$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa File: 3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa (raw, json) Hash identifier: jPm8T0GQCI71fib/3aq/wRwv9K0OSngnv2J8TayKWPg= Subject key identifier: 34:58:D3:E2:2B:1F:29:42:6B:B8:67:5C:E9:7B:81:5B:02:03:3E:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA5D5C50A4F64029C76300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.41.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:5d:5c:50:a4:f6:40:29:c7:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=16bff907-3a58-4089-9bc8-9bc7082413b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:57:97:b7:4c:d3:b2:e9:1a:49:67:b5:1d: 8f:4b:ba:4d:3d:12:90:81:3c:06:41:ec:3b:4e:2a: 8d:b2:a9:17:fc:f2:7f:2b:90:3c:4f:2f:b3:8d:f3: 74:5d:8e:96:79:85:4a:a5:91:fb:0c:1c:38:b4:ae: 59:89:42:7c:3a:0b:fb:bf:c6:73:10:af:05:a1:b1: 61:f8:1d:ac:e7:6e:6c:d1:9a:d8:be:1f:6a:f3:3d: dc:5c:d7:53:5e:ea:db:ce:f5:c9:db:0f:1b:1b:a0: de:06:2a:d6:42:ae:d1:06:1d:f3:7f:61:bd:3b:6c: be:0c:32:94:fd:ca:38:b5:f9:ea:83:23:cc:ee:d2: eb:da:47:e1:45:48:03:32:1d:e6:f0:e2:ca:5d:f6: 41:40:6a:32:ab:42:03:6a:06:8f:5b:fd:f7:52:97: 00:cc:15:1b:9a:17:1c:90:c0:7f:42:90:90:f5:d6: 13:86:4d:2c:1b:c4:a1:48:87:ec:fe:a8:7a:10:3c: e9:92:4d:47:ed:4f:26:f9:f1:dd:5b:bc:8d:99:79: 34:5b:c2:5a:0b:9d:59:ba:db:61:ed:4c:1e:db:53: b7:e6:07:0e:a1:6b:cd:62:f7:b9:8f:06:76:18:49: 0a:42:b6:3b:8e:ab:c3:84:e2:6a:14:2a:7a:8b:0b: bb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:58:D3:E2:2B:1F:29:42:6B:B8:67:5C:E9:7B:81:5B:02:03:3E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5d:34:c8:82:93:ce:71:44:87:64:0d:1c:f8:76:b0:59:90: 11:ba:e5:0d:30:46:60:43:9b:97:67:3f:ab:f1:9e:64:d8:13: 52:34:00:61:48:36:5d:1f:3c:13:13:f8:17:15:cd:b2:47:49: d6:d4:c0:6b:cc:e3:08:e5:78:c9:27:03:a6:3a:5c:68:bd:b9: 9d:6b:10:77:a7:bb:ab:50:5f:6b:d0:34:6d:94:ab:22:34:96: 6f:b9:6b:aa:73:0a:7f:cc:be:0d:30:61:58:72:53:ce:5a:1e: 80:56:a0:8c:2b:14:73:b1:58:c5:24:f6:02:4b:41:77:6d:ec: f6:33:a5:8b:c2:1d:26:c4:0f:e1:62:75:03:5d:d8:19:69:dd: 0a:43:7b:50:62:42:40:1d:d6:4e:43:76:26:70:f1:15:1e:8e: b8:e8:f7:aa:2c:19:ee:95:f7:ab:cb:a8:98:ea:f1:67:49:11: 38:e3:c4:95:89:71:2a:51:00:c8:e6:2e:c3:3c:dd:19:99:57: b9:ee:98:24:25:30:7f:08:88:1b:86:97:1a:61:ac:5b:ba:9a: 4a:70:d2:51:59:83:a6:07:db:0a:bb:fb:b6:1c:f5:f3:a7:22: fc:0d:35:da:34:ab:80:74:1c:6f:ec:a7:aa:e1:5f:be:81:6d: c9:b3:1c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVql1cUKT2QCnHYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTZiZmY5MDctM2E1OC00MDg5LTliYzgtOWJjNzA4MjQxM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw9Xl7dM07LpGklntR2PS7pNPRKQgTwGQew7 TiqNsqkX/PJ/K5A8Ty+zjfN0XY6WeYVKpZH7DBw4tK5ZiUJ8Ogv7v8ZzEK8FobFh +B2s525s0ZrYvh9q8z3cXNdTXurbzvXJ2w8bG6DeBirWQq7RBh3zf2G9O2y+DDKU /co4tfnqgyPM7tLr2kfhRUgDMh3m8OLKXfZBQGoyq0IDagaPW/33UpcAzBUbmhcc kMB/QpCQ9dYThk0sG8ShSIfs/qh6EDzpkk1H7U8m+fHdW7yNmXk0W8JaC51Zutth 7Uwe21O35gcOoWvNYve5jwZ2GEkKQrY7jqvDhOJqFCp6iwu7dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRY0+IrHylCa7hnXOl7gVsCAz5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y3YmI3OTAtOTJhNy0z ZThjLWE1MWMtZjgxMzdkMThmMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1dNMiCk85xRIdkDRz4drBZkBG65Q0wRmBDm5dnP6vxnmTYE1I0AGFI Nl0fPBMT+BcVzbJHSdbUwGvM4wjleMknA6Y6XGi9uZ1rEHenu6tQX2vQNG2UqyI0 lm+5a6pzCn/Mvg0wYVhyU85aHoBWoIwrFHOxWMUk9gJLQXdt7PYzpYvCHSbED+Fi dQNd2Blp3QpDe1BiQkAd1k5DdiZw8RUejrjo96osGe6V96vLqJjq8WdJETjjxJWJ cSpRAMjmLsM83RmZV7numCQlMH8IiBuGlxphrFu6mkpw0lFZg6YH2wq7+7Yc9fOn IvwNNdo0q4B0HG/sp6rhX76BbcmzHBo= -----END CERTIFICATE-----Generated at Tue Oct 21 21:51:20 2025 by rpki-client