$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ea2cc38-5605-387b-a46b-eaf7f568bd9d.roa File: 3ea2cc38-5605-387b-a46b-eaf7f568bd9d.roa (raw, json) Hash identifier: 3Ylr95dEaO+XJfaj6Vx+gpHai8/wj9RF/mNkh/hfi38= Subject key identifier: 00:9E:C2:BB:BC:D4:CF:CB:F5:43:9F:15:0A:7F:30:A1:19:20:A1:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8D2A27BF8AB04FB9F1280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ea2cc38-5605-387b-a46b-eaf7f568bd9d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.60.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:d2:a2:7b:f8:ab:04:fb:9f:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e7e0f39a-0a09-4fda-97e7-e97d91a9fa11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:23:f5:0f:04:b6:ab:f6:d7:e4:24:54:be:63: d1:a8:8d:c5:32:e9:7d:12:ad:56:af:f7:45:0b:69: fe:b8:2c:3f:d5:57:d4:91:96:87:ca:9c:07:6f:b4: 60:2e:ce:26:bf:08:1f:11:a3:e2:aa:f7:26:1a:fe: bb:8c:31:9b:e0:ee:bf:d5:c9:eb:0b:c0:11:af:68: db:ac:a3:da:08:99:a7:34:d5:68:23:03:15:c0:3c: e7:73:3c:2a:09:3a:cc:ec:2a:2e:75:70:10:bc:56: 8b:02:af:a6:11:35:93:d8:ae:33:d7:73:a5:27:29: 25:b7:20:ed:5b:54:b7:48:2d:39:4f:2c:19:19:0b: 41:3f:7f:dd:9a:a9:82:6b:5f:39:79:1b:f7:5c:2f: c7:7a:6e:67:a2:46:05:77:c9:29:33:23:9a:0c:37: aa:bd:0f:90:8d:a2:55:43:a4:d9:3b:18:1f:2a:1d: c0:4f:43:34:cb:d0:0c:bf:c9:7e:b5:ff:cd:e6:37: f7:9b:6c:a3:fc:78:24:06:f7:b4:ef:16:68:ef:73: db:29:d8:14:ef:ca:9f:4d:63:bb:5b:2c:a1:99:c1: 3d:39:8d:be:bb:a3:df:b1:5f:aa:e1:c4:43:5d:cb: 2a:95:ed:de:b3:01:de:4b:30:48:2c:df:a2:4c:d6: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9E:C2:BB:BC:D4:CF:CB:F5:43:9F:15:0A:7F:30:A1:19:20:A1:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ea2cc38-5605-387b-a46b-eaf7f568bd9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:92:67:67:98:ac:ef:64:bc:79:2d:b2:b0:23:de:03:bb:fc: a1:b6:a7:7a:87:cd:ff:94:61:ac:b6:bc:05:29:6f:cc:67:a3: 98:05:c3:af:7f:8d:34:df:36:06:2d:bc:31:26:7d:a7:e4:ab: 14:9a:35:c4:68:27:21:36:10:f3:ac:7b:c5:55:a9:63:70:c4: 00:ae:98:13:62:c4:1c:d6:36:cd:9d:5e:3d:91:73:9e:17:ed: 00:72:e4:47:4a:05:a1:bf:54:17:ad:5d:01:36:1d:2f:1f:c0: 0a:e8:50:63:04:af:de:08:c5:ad:51:53:fa:83:c3:8b:a4:1f: 36:e9:35:0b:3a:b4:6d:7b:83:af:2b:14:63:62:58:20:c8:9e: 3f:e0:38:eb:75:7e:09:4c:91:6b:dc:cf:6a:cf:2e:b1:bd:b8: df:73:2a:0f:16:11:8c:2e:c9:de:5c:5b:a3:40:a5:05:4e:e6: 11:e9:d6:4d:fa:c8:67:07:6f:67:4e:ae:41:79:20:70:47:e9: c8:5f:e7:f9:9d:40:35:79:c3:14:33:af:79:e6:d2:77:3f:00: 4c:33:5b:7b:5e:1e:89:f7:58:2d:0a:fd:51:eb:88:4c:05:5a: d2:4d:31:ea:2d:3a:da:97:42:5f:ac:18:1d:8b:b9:af:6e:e7: 95:73:ff:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqNKie/irBPufEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTdlMGYzOWEtMGEwOS00ZmRhLTk3ZTctZTk3ZDkxYTlmYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CP1DwS2q/bX5CRUvmPRqI3FMul9Eq1Wr/dF C2n+uCw/1VfUkZaHypwHb7RgLs4mvwgfEaPiqvcmGv67jDGb4O6/1cnrC8ARr2jb rKPaCJmnNNVoIwMVwDznczwqCTrM7CoudXAQvFaLAq+mETWT2K4z13OlJykltyDt W1S3SC05TywZGQtBP3/dmqmCa185eRv3XC/Hem5nokYFd8kpMyOaDDeqvQ+QjaJV Q6TZOxgfKh3AT0M0y9AMv8l+tf/N5jf3m2yj/HgkBve07xZo73PbKdgU78qfTWO7 WyyhmcE9OY2+u6PfsV+q4cRDXcsqle3eswHeSzBILN+iTNZtVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACewru81M/L9UOfFQp/MKEZIKHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2VhMmNjMzgtNTYwNS0z ODdiLWE0NmItZWFmN2Y1NjhiZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDyeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECSZ2eYrO9kvHktsrAj3gO7/KG2p3qHzf+UYay2vAUpb8xno5gFw69/ jTTfNgYtvDEmfafkqxSaNcRoJyE2EPOse8VVqWNwxACumBNixBzWNs2dXj2Rc54X 7QBy5EdKBaG/VBetXQE2HS8fwAroUGMEr94Ixa1RU/qDw4ukHzbpNQs6tG17g68r FGNiWCDInj/gOOt1fglMkWvcz2rPLrG9uN9zKg8WEYwuyd5cW6NApQVO5hHp1k36 yGcHb2dOrkF5IHBH6chf5/mdQDV5wxQzr3nm0nc/AEwzW3teHon3WC0K/VHriEwF WtJNMeotOtqXQl+sGB2Lua9u55Vz/9U= -----END CERTIFICATE-----Generated at Tue Oct 21 19:17:11 2025 by rpki-client