$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3430321c-55f6-37da-89ee-653df09f5a7a.roa File: 3430321c-55f6-37da-89ee-653df09f5a7a.roa (raw, json) Hash identifier: ytoAd9HtqQrdexGZ5qzyJK6lTWGasv59g0Mj7TDwiek= Subject key identifier: 72:F6:7A:B3:39:60:F7:8A:19:5D:22:40:A5:C3:2B:86:8F:25:19:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8D8F6CF3A29A40A23D900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3430321c-55f6-37da-89ee-653df09f5a7a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.83.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:d8:f6:cf:3a:29:a4:0a:23:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1ddff2de-7db4-472b-a645-62750a3232ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:4e:f4:81:4f:0f:11:ed:a3:5b:54:67:b1: 4d:48:20:f2:56:aa:06:42:21:6b:3e:ae:3a:cf:56: 8b:57:3d:d8:c4:8d:40:a7:38:5c:c7:c4:99:3e:a3: c2:09:e7:2e:cc:2b:03:a2:5e:ae:d1:3e:64:80:a9: be:3d:b2:fa:8a:dc:21:78:85:28:33:55:c2:be:f6: 5a:17:f0:00:33:89:91:e0:31:74:61:9d:a1:bf:1d: 11:ff:f7:62:5f:36:6a:bc:07:4f:50:aa:25:52:b6: 9c:e2:23:b0:33:ad:36:c0:5d:e3:ac:d1:fb:13:9d: 5a:fc:50:f2:ec:b6:28:4d:40:d2:0f:43:11:c0:5f: 44:fd:f7:ad:9b:de:27:f0:13:8e:59:f0:fb:12:f4: 88:07:c1:df:ad:86:97:d5:52:3f:a2:74:40:0f:ad: b3:e7:98:61:18:7e:c5:b8:d4:20:f4:a3:a4:e7:d1: 16:50:46:51:68:69:32:a7:00:ad:df:f7:74:5e:20: 72:1d:45:ee:c9:89:a9:76:be:73:22:1c:7a:8f:3d: 85:3d:80:9c:6f:30:80:3f:a7:cf:6c:a3:19:64:4b: 49:5c:ab:c0:12:62:b6:7d:20:85:f2:d2:52:c7:6a: be:b6:31:1f:3f:de:dd:64:37:46:14:80:c0:14:2f: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F6:7A:B3:39:60:F7:8A:19:5D:22:40:A5:C3:2B:86:8F:25:19:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3430321c-55f6-37da-89ee-653df09f5a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.83.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f1:ea:58:7d:72:49:b9:5c:fc:89:b3:27:db:62:29:0f:c8: 9b:1e:ae:c3:c5:cd:0a:de:ec:65:b2:8b:fd:98:87:10:be:7c: 47:48:59:1f:70:6c:b8:e3:0a:12:e5:9a:b4:fa:be:35:8c:08: ff:6f:0b:ef:c7:11:79:d1:76:0d:83:e0:cc:a0:ac:79:de:ee: 3b:1e:49:13:b7:6d:2d:5b:b4:e3:ee:7a:8b:e0:02:42:9a:45: 6a:1e:eb:fc:10:2f:0e:cc:63:03:8d:64:f0:20:62:30:e4:63: 61:7e:db:14:92:dd:33:a4:0e:bc:43:89:a3:dd:5a:f8:4b:4c: 19:55:b3:78:75:c5:5a:b6:a0:b1:51:a9:51:7b:43:c7:8c:95: 74:7a:2e:4d:d6:12:77:bf:8b:3c:28:0f:23:a9:8a:3f:82:6b: 67:46:bb:3a:33:eb:80:4b:d7:07:11:81:d3:c7:58:b7:c6:5d: 7d:9c:25:c8:41:7c:44:99:3b:97:61:d7:aa:f4:35:cc:4d:09: 18:c7:ba:a1:5a:f0:96:98:d9:93:94:0e:da:7a:59:37:b9:2b: 4b:1a:43:ec:a7:42:13:05:6f:29:6d:57:51:c6:d5:64:e7:5a: 77:14:19:7f:c1:58:11:16:af:75:99:19:fc:ba:68:e8:33:9d: 1f:28:02:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqNj2zzoppAoj2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWRkZmYyZGUtN2RiNC00NzJiLWE2NDUtNjI3NTBhMzIzMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpRO9IFPDxHto1tUZ7FNSCDyVqoGQiFrPq46 z1aLVz3YxI1Apzhcx8SZPqPCCecuzCsDol6u0T5kgKm+PbL6itwheIUoM1XCvvZa F/AAM4mR4DF0YZ2hvx0R//diXzZqvAdPUKolUrac4iOwM602wF3jrNH7E51a/FDy 7LYoTUDSD0MRwF9E/fetm94n8BOOWfD7EvSIB8HfrYaX1VI/onRAD62z55hhGH7F uNQg9KOk59EWUEZRaGkypwCt3/d0XiByHUXuyYmpdr5zIhx6jz2FPYCcbzCAP6fP bKMZZEtJXKvAEmK2fSCF8tJSx2q+tjEfP97dZDdGFIDAFC/0VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL2erM5YPeKGV0iQKXDK4aPJRleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQzMDMyMWMtNTVmNi0z N2RhLTg5ZWUtNjUzZGYwOWY1YTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFPJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzx6lh9ckm5XPyJsyfbYikPyJsersPFzQre7GWyi/2YhxC+fEdIWR9w bLjjChLlmrT6vjWMCP9vC+/HEXnRdg2D4MygrHne7jseSRO3bS1btOPueovgAkKa RWoe6/wQLw7MYwONZPAgYjDkY2F+2xSS3TOkDrxDiaPdWvhLTBlVs3h1xVq2oLFR qVF7Q8eMlXR6Lk3WEne/izwoDyOpij+Ca2dGuzoz64BL1wcRgdPHWLfGXX2cJchB fESZO5dh16r0NcxNCRjHuqFa8JaY2ZOUDtp6WTe5K0saQ+ynQhMFbyltV1HG1WTn WncUGX/BWBEWr3WZGfy6aOgznR8oAqg= -----END CERTIFICATE-----Generated at Tue Oct 21 19:36:14 2025 by rpki-client