$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20ea4ced-000e-3182-88f2-a6ae04e9bb65.roa File: 20ea4ced-000e-3182-88f2-a6ae04e9bb65.roa (raw, json) Hash identifier: kyLYJVVnivLhyLk4aG/YQiGFwdrJENKLgjzUWA4tZ1o= Subject key identifier: 1B:06:67:78:22:08:7C:CB:AC:1B:2F:6F:5E:A5:BB:B6:A9:87:4D:D1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA5C392D9347A818A1F100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20ea4ced-000e-3182-88f2-a6ae04e9bb65.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.41.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:5c:39:2d:93:47:a8:18:a1:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4e9a8d75-a0b5-41c8-9f9b-7664459b0645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:32:ff:f6:cf:7e:df:c2:ba:f5:6c:44:0b: 08:32:fc:c0:26:f0:09:1d:fd:33:7f:2f:e7:b3:29: 32:25:de:69:42:74:68:dd:aa:5f:8c:81:03:23:29: 6c:23:fb:4c:8a:92:64:27:21:e5:02:f4:e7:23:fa: cc:2a:5d:a1:50:c6:9e:e3:65:71:5f:00:2b:3d:f5: bd:71:b7:0a:5d:2d:e7:f1:56:9c:9f:07:b8:51:fb: b3:0c:f1:8c:30:96:2a:6e:04:b9:96:fb:53:7c:41: 63:89:a6:13:1c:41:9e:e9:cd:81:ad:5a:2d:a0:b5: eb:0f:76:c1:21:f8:ba:83:eb:d4:35:c9:14:2c:d1: b0:8b:dc:15:bb:96:45:ac:f3:a0:dd:ae:7e:9d:54: 2e:18:1c:1b:10:c6:0c:81:4a:d4:6a:28:08:38:80: 6b:0a:40:c5:30:8e:16:20:14:67:60:8d:62:4b:28: a7:7d:43:8c:f4:ea:5d:1d:37:83:6b:e9:31:b3:f8: a1:49:84:6b:50:66:42:fe:d4:7e:85:82:70:ed:6c: f6:6d:93:f4:70:a0:3b:5d:f8:0c:4b:2d:9c:0b:48: 75:a7:18:48:ee:94:0f:56:cc:1d:f3:15:ce:8f:4e: 29:0a:ba:66:ef:03:d6:be:a5:4d:a5:83:b5:b6:f9: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:06:67:78:22:08:7C:CB:AC:1B:2F:6F:5E:A5:BB:B6:A9:87:4D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20ea4ced-000e-3182-88f2-a6ae04e9bb65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:d6:61:b7:4b:7f:61:eb:64:e3:db:20:43:06:97:54:92:62: ac:21:e9:2f:51:80:42:39:fc:85:f6:7c:13:b6:01:4e:a7:59: e4:98:52:c0:ca:4a:6a:19:d4:cc:80:23:33:1a:6b:d3:21:a4: f6:cb:8b:f9:33:7e:5d:18:7a:d7:b7:fc:f9:12:5d:e3:d2:4e: 3f:da:f6:47:88:67:a6:16:60:11:f2:40:d4:61:6c:0e:ef:ce: 98:9d:f5:fc:a0:ff:3e:7e:ba:e5:ca:6e:47:d0:0d:59:10:06: 55:b3:44:b1:1d:23:a4:48:af:cf:b6:97:fe:72:cf:62:3a:78: b1:e6:b6:c4:85:31:0d:3b:c0:96:b7:44:f8:58:84:df:95:92: 23:3c:98:b8:f8:40:96:cc:71:f9:84:30:89:e6:49:58:7a:54: 1b:3a:9a:df:2f:1d:e3:34:39:24:88:58:21:c9:0c:4b:e9:ff: 8c:e7:43:97:c9:56:b3:c8:04:d1:d4:ba:bd:d0:1b:aa:5f:53: f6:61:e3:09:38:b6:12:d8:32:2f:e8:35:3b:f5:ca:67:aa:f2: 00:43:b7:90:42:0a:ef:2d:7a:ce:10:8b:38:51:b6:98:cd:29: 6b:8a:1e:da:c5:d2:12:01:1d:04:8b:e3:0e:3a:9e:99:9f:4b: 18:c7:8a:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlw5LZNHqBih8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGU5YThkNzUtYTBiNS00MWM4LTlmOWItNzY2NDQ1OWIwNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6sy//bPft/CuvVsRAsIMvzAJvAJHf0zfy/n sykyJd5pQnRo3apfjIEDIylsI/tMipJkJyHlAvTnI/rMKl2hUMae42VxXwArPfW9 cbcKXS3n8Vacnwe4UfuzDPGMMJYqbgS5lvtTfEFjiaYTHEGe6c2BrVotoLXrD3bB Ifi6g+vUNckULNGwi9wVu5ZFrPOg3a5+nVQuGBwbEMYMgUrUaigIOIBrCkDFMI4W IBRnYI1iSyinfUOM9OpdHTeDa+kxs/ihSYRrUGZC/tR+hYJw7Wz2bZP0cKA7XfgM Sy2cC0h1pxhI7pQPVswd8xXOj04pCrpm7wPWvqVNpYO1tvltIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsGZ3giCHzLrBsvb16lu7aph03RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBlYTRjZWQtMDAwZS0z MTgyLTg4ZjItYTZhZTA0ZTliYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHWYbdLf2HrZOPbIEMGl1SSYqwh6S9RgEI5/IX2fBO2AU6nWeSYUsDK SmoZ1MyAIzMaa9MhpPbLi/kzfl0Yete3/PkSXePSTj/a9keIZ6YWYBHyQNRhbA7v zpid9fyg/z5+uuXKbkfQDVkQBlWzRLEdI6RIr8+2l/5yz2I6eLHmtsSFMQ07wJa3 RPhYhN+VkiM8mLj4QJbMcfmEMInmSVh6VBs6mt8vHeM0OSSIWCHJDEvp/4znQ5fJ VrPIBNHUur3QG6pfU/Zh4wk4thLYMi/oNTv1ymeq8gBDt5BCCu8tes4QizhRtpjN KWuKHtrF0hIBHQSL4w46npmfSxjHiuo= -----END CERTIFICATE-----Generated at Wed Oct 22 00:28:19 2025 by rpki-client