$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2987f609-3695-30e3-967b-cbda004aacc7.roa File: 2987f609-3695-30e3-967b-cbda004aacc7.roa (raw, json) Hash identifier: 8sIJFyBO1YrIjF+fZkJUcLTb/0mh98DEleBxjr/6azY= Subject key identifier: 13:73:D1:DB:39:0F:C0:8E:01:2F:EA:E5:C5:DC:BE:87:1B:28:E7:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8BD6BB53AA114CE0C4780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2987f609-3695-30e3-967b-cbda004aacc7.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.42.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:bd:6b:b5:3a:a1:14:ce:0c:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8e11b5ab-3d03-41c3-8954-da9ea792c1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:d5:91:b8:52:73:d2:28:9b:ec:10:af:8c: 6f:34:4c:2e:61:b5:44:5f:d9:94:56:6a:b8:30:6f: 5d:7f:58:cc:d3:4b:9e:cb:51:4d:1f:3f:b2:56:f0: a1:85:38:f0:c9:5a:99:16:76:70:ab:72:87:d1:8c: d6:8a:39:74:10:1e:9d:77:f7:a2:fb:73:62:1c:c2: 19:ff:6a:2c:a9:de:82:b6:03:bc:4a:e1:f2:c1:3d: 58:5d:09:38:64:57:5b:cd:6e:67:92:89:37:71:b4: 84:b8:ce:54:f2:b9:7a:34:7e:33:c3:7e:3a:9d:de: cd:5b:26:97:9c:8c:9f:2b:23:06:95:51:c5:00:2e: 16:1f:fa:5a:e9:08:0d:1d:bb:56:06:9b:e8:e8:5f: d8:cf:5f:d9:49:2c:de:ad:5b:77:b1:8c:68:df:34: 79:da:8b:1c:d2:68:4f:4d:69:3d:ee:bc:f8:e4:aa: 9a:aa:00:8b:a4:76:51:93:14:4b:d1:30:b7:27:f2: 6b:22:ed:33:a3:db:18:c6:3c:b0:3d:f7:aa:0d:69: 77:df:3c:d3:ee:88:77:b8:5a:d6:36:97:c2:77:b1: 06:fe:96:1d:83:1b:61:e1:ed:da:4f:38:a7:90:66: 05:92:91:72:05:1f:c0:0f:db:95:22:2f:23:9a:77: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:73:D1:DB:39:0F:C0:8E:01:2F:EA:E5:C5:DC:BE:87:1B:28:E7:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2987f609-3695-30e3-967b-cbda004aacc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f6:f4:d4:31:aa:50:8c:11:62:af:86:c5:b8:b7:7d:9a:b3: b4:51:80:42:10:69:85:52:69:be:c1:33:63:0b:b7:81:5e:7f: 2a:46:5e:ce:7e:af:89:99:97:8f:0a:aa:99:81:85:c3:20:06: ab:d0:98:0a:97:1d:cd:6e:6c:60:ee:ce:2d:b4:37:14:37:59: d4:e9:a5:89:ec:60:27:eb:cd:81:1d:61:11:8b:ad:5c:3a:60: 1f:3b:6e:ce:b0:9b:19:db:08:f9:6c:16:23:b5:57:09:20:73: d5:a9:0d:78:ea:d8:98:9c:f8:3d:66:03:b2:17:f4:ca:c7:90: 59:e2:5d:70:76:ae:17:99:9e:63:59:8a:7a:4a:b9:d9:99:de: b7:2a:91:7b:03:67:d2:00:ef:71:31:71:f0:d1:63:86:ae:a1: 26:fb:f9:86:c4:bc:ee:12:d7:9b:82:72:6a:78:c4:17:8e:6f: 5c:61:2d:49:a4:09:1c:b9:4e:cb:45:0b:f2:ed:48:4f:6f:c3: 97:9f:64:e1:87:b0:7a:46:cd:4e:af:08:f7:be:1d:d1:cb:10: 88:e9:37:2f:4f:0a:01:f5:11:77:fe:a8:8b:37:f3:19:6b:07: 7d:1a:62:1a:84:11:29:a7:be:1c:73:fb:36:0d:9d:35:f3:2d: 37:64:35:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqL1rtTqhFM4MR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGUxMWI1YWItM2QwMy00MWMzLTg5NTQtZGE5ZWE3OTJjMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ/VkbhSc9Iom+wQr4xvNEwuYbVEX9mUVmq4 MG9df1jM00uey1FNHz+yVvChhTjwyVqZFnZwq3KH0YzWijl0EB6dd/ei+3NiHMIZ /2osqd6CtgO8SuHywT1YXQk4ZFdbzW5nkok3cbSEuM5U8rl6NH4zw346nd7NWyaX nIyfKyMGlVHFAC4WH/pa6QgNHbtWBpvo6F/Yz1/ZSSzerVt3sYxo3zR52osc0mhP TWk97rz45KqaqgCLpHZRkxRL0TC3J/JrIu0zo9sYxjywPfeqDWl33zzT7oh3uFrW NpfCd7EG/pYdgxth4e3aTzinkGYFkpFyBR/AD9uVIi8jmnf0JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNz0ds5D8COAS/q5cXcvocbKOd+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjk4N2Y2MDktMzY5NS0z MGUzLTk2N2ItY2JkYTAwNGFhY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCqHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD29NQxqlCMEWKvhsW4t32as7RRgEIQaYVSab7BM2MLt4FefypGXs5+ r4mZl48KqpmBhcMgBqvQmAqXHc1ubGDuzi20NxQ3WdTppYnsYCfrzYEdYRGLrVw6 YB87bs6wmxnbCPlsFiO1Vwkgc9WpDXjq2Jic+D1mA7IX9MrHkFniXXB2rheZnmNZ inpKudmZ3rcqkXsDZ9IA73ExcfDRY4auoSb7+YbEvO4S15uCcmp4xBeOb1xhLUmk CRy5TstFC/LtSE9vw5efZOGHsHpGzU6vCPe+HdHLEIjpNy9PCgH1EXf+qIs38xlr B30aYhqEESmnvhxz+zYNnTXzLTdkNQY= -----END CERTIFICATE-----Generated at Tue Oct 21 22:00:03 2025 by rpki-client