$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48968993-fb21-362a-a7ee-b7a23f0dff24.roa File: 48968993-fb21-362a-a7ee-b7a23f0dff24.roa (raw, json) Hash identifier: 4QZImaUBfHXbYepC9IiGHeDqDgu8HzmTN6OUrYTaw90= Subject key identifier: 9F:A8:F2:85:2E:80:21:61:69:74:5B:EE:AB:F6:70:83:46:EC:BE:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C22BA6754FF9A9ACDC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48968993-fb21-362a-a7ee-b7a23f0dff24.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.43.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c2:2b:a6:75:4f:f9:a9:ac:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4d9f9765-de7b-4944-b1e3-7a42f39235e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:19:d6:89:c4:96:7e:f1:e0:c5:e6:ea:65: 12:75:e3:19:eb:82:15:2f:65:84:f6:5c:d9:49:54: 6f:1a:38:b0:41:36:17:84:33:66:87:82:15:29:c6: 79:b6:f0:e8:0b:2f:92:e3:11:74:31:19:3d:7a:c2: 90:99:21:c5:7b:92:ea:ce:1e:91:62:8c:7a:4d:34: 8b:b7:c8:b6:cf:53:fe:1e:14:d2:66:54:bc:89:f2: 07:b5:ea:6e:d2:87:ed:de:31:c7:d5:92:84:e9:5c: f8:b0:3f:b4:cd:96:83:ae:43:ab:4c:f5:e4:9c:94: 62:c3:99:63:c7:ef:ee:4f:dd:5e:dd:80:1e:ba:45: 7e:fe:3d:2a:3d:3f:3e:a2:23:96:34:57:a7:df:25: b8:e4:db:a4:7d:95:cf:02:f2:bf:0c:b5:bb:4d:2b: 1f:0a:86:46:13:99:b2:21:73:19:09:91:b8:95:7f: 53:8a:19:dc:df:5c:f2:95:9a:8c:20:32:00:64:0b: 6b:05:16:f4:3a:70:cd:69:76:aa:7d:16:42:bd:61: e4:b6:65:cd:4c:cb:a4:3a:58:4f:2a:9f:e3:d1:0c: be:9d:6a:f6:6b:91:0b:3a:0e:63:86:29:91:b8:2d: 18:72:e2:da:56:da:82:26:69:2c:71:ac:8f:f9:fc: 90:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A8:F2:85:2E:80:21:61:69:74:5B:EE:AB:F6:70:83:46:EC:BE:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48968993-fb21-362a-a7ee-b7a23f0dff24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:52:f4:a5:42:b1:1a:6b:cc:09:fa:98:c5:87:63:e0:55:ab: 2d:e1:d9:bf:1e:17:94:49:df:82:01:24:9d:d9:77:32:a6:2a: ba:6c:a1:6e:45:2b:fa:a9:5f:6d:5d:3e:f5:7e:92:ee:41:66: c5:8e:e4:82:3c:b8:dc:26:dd:ca:a1:b9:ef:4e:dc:f6:3a:56: d2:20:93:5d:03:c0:da:0c:83:73:7d:56:a5:b7:80:ea:d8:6d: 8b:0b:11:64:23:1b:17:ec:e8:b6:5e:dc:64:ff:c3:73:6b:e6: 37:a7:40:89:8c:90:74:8c:a0:b7:16:01:bf:19:b4:17:ef:b3: 82:c3:c5:93:db:5f:ca:82:46:20:65:cd:68:7b:65:93:7e:a7: 03:4f:29:42:63:ea:69:d0:b0:fd:de:0e:16:0e:81:cd:e4:74: 8f:a9:32:fe:b2:c4:69:89:0c:41:da:c5:6c:8c:d6:f4:36:94: 59:8d:86:50:bc:4b:1c:87:37:72:6d:76:cb:a6:48:8e:fd:4b: 3a:73:4c:18:b5:e5:35:f5:f6:96:a0:01:80:ef:43:b4:ce:df: 49:b3:6e:a5:93:e4:4c:f5:07:6f:cd:54:28:5a:9a:90:0e:e0: eb:2f:b7:22:18:9b:f3:27:98:4c:29:48:e5:8c:ac:69:6d:36: ff:fe:40:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMIrpnVP+ams3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGQ5Zjk3NjUtZGU3Yi00OTQ0LWIxZTMtN2E0MmYzOTIzNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdAZ1onEln7x4MXm6mUSdeMZ64IVL2WE9lzZ SVRvGjiwQTYXhDNmh4IVKcZ5tvDoCy+S4xF0MRk9esKQmSHFe5Lqzh6RYox6TTSL t8i2z1P+HhTSZlS8ifIHtepu0oft3jHH1ZKE6Vz4sD+0zZaDrkOrTPXknJRiw5lj x+/uT91e3YAeukV+/j0qPT8+oiOWNFen3yW45NukfZXPAvK/DLW7TSsfCoZGE5my IXMZCZG4lX9Tihnc31zylZqMIDIAZAtrBRb0OnDNaXaqfRZCvWHktmXNTMukOlhP Kp/j0Qy+nWr2a5ELOg5jhimRuC0YcuLaVtqCJmkscayP+fyQAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+o8oUugCFhaXRb7qv2cING7L7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg5Njg5OTMtZmIyMS0z NjJhLWE3ZWUtYjdhMjNmMGRmZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRS9KVCsRprzAn6mMWHY+BVqy3h2b8eF5RJ34IBJJ3ZdzKmKrpsoW5F K/qpX21dPvV+ku5BZsWO5II8uNwm3cqhue9O3PY6VtIgk10DwNoMg3N9VqW3gOrY bYsLEWQjGxfs6LZe3GT/w3Nr5jenQImMkHSMoLcWAb8ZtBfvs4LDxZPbX8qCRiBl zWh7ZZN+pwNPKUJj6mnQsP3eDhYOgc3kdI+pMv6yxGmJDEHaxWyM1vQ2lFmNhlC8 SxyHN3JtdsumSI79SzpzTBi15TX19pagAYDvQ7TO30mzbqWT5Ez1B2/NVChampAO 4OsvtyIYm/MnmEwpSOWMrGltNv/+QD8= -----END CERTIFICATE-----Generated at Tue Oct 21 21:57:16 2025 by rpki-client