$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5483fe01-9a53-36e1-b25c-14a220769f07.roa File: 5483fe01-9a53-36e1-b25c-14a220769f07.roa (raw, json) Hash identifier: xLyvnViPsVXKn7TEs4QM5K9nxasVULZjPJD+pT0fWpk= Subject key identifier: 12:F9:8F:D7:8E:5F:D6:F5:E3:17:73:39:92:76:55:33:54:61:9D:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8CE04AD7C5FEE7F8E5E30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5483fe01-9a53-36e1-b25c-14a220769f07.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.56.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:ce:04:ad:7c:5f:ee:7f:8e:5e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=6b0c622b-b610-461e-b196-0498ad6d190d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:d9:1f:ee:3f:b1:13:bb:e7:80:62:03:8c: 02:de:b9:3c:07:44:84:22:1a:2e:55:a0:a9:c4:88: b0:f2:e3:38:8f:e2:0e:bc:a8:a3:8c:bf:21:f9:d3: 01:39:89:09:46:ed:78:7f:9b:89:1c:46:b7:21:d8: 69:8b:20:e2:83:a6:ec:f9:c0:ef:10:b0:55:31:9c: 59:7b:d5:87:38:03:a0:54:48:2e:7b:c6:65:dd:5b: 1a:b9:7b:f7:7e:7f:38:0f:6e:a2:28:46:ab:7d:7d: 01:ed:e9:3d:99:43:ba:42:e4:52:b6:89:be:4c:3c: d6:e5:54:29:6d:c1:22:c5:5a:9d:6a:a7:b1:bb:f3: 54:90:53:62:8d:40:98:94:c4:05:69:a6:42:bb:af: ee:7b:44:77:f8:47:6f:e9:aa:7e:8b:68:28:e7:86: 2e:76:bf:93:9d:cc:a1:11:56:2b:0b:65:b3:97:68: 7d:cc:b2:0f:d1:cc:b4:41:f6:81:7a:d7:7e:a5:25: 11:31:d7:45:7d:6e:bd:be:19:fd:65:ae:06:71:2b: dc:0a:c6:b0:0a:b2:c9:2d:85:5a:e3:6f:c4:57:a2: 7d:b5:55:fd:e3:15:2d:86:36:36:9b:d3:de:3e:7f: 12:d3:25:4b:49:98:e9:66:ae:a0:4b:6c:87:0d:fb: d0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F9:8F:D7:8E:5F:D6:F5:E3:17:73:39:92:76:55:33:54:61:9D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5483fe01-9a53-36e1-b25c-14a220769f07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:65:e8:a0:3e:78:a6:62:a5:45:13:b0:79:fe:65:d7:82:34: 68:13:7b:e8:18:8a:c7:46:a4:35:11:9e:31:ec:fb:f5:27:0a: 4c:4f:cb:e9:f2:9e:ef:68:1f:c8:c4:4e:28:c9:ae:b2:1f:b5: 2b:08:4b:d0:f6:02:72:78:ce:c0:fa:c3:42:27:52:31:01:d4: 7b:a9:fd:ef:fc:1c:e1:22:95:c1:70:1c:04:d5:07:cc:49:9c: ec:e2:45:8d:06:58:a6:4e:8b:fa:30:a7:ad:f2:84:81:08:3b: 9e:b1:1f:21:13:b0:b0:25:b6:57:a9:60:76:ea:d9:5d:20:99: 4f:4e:25:f2:b6:6a:e8:50:a7:22:56:f8:72:8d:fb:ba:18:28: de:e3:51:27:c2:72:10:e9:22:81:26:63:21:1c:39:e9:e1:b4: e1:48:f2:04:e7:77:78:4e:83:46:61:f7:0a:0a:22:03:0a:67: 21:46:ea:02:9b:fe:6c:6f:ef:1a:20:99:52:ae:15:20:d1:fa: 7d:1f:b2:1a:73:e6:92:a0:78:9b:f3:1e:9b:1b:ac:9b:3e:86: 97:85:05:ff:1c:66:12:a5:bc:e1:e5:e4:3b:0a:b4:88:fb:04: 99:45:6a:bd:90:42:fd:67:de:42:43:76:4d:5c:ff:31:18:7c: e3:dd:45:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqM4ErXxf7n+OXjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NmIwYzYyMmItYjYxMC00NjFlLWIxOTYtMDQ5OGFkNmQxOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRfZH+4/sRO754BiA4wC3rk8B0SEIhouVaCp xIiw8uM4j+IOvKijjL8h+dMBOYkJRu14f5uJHEa3IdhpiyDig6bs+cDvELBVMZxZ e9WHOAOgVEgue8Zl3VsauXv3fn84D26iKEarfX0B7ek9mUO6QuRStom+TDzW5VQp bcEixVqdaqexu/NUkFNijUCYlMQFaaZCu6/ue0R3+Edv6ap+i2go54Yudr+Tncyh EVYrC2Wzl2h9zLIP0cy0QfaBetd+pSURMddFfW69vhn9Za4GcSvcCsawCrLJLYVa 42/EV6J9tVX94xUthjY2m9PePn8S0yVLSZjpZq6gS2yHDfvQ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL5j9eOX9b14xdzOZJ2VTNUYZ3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQ4M2ZlMDEtOWE1My0z NmUxLWIyNWMtMTRhMjIwNzY5ZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDipMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANdl6KA+eKZipUUTsHn+ZdeCNGgTe+gYisdGpDURnjHs+/UnCkxPy+ny nu9oH8jETijJrrIftSsIS9D2AnJ4zsD6w0InUjEB1Hup/e/8HOEilcFwHATVB8xJ nOziRY0GWKZOi/owp63yhIEIO56xHyETsLAltlepYHbq2V0gmU9OJfK2auhQpyJW +HKN+7oYKN7jUSfCchDpIoEmYyEcOenhtOFI8gTnd3hOg0Zh9woKIgMKZyFG6gKb /mxv7xogmVKuFSDR+n0fshpz5pKgeJvzHpsbrJs+hpeFBf8cZhKlvOHl5DsKtIj7 BJlFar2QQv1n3kJDdk1c/zEYfOPdRdY= -----END CERTIFICATE-----Generated at Tue Oct 21 21:55:47 2025 by rpki-client