$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5666b971-71c9-34e1-92a4-2044883adbc6.roa File: 5666b971-71c9-34e1-92a4-2044883adbc6.roa (raw, json) Hash identifier: wefc/8cYJGF+ZYlPsCkg2wNyhpRazdVxa+FrVD7HzK0= Subject key identifier: FF:DB:D5:FC:9C:60:0A:34:0F:64:F0:57:6F:9A:BD:EC:87:45:03:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8B7CE9A64B745650A4100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5666b971-71c9-34e1-92a4-2044883adbc6.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.37.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:b7:ce:9a:64:b7:45:65:0a:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=eb4831ca-cfeb-42d3-bf38-e9dc43389640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:2a:6b:60:14:0b:c2:ac:28:bc:df:10:18: ca:cb:43:53:8e:4a:c8:6c:15:2d:67:0d:6f:39:b2: 5e:78:03:cf:cc:c1:66:82:0d:61:ea:07:f3:06:06: a5:d6:d1:d2:d4:16:9a:15:a1:32:2e:84:d6:16:e3: d8:8c:f2:cc:d6:18:5a:b1:74:f3:8e:46:50:50:a9: 35:5c:d3:30:ed:c1:98:85:ca:10:0d:fb:ba:7f:f2: 1e:ab:b5:64:4b:84:a1:09:a0:82:d6:f9:58:76:9b: eb:cf:1f:01:de:c0:e7:7c:ec:5e:83:b7:45:55:1d: e7:de:a4:e5:03:91:da:e0:e1:74:3d:45:eb:57:f1: e1:e0:4f:c9:35:ce:88:ae:89:89:dd:d8:bd:f5:89: 48:b5:21:a7:fe:11:b9:99:c9:1e:fb:f9:dc:47:a7: 2d:02:95:37:c6:77:97:86:95:e0:cd:dc:b2:e1:6f: eb:45:47:f0:a7:0f:da:a3:61:53:33:c0:24:51:99: 8c:c1:0a:ec:71:59:10:b3:c9:73:e3:62:30:d3:9b: d2:b5:ef:41:58:db:e7:c4:88:f6:94:28:8b:94:fa: fb:2c:0c:a3:86:07:5e:ef:de:5e:78:a8:50:6d:2d: be:9d:58:ec:2e:aa:c0:86:c8:d8:21:9a:52:e5:ba: 7f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DB:D5:FC:9C:60:0A:34:0F:64:F0:57:6F:9A:BD:EC:87:45:03:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5666b971-71c9-34e1-92a4-2044883adbc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a0:c5:c4:7c:72:e4:45:00:e3:00:ca:b9:6b:d7:eb:47:de: 89:3d:d4:f5:2b:60:45:36:d2:12:59:98:56:3f:12:bb:70:10: 55:65:db:80:4b:a1:df:fe:1c:a3:b7:23:83:92:d9:62:33:ee: fe:15:2b:5c:7b:2f:d9:37:00:97:14:2a:4f:ef:01:39:d9:ff: e1:b7:b5:84:47:7a:3c:08:e6:b9:82:b6:f6:78:9e:c6:29:c3: a5:01:d7:92:2a:7e:7a:d9:80:9f:0b:3a:8e:8c:e1:4b:0d:70: c6:4b:80:89:94:40:84:f1:06:ee:66:46:67:da:42:99:00:3a: 32:bb:0d:af:26:d0:26:fc:19:9a:55:3a:b8:57:31:f0:c1:57: b1:70:cf:79:c4:28:51:d7:6e:25:6b:b9:22:92:3d:6c:51:ba: 29:b8:9f:d7:76:0a:55:cf:85:c2:8a:8a:57:28:aa:62:fb:89: 14:2f:36:e8:69:ff:83:81:06:2b:e6:ba:87:1d:01:4c:84:7a: c9:61:ea:26:d0:13:3a:f6:ef:a3:f5:9b:e6:c8:2d:bb:54:4e: db:2e:48:5a:b9:cc:aa:82:37:30:52:d4:b6:73:b4:09:66:12: 50:5b:de:fa:40:99:eb:47:12:a9:39:d2:79:58:f1:b4:2f:84: 9a:e0:0c:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLfOmmS3RWUKQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZWI0ODMxY2EtY2ZlYi00MmQzLWJmMzgtZTlkYzQzMzg5NjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Uqa2AUC8KsKLzfEBjKy0NTjkrIbBUtZw1v ObJeeAPPzMFmgg1h6gfzBgal1tHS1BaaFaEyLoTWFuPYjPLM1hhasXTzjkZQUKk1 XNMw7cGYhcoQDfu6f/Ieq7VkS4ShCaCC1vlYdpvrzx8B3sDnfOxeg7dFVR3n3qTl A5Ha4OF0PUXrV/Hh4E/JNc6IromJ3di99YlItSGn/hG5mcke+/ncR6ctApU3xneX hpXgzdyy4W/rRUfwpw/ao2FTM8AkUZmMwQrscVkQs8lz42Iw05vSte9BWNvnxIj2 lCiLlPr7LAyjhgde795eeKhQbS2+nVjsLqrAhsjYIZpS5bp/rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/b1fycYAo0D2TwV2+aveyHRQN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTY2NmI5NzEtNzFjOS0z NGUxLTkyYTQtMjA0NDg4M2FkYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmgxcR8cuRFAOMAyrlr1+tH3ok91PUrYEU20hJZmFY/ErtwEFVl24BL od/+HKO3I4OS2WIz7v4VK1x7L9k3AJcUKk/vATnZ/+G3tYRHejwI5rmCtvZ4nsYp w6UB15IqfnrZgJ8LOo6M4UsNcMZLgImUQITxBu5mRmfaQpkAOjK7Da8m0Cb8GZpV OrhXMfDBV7Fwz3nEKFHXbiVruSKSPWxRuim4n9d2ClXPhcKKilcoqmL7iRQvNuhp /4OBBivmuocdAUyEeslh6ibQEzr276P1m+bILbtUTtsuSFq5zKqCNzBS1LZztAlm ElBb3vpAmetHEqk50nlY8bQvhJrgDDw= -----END CERTIFICATE-----Generated at Tue Oct 21 19:29:21 2025 by rpki-client