$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/228f8569-3a81-305c-ba16-cafa8867e19d.roa File: 228f8569-3a81-305c-ba16-cafa8867e19d.roa (raw, json) Hash identifier: MCbcVYyoxF45MrAbLcYVx9+YqnNgI1fkiBtJn0yopgg= Subject key identifier: 07:50:43:97:BD:CF:54:16:A5:4F:15:6E:52:10:F4:B6:9E:2C:7D:76 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8CFCE428BF14F90BE7180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/228f8569-3a81-305c-ba16-cafa8867e19d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.56.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:cf:ce:42:8b:f1:4f:90:be:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=024f8855-fc7e-4f22-8298-cdb0cdd5a4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:6c:f6:2d:5e:b8:02:f4:40:9b:7e:a6:1b: bd:3b:b1:e9:8b:02:4d:16:32:1a:63:fb:25:78:bd: af:b5:01:13:4a:2e:ea:d2:96:63:b5:ba:7a:07:cb: c1:0a:76:f9:9e:f1:95:44:c9:28:c1:e4:d8:24:db: 5c:c0:90:e3:9e:1e:dc:e7:75:ca:16:ba:38:55:9e: f5:5b:9a:50:5b:ed:03:38:5e:9e:70:ee:6d:35:43: 6a:a5:d4:97:9c:5b:bc:8d:4b:ab:8b:5e:b4:77:09: 4d:8d:e9:21:53:f6:55:f8:50:08:1c:c9:eb:43:60: 96:ab:44:4f:86:72:7a:35:fb:25:1c:4d:46:cb:bb: 98:52:6a:04:70:56:62:97:69:06:e1:d2:dd:11:99: f4:85:be:09:e9:85:bd:2d:0c:aa:f6:67:39:86:c7: e2:21:ec:2a:e9:60:89:78:8c:f5:1e:ee:ac:ec:8f: 2b:30:65:e2:68:e1:54:46:e7:05:30:db:e1:09:2b: 03:02:9a:54:d8:51:d3:4e:24:94:d8:fb:15:05:ef: e1:12:47:4f:8f:31:f7:65:39:93:e1:0d:59:da:b2: cc:97:71:6c:b0:82:3e:18:b9:46:7f:68:a9:00:f7: 1a:04:2a:69:87:5a:54:66:be:4b:69:10:db:9c:a1: bf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:50:43:97:BD:CF:54:16:A5:4F:15:6E:52:10:F4:B6:9E:2C:7D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/228f8569-3a81-305c-ba16-cafa8867e19d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:7e:cd:bc:10:ad:05:7a:df:4f:6b:73:b5:0a:fb:11:3c:89: 97:23:3f:e0:6d:14:20:08:eb:04:33:65:f6:aa:0e:3e:c9:37: c8:8b:14:c4:72:e2:71:6f:14:8d:1e:cc:96:5d:7f:cc:98:74: a1:61:ec:9e:05:e0:9a:df:b4:28:81:32:10:c6:98:86:57:f7: 76:bc:67:66:f9:c2:7c:fe:62:75:bc:5a:9d:4d:f5:24:a8:c0: fc:05:e4:8b:f2:38:6c:1a:f5:3c:79:37:23:da:2b:6d:70:ff: 6f:af:25:b2:b7:45:94:c0:58:b3:46:86:3f:dd:37:d8:08:81: 1e:91:24:45:91:42:5a:6a:65:12:62:d2:92:09:40:f3:a2:73: 8b:b0:d7:ca:cc:86:22:2b:ae:87:78:1c:b5:58:20:99:13:e2: 8c:9c:0a:32:4b:36:f2:f1:3b:fa:64:13:52:1b:13:8a:4f:8e: ac:c1:c6:a4:bb:02:d5:b7:cc:53:40:65:4b:77:f2:e8:45:38: d7:65:86:2e:69:c1:e0:c4:69:ad:cd:86:5d:69:4e:e6:09:67: 66:d3:7a:0d:2d:c5:4d:06:14:1d:5e:84:5c:40:94:13:bc:90: 4d:51:38:7c:29:2e:41:8f:b8:27:c7:d2:43:8b:f0:7a:99:de: 7c:1d:e8:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqM/OQovxT5C+cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDI0Zjg4NTUtZmM3ZS00ZjIyLTgyOTgtY2RiMGNkZDVhNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/ds9i1euAL0QJt+phu9O7HpiwJNFjIaY/sl eL2vtQETSi7q0pZjtbp6B8vBCnb5nvGVRMkoweTYJNtcwJDjnh7c53XKFro4VZ71 W5pQW+0DOF6ecO5tNUNqpdSXnFu8jUuri160dwlNjekhU/ZV+FAIHMnrQ2CWq0RP hnJ6NfslHE1Gy7uYUmoEcFZil2kG4dLdEZn0hb4J6YW9LQyq9mc5hsfiIewq6WCJ eIz1Hu6s7I8rMGXiaOFURucFMNvhCSsDAppU2FHTTiSU2PsVBe/hEkdPjzH3ZTmT 4Q1Z2rLMl3FssII+GLlGf2ipAPcaBCpph1pUZr5LaRDbnKG/mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdQQ5e9z1QWpU8VblIQ9LaeLH12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjI4Zjg1NjktM2E4MS0z MDVjLWJhMTYtY2FmYTg4NjdlMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl+zbwQrQV6309rc7UK+xE8iZcjP+BtFCAI6wQzZfaqDj7JN8iLFMRy 4nFvFI0ezJZdf8yYdKFh7J4F4JrftCiBMhDGmIZX93a8Z2b5wnz+YnW8Wp1N9SSo wPwF5IvyOGwa9Tx5NyPaK21w/2+vJbK3RZTAWLNGhj/dN9gIgR6RJEWRQlpqZRJi 0pIJQPOic4uw18rMhiIrrod4HLVYIJkT4oycCjJLNvLxO/pkE1IbE4pPjqzBxqS7 AtW3zFNAZUt38uhFONdlhi5pweDEaa3Nhl1pTuYJZ2bTeg0txU0GFB1ehFxAlBO8 kE1ROHwpLkGPuCfH0kOL8HqZ3nwd6Mw= -----END CERTIFICATE-----Generated at Wed Oct 22 00:29:22 2025 by rpki-client