$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ba339a0-2afe-3f1d-a793-7c25cc6ed0f3.roa File: 3ba339a0-2afe-3f1d-a793-7c25cc6ed0f3.roa (raw, json) Hash identifier: dItpUtF8YzAuk8D73Wz+xsDQxN2LMDbZb6TloEjzRkk= Subject key identifier: 87:0B:0E:69:DE:55:67:79:FF:88:9E:F7:5C:CC:04:90:8A:2A:DA:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA63AF8C425D186A401500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ba339a0-2afe-3f1d-a793-7c25cc6ed0f3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.46.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:63:af:8c:42:5d:18:6a:40:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1f591d68-5e5d-428c-a727-056404656076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:0a:dd:cc:22:d4:62:2b:ec:e7:d7:b4:c1: 95:56:36:76:25:55:1a:aa:41:b1:ca:2f:3a:74:e5: 6a:ed:5c:8a:ce:80:17:bd:00:59:80:af:79:b9:ac: 98:64:a1:b3:ba:10:27:ba:50:92:ea:5b:f0:95:d3: e7:88:b1:e0:ae:de:6c:2b:04:03:38:16:a7:d0:1a: 45:59:df:79:83:eb:82:6d:6d:4c:b7:a1:8b:df:37: 43:eb:20:22:e2:ac:e3:f1:da:0a:2b:89:ad:dd:07: 45:ee:a9:03:9e:a4:04:a5:a7:33:b5:05:e9:5a:18: 35:18:f0:96:08:4f:14:03:99:bb:54:dd:28:31:4c: e5:ef:f0:cf:93:d3:a5:a3:8a:8c:5b:3f:ff:8b:25: 80:44:c9:bb:07:27:b5:7a:d8:f0:49:67:58:47:1f: 05:a1:1e:07:31:da:d1:4d:0f:49:e0:41:66:71:df: a2:fd:84:20:2e:8d:75:81:4f:4f:03:10:c2:1f:de: 31:ee:6e:10:6f:78:65:57:7b:8d:e3:11:1e:63:55: 3a:06:6d:37:a5:3d:36:43:93:2c:85:d4:9d:93:b8: d9:55:40:bb:62:99:d4:34:10:9b:0e:8d:bd:de:c1: fa:23:b3:38:e9:33:ca:51:6b:b0:14:68:14:81:be: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0B:0E:69:DE:55:67:79:FF:88:9E:F7:5C:CC:04:90:8A:2A:DA:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ba339a0-2afe-3f1d-a793-7c25cc6ed0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.46.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4d:3a:52:7e:07:5e:ec:a9:71:35:73:29:c0:a8:6b:dd:1d: 0c:25:09:45:35:f8:0a:b3:24:72:65:5b:54:4f:8b:78:7e:69: 29:4a:18:58:90:76:5e:6f:ec:93:4c:bd:d1:4f:5f:cd:92:5d: 7a:5c:f7:85:30:6c:35:f5:86:e6:68:36:6d:a2:0f:98:92:b3: 32:39:e5:01:95:45:9c:c9:30:89:86:19:66:b1:3b:5c:fb:34: 68:4a:e4:fe:bd:73:dc:15:f3:7a:86:78:e1:75:e9:14:96:ce: aa:96:89:57:4c:14:02:2d:25:ea:ae:8e:79:98:11:1a:0c:4f: c4:9c:f3:dc:d3:f4:e4:76:26:41:69:4d:4d:b1:83:3f:cb:a5: 0c:eb:bf:7a:36:87:1f:a8:fa:f8:bd:c3:48:51:a7:d7:00:16: 70:b1:8a:56:f6:18:5f:c5:04:be:3b:f6:4d:99:63:9d:f0:3c: cd:6a:d4:b1:60:ff:d0:0a:6f:51:90:6f:12:1b:51:9d:30:1d: 43:f1:08:aa:0a:8d:9d:fb:61:b7:44:d6:f9:55:9a:98:fe:23: ce:18:2b:ab:8e:c1:e1:d6:da:9b:41:9c:ab:33:36:f0:3d:19: 35:25:f3:f4:40:7a:41:c0:1e:54:9d:ff:88:65:fd:dd:f5:ea: e5:7f:e6:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqmOvjEJdGGpAFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWY1OTFkNjgtNWU1ZC00MjhjLWE3MjctMDU2NDA0NjU2MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIwK3cwi1GIr7OfXtMGVVjZ2JVUaqkGxyi86 dOVq7VyKzoAXvQBZgK95uayYZKGzuhAnulCS6lvwldPniLHgrt5sKwQDOBan0BpF Wd95g+uCbW1Mt6GL3zdD6yAi4qzj8doKK4mt3QdF7qkDnqQEpacztQXpWhg1GPCW CE8UA5m7VN0oMUzl7/DPk9Olo4qMWz//iyWARMm7Bye1etjwSWdYRx8FoR4HMdrR TQ9J4EFmcd+i/YQgLo11gU9PAxDCH94x7m4Qb3hlV3uN4xEeY1U6Bm03pT02Q5Ms hdSdk7jZVUC7YpnUNBCbDo293sH6I7M46TPKUWuwFGgUgb5t5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcLDmneVWd5/4ie91zMBJCKKtrkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JhMzM5YTAtMmFmZS0z ZjFkLWE3OTMtN2MyNWNjNmVkMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9NOlJ+B17sqXE1cynAqGvdHQwlCUU1+AqzJHJlW1RPi3h+aSlKGFiQ dl5v7JNMvdFPX82SXXpc94UwbDX1huZoNm2iD5iSszI55QGVRZzJMImGGWaxO1z7 NGhK5P69c9wV83qGeOF16RSWzqqWiVdMFAItJequjnmYERoMT8Sc89zT9OR2JkFp TU2xgz/LpQzrv3o2hx+o+vi9w0hRp9cAFnCxilb2GF/FBL479k2ZY53wPM1q1LFg /9AKb1GQbxIbUZ0wHUPxCKoKjZ37YbdE1vlVmpj+I84YK6uOweHW2ptBnKszNvA9 GTUl8/RAekHAHlSd/4hl/d316uV/5i0= -----END CERTIFICATE-----Generated at Tue Oct 21 19:23:23 2025 by rpki-client