$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399f4747-d52d-3da9-93f9-04c82e7db62e.roa File: 399f4747-d52d-3da9-93f9-04c82e7db62e.roa (raw, json) Hash identifier: afAUW512CTASO9qVdAPApQM5XOaLacEFk5eb3Mho7hY= Subject key identifier: FD:F5:A9:A3:7F:2E:72:4E:8F:69:19:D8:2E:2D:1C:35:B3:C2:17:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C8A92F58F0C0159CA1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399f4747-d52d-3da9-93f9-04c82e7db62e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.51.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c8:a9:2f:58:f0:c0:15:9c:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=dd3ecb32-e4a5-4a60-9144-d491ef4096cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d8:f3:95:c1:9f:d2:e2:fc:3a:2f:95:97:7a: 93:75:37:a1:26:4b:67:d1:3c:36:88:dc:0e:27:53: e5:62:e1:87:04:88:3c:b9:0f:c1:c8:d7:e2:30:ae: ec:c9:54:2e:3a:24:46:f8:8f:a3:32:cf:ec:bf:e1: 0a:57:06:3b:42:ba:58:5e:0f:34:05:ce:47:a9:05: a4:90:6e:3f:a2:f7:cb:dd:52:36:15:bc:11:31:53: ae:4b:04:c9:41:c2:39:df:41:ad:98:58:05:d2:ad: 70:3e:cb:e1:b7:52:49:f8:c3:d1:27:52:e1:c1:9b: 9d:a2:f6:0b:86:9b:21:6b:ec:52:fb:3d:b6:8e:4a: 6d:ad:57:ec:02:46:6a:70:55:ae:50:79:7a:69:1b: e7:b3:d2:16:7d:c1:91:bb:56:ba:79:3d:ee:c8:40: 4e:97:68:26:6b:d8:18:ed:6f:b3:37:66:65:50:ed: fd:40:f8:08:90:2e:79:ee:38:e3:84:02:24:9a:3f: 2e:18:e2:10:64:23:01:9b:34:4f:73:63:fb:fe:57: a6:fa:8d:d7:ae:66:4b:11:81:72:7e:1a:19:58:2c: 4f:74:8e:01:0c:26:77:03:e3:2b:4b:ef:4a:64:a5: 46:ca:7c:91:9a:db:6f:61:d3:04:8a:28:f4:20:da: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F5:A9:A3:7F:2E:72:4E:8F:69:19:D8:2E:2D:1C:35:B3:C2:17:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/399f4747-d52d-3da9-93f9-04c82e7db62e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f3:4d:3b:9c:c4:d2:00:fc:f9:19:51:44:e7:2a:16:0d:43: 1d:25:ca:dd:f8:5f:0a:c9:0a:0d:7b:10:da:b3:fd:de:fa:b7: ce:d9:e1:c5:be:65:6a:87:e3:b1:27:e6:8c:c7:f3:dc:00:6b: d2:31:76:58:3d:f1:86:9c:ee:c3:77:77:6f:a6:95:b3:7a:ec: 70:93:d3:f9:1c:07:1a:68:97:a2:53:0f:8f:86:ce:66:bc:53: 90:88:89:ee:77:6a:d9:e4:6f:26:bd:2d:c5:c2:36:15:55:d6: 40:18:70:bd:72:bf:23:50:6d:ad:cf:50:df:b9:77:ea:3f:2c: 45:18:98:96:3b:dc:7e:c8:0e:0f:f6:93:fb:34:bf:96:19:45: 9f:7f:67:cf:1b:53:e7:b8:5a:c5:b6:bc:15:83:a1:33:11:de: 8d:23:0b:3d:ce:04:e5:9d:61:e1:3b:db:aa:fd:1e:1c:d8:d2: e4:b7:8a:80:0c:de:63:5b:5f:e8:ef:7e:41:72:ff:00:3f:07: a5:09:e1:99:52:49:2d:66:ee:a1:21:e6:44:f8:2c:da:1a:ba: a9:56:fb:b1:fe:d9:2e:25:ac:23:0f:b9:b2:84:7c:20:fc:81: 39:91:36:b6:b0:22:c5:21:0c:b0:73:00:f4:a7:2e:81:79:91: a5:f0:93:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMipL1jwwBWcocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGQzZWNiMzItZTRhNS00YTYwLTkxNDQtZDQ5MWVmNDA5NmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNjzlcGf0uL8Oi+Vl3qTdTehJktn0Tw2iNwO J1PlYuGHBIg8uQ/ByNfiMK7syVQuOiRG+I+jMs/sv+EKVwY7QrpYXg80Bc5HqQWk kG4/ovfL3VI2FbwRMVOuSwTJQcI530GtmFgF0q1wPsvht1JJ+MPRJ1LhwZudovYL hpsha+xS+z22jkptrVfsAkZqcFWuUHl6aRvns9IWfcGRu1a6eT3uyEBOl2gma9gY 7W+zN2ZlUO39QPgIkC557jjjhAIkmj8uGOIQZCMBmzRPc2P7/lem+o3XrmZLEYFy fhoZWCxPdI4BDCZ3A+MrS+9KZKVGynyRmttvYdMEiij0INpkZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP31qaN/LnJOj2kZ2C4tHDWzwhciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk5ZjQ3NDctZDUyZC0z ZGE5LTkzZjktMDRjODJlN2RiNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDzTTucxNIA/PkZUUTnKhYNQx0lyt34XwrJCg17ENqz/d76t87Z4cW+ ZWqH47En5ozH89wAa9Ixdlg98Yac7sN3d2+mlbN67HCT0/kcBxpol6JTD4+Gzma8 U5CIie53atnkbya9LcXCNhVV1kAYcL1yvyNQba3PUN+5d+o/LEUYmJY73H7IDg/2 k/s0v5YZRZ9/Z88bU+e4WsW2vBWDoTMR3o0jCz3OBOWdYeE726r9HhzY0uS3ioAM 3mNbX+jvfkFy/wA/B6UJ4ZlSSS1m7qEh5kT4LNoauqlW+7H+2S4lrCMPubKEfCD8 gTmRNrawIsUhDLBzAPSnLoF5kaXwkyw= -----END CERTIFICATE-----Generated at Tue Oct 21 19:24:23 2025 by rpki-client