$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b369edf-6cd4-3ea4-b6d4-56285cc3c522.roa File: 1b369edf-6cd4-3ea4-b6d4-56285cc3c522.roa (raw, json) Hash identifier: NSrnBJHjLaGRUsM6O53pWO85VhQ2kanD4SisdmnTpic= Subject key identifier: D9:95:5B:51:E8:4F:6C:14:09:BA:63:54:CE:81:27:57:22:03:9B:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8B20FE2D1150E3C56D840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b369edf-6cd4-3ea4-b6d4-56285cc3c522.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.36.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:b2:0f:e2:d1:15:0e:3c:56:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4b3163b0-855b-4418-ba2c-f546353c1698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:90:b5:07:1f:49:1d:a1:09:50:08:58:6c: a8:b0:ff:2d:62:bb:85:8a:ac:46:da:c6:4f:a0:27: 3f:d8:45:0e:c9:bc:dc:15:75:9f:a6:da:42:23:6c: 65:03:d1:01:bc:8d:03:75:d6:b5:e6:35:08:00:42: 1c:02:d4:d6:8b:38:7a:c2:6f:1f:92:64:46:9d:43: 85:2e:81:91:cb:6f:8b:02:b8:25:db:5c:4c:89:8a: 14:a7:5f:1b:ab:d5:ad:09:62:89:d0:48:10:e8:fb: 07:4f:ec:37:6a:18:86:1f:34:5f:7c:a4:00:61:de: a7:49:17:6c:54:04:04:b4:2a:52:00:82:50:b2:3d: fd:a2:ca:bd:b4:f8:0b:ff:ad:2d:fb:01:7a:f5:91: 46:d3:40:c7:b1:8d:c0:a7:c9:50:a8:19:b8:a5:3d: 1c:d2:34:1b:9c:ee:c3:09:07:84:ef:e0:13:53:40: 20:50:33:1a:3d:56:2f:4c:92:5c:c1:bb:8d:56:d9: 83:88:5f:f0:a8:2e:a8:4d:be:99:63:96:eb:f5:fc: e3:55:84:fd:dd:e2:89:28:19:c3:42:be:8d:e0:57: f4:45:34:72:d5:4c:71:61:a3:79:53:e2:ad:96:e1: 7c:49:85:ef:95:d9:f5:a0:9a:d4:94:8d:cf:1b:96: 21:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:95:5B:51:E8:4F:6C:14:09:BA:63:54:CE:81:27:57:22:03:9B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b369edf-6cd4-3ea4-b6d4-56285cc3c522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:e9:82:7b:00:50:56:dc:89:ab:1b:03:b9:b4:44:39:3e:9a: 4f:6c:43:27:46:ef:66:4c:67:09:ed:db:1e:21:58:42:5a:fd: 99:0b:4b:52:e9:22:4a:19:e7:b8:51:70:31:0a:d4:0c:36:40: 8a:8f:29:31:9f:9b:d8:6d:02:a0:dd:59:2f:a5:36:f1:af:bc: 3e:bb:28:fd:ea:4a:07:03:c8:21:f6:6e:94:9f:ab:99:f2:04: a0:71:da:8d:52:bf:6f:d6:9a:e5:34:16:63:4e:ae:ae:2c:c2: e0:d9:98:5e:09:9c:90:a5:5f:ef:c7:a8:af:ae:54:90:ea:53: 90:5f:67:0d:f1:24:5f:7f:24:5a:61:18:dc:6d:8c:74:e9:2d: 0c:6d:69:8b:02:1d:15:e8:4b:db:5e:09:e8:d1:85:a4:2d:f3: 26:67:be:a4:3d:08:45:12:00:e8:4c:52:9f:68:08:b5:99:ac: 8e:61:29:72:fb:22:06:a2:5f:a1:e6:83:6b:9c:21:7b:61:49: 9e:a7:ea:ae:b0:03:36:4b:af:fc:83:13:2b:61:16:a3:20:7e: 3a:56:4b:d8:d8:90:50:df:22:b1:f9:49:4e:56:94:f7:54:dd: 05:d2:7d:a0:a2:88:23:38:8b:81:d2:b4:31:04:93:db:06:ca: 36:c0:3d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLIP4tEVDjxW2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGIzMTYzYjAtODU1Yi00NDE4LWJhMmMtZjU0NjM1M2MxNjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXmQtQcfSR2hCVAIWGyosP8tYruFiqxG2sZP oCc/2EUOybzcFXWfptpCI2xlA9EBvI0Ddda15jUIAEIcAtTWizh6wm8fkmRGnUOF LoGRy2+LArgl21xMiYoUp18bq9WtCWKJ0EgQ6PsHT+w3ahiGHzRffKQAYd6nSRds VAQEtCpSAIJQsj39osq9tPgL/60t+wF69ZFG00DHsY3Ap8lQqBm4pT0c0jQbnO7D CQeE7+ATU0AgUDMaPVYvTJJcwbuNVtmDiF/wqC6oTb6ZY5br9fzjVYT93eKJKBnD Qr6N4Ff0RTRy1UxxYaN5U+KtluF8SYXvldn1oJrUlI3PG5YhFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmVW1HoT2wUCbpjVM6BJ1ciA5txMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWIzNjllZGYtNmNkNC0z ZWE0LWI2ZDQtNTYyODVjYzNjNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjpgnsAUFbciasbA7m0RDk+mk9sQydG72ZMZwnt2x4hWEJa/ZkLS1Lp IkoZ57hRcDEK1Aw2QIqPKTGfm9htAqDdWS+lNvGvvD67KP3qSgcDyCH2bpSfq5ny BKBx2o1Sv2/WmuU0FmNOrq4swuDZmF4JnJClX+/HqK+uVJDqU5BfZw3xJF9/JFph GNxtjHTpLQxtaYsCHRXoS9teCejRhaQt8yZnvqQ9CEUSAOhMUp9oCLWZrI5hKXL7 IgaiX6Hmg2ucIXthSZ6n6q6wAzZLr/yDEythFqMgfjpWS9jYkFDfIrH5SU5WlPdU 3QXSfaCiiCM4i4HStDEEk9sGyjbAPZI= -----END CERTIFICATE-----Generated at Tue Oct 21 21:47:33 2025 by rpki-client