$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e71598-396c-349e-9eff-c99e1c5315ff.roa File: 43e71598-396c-349e-9eff-c99e1c5315ff.roa (raw, json) Hash identifier: gE/zDt63lzUpXkonR8bqHGxPzboPqw/g0nnTJTTSIJ4= Subject key identifier: 36:48:FF:F6:0B:35:2A:AA:6B:8F:84:6F:91:90:E7:13:AE:F3:2A:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C29816AE80E794868C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e71598-396c-349e-9eff-c99e1c5315ff.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.43.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c2:98:16:ae:80:e7:94:86:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8d598567-8af4-4b9a-8a24-f67bd7ac3e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:e9:06:2a:91:a2:63:0f:1d:54:72:20:1e: 3b:07:f8:cb:e2:56:b4:73:5d:82:ce:f8:e1:14:16: 77:b5:16:77:18:69:4e:2e:f2:6f:08:8c:b7:57:4a: 64:8b:a7:ea:52:ea:b5:ad:b4:74:c6:d0:4e:fd:97: a9:49:31:1b:47:ad:b9:c9:e7:9a:a1:c6:e8:7e:1a: dd:9b:18:28:00:d2:0d:67:7a:8c:ed:fc:9b:5e:aa: 37:a7:19:f2:c7:ce:cf:c5:94:36:0c:f7:f9:35:75: ac:af:2c:f8:e8:48:68:21:6a:ee:30:ad:28:d5:8a: 38:7e:3b:1a:a8:2a:c1:bf:49:c6:36:f4:74:5c:cf: a3:ea:3d:d0:a0:b3:d6:eb:ed:e0:f8:be:13:0f:50: 85:3c:ea:ac:9b:65:f4:22:9c:08:d2:60:1d:29:64: 0f:50:bb:c2:d1:06:20:49:c9:8e:fb:5d:d2:0c:2f: b9:70:cc:d9:c7:e5:99:db:6e:5e:b8:15:df:fc:e0: f9:72:13:01:5f:83:55:90:33:5d:06:7c:d8:e8:d3: 24:ab:cb:a2:d4:17:33:8f:02:86:1d:e0:9b:ef:3f: 15:5a:93:6e:2a:37:04:05:f2:fa:d0:5b:f8:60:9d: 1c:43:9b:0f:13:c7:82:f6:0a:51:d0:44:1c:d4:2d: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:48:FF:F6:0B:35:2A:AA:6B:8F:84:6F:91:90:E7:13:AE:F3:2A:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e71598-396c-349e-9eff-c99e1c5315ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:3b:e9:ac:2b:32:46:76:b8:0c:d4:5f:ed:76:58:85:20:f6: 78:ac:00:7d:61:41:d7:76:d0:a5:61:9b:26:7d:f2:d8:00:dd: 4f:64:0f:21:08:50:d5:e7:44:41:8c:ef:44:3b:7c:6e:0f:96: a1:ed:e2:00:ed:07:94:c8:fd:2a:bf:8c:6e:d0:23:32:be:a7: ad:31:9b:f8:7b:19:29:40:e6:57:70:56:66:05:f3:bb:60:b8: 47:17:40:20:2c:1f:64:7d:f4:63:ea:00:26:63:6e:ad:4f:b9: f6:4d:e1:52:d4:ed:7b:41:cc:ce:38:94:1a:3e:ad:c2:34:9d: 6d:1a:83:92:e0:9c:da:f7:3c:cc:05:56:b1:51:a7:80:31:d2: 74:54:36:e7:fc:e3:ea:2b:13:68:b1:d7:a2:cc:2f:36:b9:77: 17:8f:83:d1:a8:5a:15:2e:5b:e2:2e:72:84:a8:07:93:45:c0: 36:f8:d6:f6:77:02:89:d6:89:c2:f7:2b:8f:35:f0:0b:79:a2: 48:2e:2c:66:8e:b0:f4:50:8e:d9:18:e0:c6:f5:25:d0:54:a5: 7b:3b:b0:4c:03:d4:5c:c9:a1:b6:71:dd:f1:8a:05:02:0c:c8: 2a:8e:eb:b9:8b:df:4f:af:75:b0:ec:eb:ab:81:84:63:ac:be: 12:fc:d7:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMKYFq6A55SGjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGQ1OTg1NjctOGFmNC00YjlhLThhMjQtZjY3YmQ3YWMzZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolfpBiqRomMPHVRyIB47B/jL4la0c12Czvjh FBZ3tRZ3GGlOLvJvCIy3V0pki6fqUuq1rbR0xtBO/ZepSTEbR625yeeaocbofhrd mxgoANINZ3qM7fybXqo3pxnyx87PxZQ2DPf5NXWsryz46EhoIWruMK0o1Yo4fjsa qCrBv0nGNvR0XM+j6j3QoLPW6+3g+L4TD1CFPOqsm2X0IpwI0mAdKWQPULvC0QYg ScmO+13SDC+5cMzZx+WZ225euBXf/OD5chMBX4NVkDNdBnzY6NMkq8ui1BczjwKG HeCb7z8VWpNuKjcEBfL60Fv4YJ0cQ5sPE8eC9gpR0EQc1C3b3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZI//YLNSqqa4+Eb5GQ5xOu8yqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNlNzE1OTgtMzk2Yy0z NDllLTllZmYtYzk5ZTFjNTMxNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIs76awrMkZ2uAzUX+12WIUg9nisAH1hQdd20KVhmyZ98tgA3U9kDyEI UNXnREGM70Q7fG4PlqHt4gDtB5TI/Sq/jG7QIzK+p60xm/h7GSlA5ldwVmYF87tg uEcXQCAsH2R99GPqACZjbq1PufZN4VLU7XtBzM44lBo+rcI0nW0ag5LgnNr3PMwF VrFRp4Ax0nRUNuf84+orE2ix16LMLza5dxePg9GoWhUuW+IucoSoB5NFwDb41vZ3 AonWicL3K4818At5okguLGaOsPRQjtkY4Mb1JdBUpXs7sEwD1FzJobZx3fGKBQIM yCqO67mL30+vdbDs66uBhGOsvhL81wg= -----END CERTIFICATE-----Generated at Tue Oct 21 21:39:42 2025 by rpki-client