$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7f0c80-8d94-371f-a316-0a8666764bbd.roa File: 2c7f0c80-8d94-371f-a316-0a8666764bbd.roa (raw, json) Hash identifier: jGWYnyzSYq8iQBGdGgZHF9w9OhjQVl4n6dwZBxHXFOg= Subject key identifier: 8B:B3:D4:87:2A:5D:28:9D:44:92:27:F3:AD:80:02:BA:65:FF:A4:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA5AEE7BE1F697D16606A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7f0c80-8d94-371f-a316-0a8666764bbd.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.40.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:5a:ee:7b:e1:f6:97:d1:66:06:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e9c4192b-5d91-414b-8516-8ee556ff894e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:91:38:85:4e:c9:f1:a1:8e:89:63:0e:30: 36:cc:29:40:53:07:70:c8:03:ee:5c:9b:bd:44:32: 42:8e:3c:4a:6f:31:27:ad:bb:9c:cb:ae:a1:22:b4: d2:a1:eb:f1:04:ca:8b:38:1b:b7:af:b9:65:a1:dc: b6:12:35:08:48:b8:3c:ce:69:c4:c9:0f:5e:b0:94: d7:65:a1:b7:69:07:63:36:5e:a3:04:a3:87:56:94: 4c:77:ff:6d:9f:5c:5f:27:04:a0:88:4c:d4:92:3f: 49:20:8b:a9:1b:c1:5e:91:40:35:8e:fe:db:db:a2: 64:1d:da:6c:64:3b:f2:d8:5f:cc:cf:93:f2:06:6b: 8f:14:c9:af:92:84:94:91:9a:26:3d:4a:11:b9:0d: 5a:a4:a4:5d:c5:a9:fa:45:6e:35:bd:d7:ba:8f:00: 72:0d:65:e1:d1:6d:96:d2:4c:e5:7f:c3:21:fc:59: 3b:2e:0f:e1:71:86:e2:27:df:bc:17:04:4b:ab:1b: d9:a2:63:f5:3c:31:22:6e:a9:7e:60:30:9f:93:51: ee:12:53:88:a1:ae:c9:1e:2d:89:f8:5d:87:4a:4e: 92:b9:94:fd:3e:90:dc:59:00:2d:f7:b6:cf:93:18: d7:bd:d8:7c:70:01:69:38:75:8e:5a:13:34:a0:22: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B3:D4:87:2A:5D:28:9D:44:92:27:F3:AD:80:02:BA:65:FF:A4:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7f0c80-8d94-371f-a316-0a8666764bbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f9:c5:0f:70:c2:70:75:50:77:31:99:ea:9d:da:59:fc:cf: 7f:7c:0e:9c:9c:3e:b0:03:d0:4a:42:50:53:82:86:96:d0:d6: f4:71:8e:0d:02:33:00:18:d5:61:63:f1:9b:62:7d:09:30:eb: 35:37:38:18:1c:fa:ab:80:e8:2d:8a:a8:5c:28:eb:35:07:76: fa:da:56:97:cd:b4:b9:d6:6f:d7:55:59:f4:80:df:08:9a:2e: 47:59:fd:22:4d:66:dd:1e:1b:59:2d:5e:0b:42:e6:f9:f2:e0: de:61:f1:08:e2:1f:7f:32:60:cb:6f:ef:41:43:78:28:12:ce: 71:21:80:c4:59:00:e1:07:8b:06:9c:b9:14:24:d8:13:cf:30: 32:fb:20:51:6c:5c:cb:9b:c9:a1:fe:67:44:fb:b2:2d:f5:22: 3c:31:ca:de:76:88:4e:7d:c0:86:ae:09:97:de:9d:bc:f2:0a: 5b:e8:8f:09:b3:a6:fc:a2:dc:12:a0:a7:b4:c1:4f:0c:f4:15: e9:f0:2b:96:b3:2b:9f:ad:69:4c:6c:2b:3f:8b:b1:6c:de:fa: fa:ed:a6:21:cb:83:f5:45:40:ed:c4:29:6d:ec:5e:16:9b:da: 17:f2:2b:e4:86:dc:68:fd:27:ba:73:99:82:71:d5:b6:71:44: c0:d1:4b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlrue+H2l9FmBqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTljNDE5MmItNWQ5MS00MTRiLTg1MTYtOGVlNTU2ZmY4OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpmROIVOyfGhjoljDjA2zClAUwdwyAPuXJu9 RDJCjjxKbzEnrbucy66hIrTSoevxBMqLOBu3r7llody2EjUISLg8zmnEyQ9esJTX ZaG3aQdjNl6jBKOHVpRMd/9tn1xfJwSgiEzUkj9JIIupG8FekUA1jv7b26JkHdps ZDvy2F/Mz5PyBmuPFMmvkoSUkZomPUoRuQ1apKRdxan6RW41vde6jwByDWXh0W2W 0kzlf8Mh/Fk7Lg/hcYbiJ9+8FwRLqxvZomP1PDEibql+YDCfk1HuElOIoa7JHi2J +F2HSk6SuZT9PpDcWQAt97bPkxjXvdh8cAFpOHWOWhM0oCKctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuz1IcqXSidRJIn862AArpl/6SyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmM3ZjBjODAtOGQ5NC0z NzFmLWEzMTYtMGE4NjY2NzY0YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/5xQ9wwnB1UHcxmeqd2ln8z398DpycPrAD0EpCUFOChpbQ1vRxjg0C MwAY1WFj8ZtifQkw6zU3OBgc+quA6C2KqFwo6zUHdvraVpfNtLnWb9dVWfSA3wia LkdZ/SJNZt0eG1ktXgtC5vny4N5h8QjiH38yYMtv70FDeCgSznEhgMRZAOEHiwac uRQk2BPPMDL7IFFsXMubyaH+Z0T7si31Ijwxyt52iE59wIauCZfenbzyClvojwmz pvyi3BKgp7TBTwz0FenwK5azK5+taUxsKz+LsWze+vrtpiHLg/VFQO3EKW3sXhab 2hfyK+SG3Gj9J7pzmYJx1bZxRMDRS8A= -----END CERTIFICATE-----Generated at Tue Oct 21 19:28:02 2025 by rpki-client