$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/297a05f6-6483-3e68-80ed-c0bb72ca1ec1.roa File: 297a05f6-6483-3e68-80ed-c0bb72ca1ec1.roa (raw, json) Hash identifier: W53xt4JShBPqFYHA9+AfJ7BFkAmtNnMBoGcVBCHtsz0= Subject key identifier: 0E:26:5C:9A:2D:93:CD:8D:6B:C9:7B:1D:07:10:10:6C:70:67:4B:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA5C1C7548B5CE42B47F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/297a05f6-6483-3e68-80ed-c0bb72ca1ec1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.41.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:5c:1c:75:48:b5:ce:42:b4:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ab4023ae-4582-471a-a777-5188e331fa0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:52:81:a9:7f:97:70:a2:47:29:7a:20:0d:77: d0:7b:f0:8f:d9:31:1c:1a:5b:07:db:a5:27:84:18: 3e:63:6b:78:5c:dc:b6:be:14:7f:50:25:92:01:23: 02:cf:80:71:8d:45:f7:8f:04:6b:ec:26:8e:55:e1: 53:85:54:15:2e:7b:3d:f8:b5:8c:8c:39:35:ed:11: d6:58:c0:27:5c:23:76:67:5c:65:f0:e4:5f:36:1d: e0:3c:57:14:18:30:02:fc:e7:ce:0f:34:f6:4a:0b: 8f:b0:4e:03:ed:e6:ef:24:f3:17:a6:e1:78:3f:01: 6c:00:fe:2d:e7:3e:80:13:9a:9e:f4:cb:b2:1b:9f: de:e7:38:e6:a9:d1:c4:0d:72:8e:fa:ff:34:4a:ca: c9:d8:33:b1:07:43:42:6b:ac:d8:74:db:66:4f:f9: 00:ea:5f:a5:c0:0a:4f:31:95:6d:b6:03:9c:9b:41: 38:b9:b8:62:66:c3:5e:2a:57:07:4f:28:52:89:61: 65:54:d1:2b:9b:ce:e8:fe:f2:8c:d0:52:49:0f:17: 09:a2:e9:4e:df:f4:ee:8a:c6:1c:19:b8:50:09:c9: 6a:3a:06:16:ff:7a:a2:db:63:81:86:5a:eb:8a:82: e4:ec:ac:bd:b4:65:31:a4:41:08:25:58:6e:90:f1: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:26:5C:9A:2D:93:CD:8D:6B:C9:7B:1D:07:10:10:6C:70:67:4B:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/297a05f6-6483-3e68-80ed-c0bb72ca1ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:53:18:18:61:10:37:87:a8:51:fc:a0:8a:40:04:a0:f8:de: a1:c9:62:62:aa:e1:02:12:d0:6c:4c:1e:a1:78:1d:36:99:b2: 04:9b:86:bd:f5:39:2f:14:b0:d8:02:e5:19:4f:7e:20:46:8d: 83:0f:32:2b:92:15:ce:81:f7:d8:4a:64:d2:fe:85:5e:41:cc: dd:ce:31:43:a0:18:df:64:03:1a:cf:1b:f1:12:20:de:f1:67: 3f:29:73:da:ed:7a:04:35:66:96:d3:33:fa:6b:b4:c3:4a:64: 1e:ed:53:5a:15:5b:05:fc:d6:1c:8b:ef:c0:49:09:99:52:df: 11:0d:7d:05:aa:68:27:ee:fa:af:a9:dd:80:6d:9e:50:68:39: 84:04:7c:ad:1d:a7:62:4d:28:71:fb:d2:87:c3:f0:99:0a:e2: 3a:7a:4d:ac:01:4e:9d:09:ae:04:69:8d:a1:a9:05:c7:22:48: 5d:63:59:dd:87:fb:87:7f:fb:66:4d:f1:49:4d:78:3d:7b:be: 50:f4:bf:95:55:8c:cf:1d:d1:bc:24:52:0d:76:fa:1a:db:0a: a3:81:94:a3:00:23:5d:55:a1:85:82:24:b0:26:5b:65:85:57: 99:26:b5:e9:32:80:09:df:56:47:1e:f4:2b:02:c6:51:5c:af: f2:1a:53:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlwcdUi1zkK0fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YWI0MDIzYWUtNDU4Mi00NzFhLWE3NzctNTE4OGUzMzFmYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFKBqX+XcKJHKXogDXfQe/CP2TEcGlsH26Un hBg+Y2t4XNy2vhR/UCWSASMCz4BxjUX3jwRr7CaOVeFThVQVLns9+LWMjDk17RHW WMAnXCN2Z1xl8ORfNh3gPFcUGDAC/OfODzT2SguPsE4D7ebvJPMXpuF4PwFsAP4t 5z6AE5qe9MuyG5/e5zjmqdHEDXKO+v80SsrJ2DOxB0NCa6zYdNtmT/kA6l+lwApP MZVttgOcm0E4ubhiZsNeKlcHTyhSiWFlVNErm87o/vKM0FJJDxcJoulO3/TuisYc GbhQCclqOgYW/3qi22OBhlrrioLk7Ky9tGUxpEEIJVhukPGXMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4mXJotk82Na8l7HQcQEGxwZ0uVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjk3YTA1ZjYtNjQ4My0z ZTY4LTgwZWQtYzBiYjcyY2ExZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtTGBhhEDeHqFH8oIpABKD43qHJYmKq4QIS0GxMHqF4HTaZsgSbhr31 OS8UsNgC5RlPfiBGjYMPMiuSFc6B99hKZNL+hV5BzN3OMUOgGN9kAxrPG/ESIN7x Zz8pc9rtegQ1ZpbTM/prtMNKZB7tU1oVWwX81hyL78BJCZlS3xENfQWqaCfu+q+p 3YBtnlBoOYQEfK0dp2JNKHH70ofD8JkK4jp6TawBTp0JrgRpjaGpBcciSF1jWd2H +4d/+2ZN8UlNeD17vlD0v5VVjM8d0bwkUg12+hrbCqOBlKMAI11VoYWCJLAmW2WF V5kmtekygAnfVkce9CsCxlFcr/IaU0g= -----END CERTIFICATE-----Generated at Tue Oct 21 19:29:57 2025 by rpki-client