$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4acb0da6-8ab2-3c12-b41a-0579dc028511.roa File: 4acb0da6-8ab2-3c12-b41a-0579dc028511.roa (raw, json) Hash identifier: x6jU+34aqjXlvall+Ro1zhlVhfvrIY+B4p+cVJXLsks= Subject key identifier: DF:99:4A:EF:05:CE:F3:B0:D9:70:B0:6F:74:E6:EF:63:72:5E:09:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8B14048C04010010B3280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4acb0da6-8ab2-3c12-b41a-0579dc028511.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.36.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:b1:40:48:c0:40:10:01:0b:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d02bc3a9-3ca4-46a0-9740-b1b57a25eb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:31:7b:9f:bc:07:00:f7:f5:c0:41:b2:3a: 31:50:5c:ca:ca:08:4f:84:87:4a:7b:1c:2d:09:71: ae:ba:ee:96:35:c8:a0:43:a0:ef:cd:89:81:b2:18: 0d:3e:76:1b:61:67:3d:09:dc:49:be:0f:e6:9c:8e: 32:8a:07:04:8f:c2:20:15:70:64:5f:8e:72:c9:94: d8:f7:d6:e5:1d:ee:26:82:0e:f5:7a:4e:f4:8b:31: 77:4f:3e:ec:b5:3a:59:19:e6:b1:2c:54:94:49:f4: 2e:71:97:f1:94:49:54:dd:fc:6e:42:a9:da:6a:71: 41:c5:de:33:56:79:17:78:ff:b4:89:35:21:4e:39: 63:82:32:66:d8:10:4f:a3:a8:f5:d1:ef:20:30:50: 8b:82:55:c1:4c:aa:99:f3:c1:bb:ec:49:e8:ee:10: af:1d:98:b0:ef:a5:c7:1d:d4:a2:a4:6c:09:6f:47: f5:51:ba:8f:20:2c:95:d5:9f:ab:88:cf:4c:da:07: 5b:e9:3e:b5:05:23:42:8b:3f:86:73:d0:17:67:aa: 4a:42:ec:36:b7:18:48:10:36:7e:2c:69:44:f4:ea: 01:06:ac:58:3f:db:73:1c:52:be:fb:7d:93:7b:99: 8f:44:0f:91:34:5b:d2:3b:79:dc:ce:f2:0b:99:5c: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:99:4A:EF:05:CE:F3:B0:D9:70:B0:6F:74:E6:EF:63:72:5E:09:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4acb0da6-8ab2-3c12-b41a-0579dc028511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:6a:90:6e:f3:99:d5:fe:ba:88:ff:c0:b6:2f:f3:27:82:6f: e7:c5:06:e1:6b:63:c7:5c:2e:81:c1:34:4a:aa:77:12:a5:8d: 9f:57:af:3f:10:b5:3d:e1:34:29:a1:c7:3f:9e:df:50:bd:64: cd:34:01:d5:03:e3:76:a3:36:ae:d2:6a:2a:71:c3:21:d7:d9: 0a:ce:67:c9:31:bd:eb:1d:21:82:43:0a:d6:cc:b5:f6:15:25: 48:ab:c1:f4:c8:9e:c8:41:a4:6e:1d:92:d4:68:64:08:f5:f2: 7e:90:00:a6:bb:a2:60:43:9c:2b:aa:1d:e8:8d:96:74:4e:80: 23:22:f5:17:50:4b:93:c0:98:2b:d4:bc:f4:17:bd:c2:79:93: a3:37:d7:bb:f3:1c:53:bb:b8:b0:f0:20:1f:75:d4:45:c4:95: 66:e4:70:54:5c:30:52:c2:37:cf:76:56:34:98:fd:b9:d5:bc: 5e:dd:6f:dc:61:ce:24:bf:01:5a:70:7a:fb:e2:3e:33:53:ee: 82:d9:66:c0:e2:df:2f:f8:01:e3:7b:dc:06:72:da:ee:1c:09: 0c:a2:29:e0:32:19:f4:77:c1:49:77:df:63:c4:48:88:65:db: 23:ce:66:18:cf:08:a9:c5:42:be:12:09:85:46:46:a2:e6:92: cf:a2:2f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLFASMBAEAELMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDAyYmMzYTktM2NhNC00NmEwLTk3NDAtYjFiNTdhMjVlYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBExe5+8BwD39cBBsjoxUFzKyghPhIdKexwt CXGuuu6WNcigQ6DvzYmBshgNPnYbYWc9CdxJvg/mnI4yigcEj8IgFXBkX45yyZTY 99blHe4mgg71ek70izF3Tz7stTpZGeaxLFSUSfQucZfxlElU3fxuQqnaanFBxd4z VnkXeP+0iTUhTjljgjJm2BBPo6j10e8gMFCLglXBTKqZ88G77Eno7hCvHZiw76XH HdSipGwJb0f1UbqPICyV1Z+riM9M2gdb6T61BSNCiz+Gc9AXZ6pKQuw2txhIEDZ+ LGlE9OoBBqxYP9tzHFK++32Te5mPRA+RNFvSO3nczvILmVwtfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+ZSu8FzvOw2XCwb3Tm72NyXglUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFjYjBkYTYtOGFiMi0z YzEyLWI0MWEtMDU3OWRjMDI4NTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCS6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJqkG7zmdX+uoj/wLYv8yeCb+fFBuFrY8dcLoHBNEqqdxKljZ9Xrz8Q tT3hNCmhxz+e31C9ZM00AdUD43ajNq7SaipxwyHX2QrOZ8kxvesdIYJDCtbMtfYV JUirwfTInshBpG4dktRoZAj18n6QAKa7omBDnCuqHeiNlnROgCMi9RdQS5PAmCvU vPQXvcJ5k6M317vzHFO7uLDwIB911EXElWbkcFRcMFLCN892VjSY/bnVvF7db9xh ziS/AVpwevviPjNT7oLZZsDi3y/4AeN73AZy2u4cCQyiKeAyGfR3wUl332PESIhl 2yPOZhjPCKnFQr4SCYVGRqLmks+iL3E= -----END CERTIFICATE-----Generated at Tue Oct 21 22:10:53 2025 by rpki-client