96:95:a5:a9:a5:ff:d3:31:02:94:73:3c: 29:6b:ec:4b:85:78:27:00:42:d6:39:07:1f:8f:74: d6:6d:08:6a:97:1d:10:a3:2f:28:77:e6:d3:26:01: 07:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:16:0D:78:F5:14:83:28:52:15:94:1A:F1:00:D9:0A:23:9C:A9:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a3d78cc-5d64-3ff7-8f38-134dcfc7fab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.61.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ae:72:75:e4:be:ab:7c:11:ec:be:de:c0:86:8c:65:43:b4: 0f:63:a3:71:bc:5a:2a:26:53:cd:9b:88:f1:f2:65:c3:f4:48: 4c:4f:50:86:2a:fa:9e:71:a8:e7:f1:06:4f:49:ba:26:1a:a6: fa:4c:de:2f:5c:3e:a1:4e:ba:6e:d0:68:2e:5d:96:bd:d3:e0: e5:2f:b4:1d:0c:97:97:86:52:7f:dc:88:f4:ed:40:a1:99:ea: 98:15:74:00:7a:d5:81:b2:85:58:5a:f6:a9:1e:a9:85:a2:1c: f4:1e:0d:50:b4:35:41:f7:72:bb:27:38:d6:ac:e0:8a:b7:92: 3b:da:96:7f:3e:ad:75:f2:54:d1:0f:f3:9a:7b:b7:06:93:53: 6b:ef:0d:e7:f5:a9:da:4f:f5:15:12:d3:36:57:86:ec:47:19: 0b:3a:b7:48:77:bf:b3:bb:5b:eb:ff:15:a9:bf:80:75:92:2e: 20:6a:94:df:4a:22:f5:41:88:9f:fa:17:b5:e6:09:b4:07:29: de:e3:14:70:4a:d8:d3:05:92:b7:b9:a7:2f:aa:ed:e2:21:80: 0c:86:0d:aa:cf:90:2b:b9:2d:3f:69:d1:6d:b2:d9:3c:dc:e6: 78:cc:f2:d8:14:01:5a:9f:14:9a:07:31:e8:29:f2:db:b4:af: 7a:21:59:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqNV0kQJ6gS5pk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NWQ3ODMxMGMtMWE0MS00MmFmLTgyZjItMzcwZGU4ZDg4Y2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaAtmBBMzRWsxWXba9zLoDt1dk76Ou31Nf+Q 7X3A5xsfBVUH4LhFKWGzp7GnpITs6sYCHTAcqQ+fPDKBqk0/Ysm5e4VWm9nuVBGj SX6sO/YHDZ2HEoy+lfKxaNUUnOChj+NXEiEGrG6X1bl52W+dx62HRe/Z3Nn/zodE q4BB8hzPAfcNfu6o9EcaGGUf/bO4dLR+6R6at8bEJPBjqrFai5K4KXUbarxRqa53 pkJrW9jl2o0UXZZDWnzdMjv8eOyc183nbrkIj/RYiWOo2F7WXXFN7X+WlaWppf/T MQKUczwpa+xLhXgnAELWOQcfj3TWbQhqlx0Qoy8od+bTJgEHVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkWDXj1FIMoUhWUGvEA2QojnKkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWEzZDc4Y2MtNWQ2NC0z ZmY3LThmMzgtMTM0ZGNmYzdmYWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARD29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuucnXkvqt8Eey+3sCGjGVDtA9jo3G8WiomU82biPHyZcP0SExPUIYq +p5xqOfxBk9JuiYapvpM3i9cPqFOum7QaC5dlr3T4OUvtB0Ml5eGUn/ciPTtQKGZ 6pgVdAB61YGyhVha9qkeqYWiHPQeDVC0NUH3crsnONas4Iq3kjvaln8+rXXyVNEP 85p7twaTU2vvDef1qdpP9RUS0zZXhuxHGQs6t0h3v7O7W+v/Fam/gHWSLiBqlN9K IvVBiJ/6F7XmCbQHKd7jFHBK2NMFkre5py+q7eIhgAyGDarPkCu5LT9p0W2y2Tzc 5njM8tgUAVqfFJoHMegp8tu0r3ohWfY= -----END CERTIFICATE-----Generated at Tue Oct 21 19:34:15 2025 by rpki-client