$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bddd35c-b414-3df5-a1d9-1713bcf40ae1.roa File: 5bddd35c-b414-3df5-a1d9-1713bcf40ae1.roa (raw, json) Hash identifier: zPjTJII9L4/5TexWelW/I/oAmaFEnu6IyZuf2u5i4Y0= Subject key identifier: A7:EA:03:0F:1C:A0:61:C1:F7:35:9B:F7:6F:ED:D0:D0:C9:B8:00:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C471522C92ECBD5E6F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bddd35c-b414-3df5-a1d9-1713bcf40ae1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.48.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c4:71:52:2c:92:ec:bd:5e:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=bdb4791c-d548-44b2-a774-47d2dbfab860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:5b:d7:50:b3:09:d8:87:d7:7a:83:ea:c2: 35:24:4c:b5:9b:56:14:20:fa:fc:e4:17:a1:b8:7e: 9d:42:f2:2d:56:ed:7b:ed:66:13:e1:43:08:e2:34: 49:29:78:7b:fa:09:ae:56:30:8b:2d:8f:d8:b0:65: 43:3f:35:98:be:5d:78:30:63:d5:15:42:80:66:5a: ac:48:fd:76:2f:11:7a:a1:48:29:12:c4:a3:62:b2: 1a:40:42:27:cd:e7:1c:66:33:14:da:ec:0e:36:15: 8e:33:de:ca:53:66:f9:21:b4:8a:f4:39:44:eb:0b: 1a:75:dd:0f:fc:97:b9:a4:ab:33:9e:22:f3:ff:31: 85:59:31:3e:25:9d:72:69:a8:c7:b4:e9:66:5c:f6: 82:0d:bf:51:6d:cf:c6:c8:e0:eb:83:22:a9:50:ff: c9:b7:74:bf:cb:57:1b:11:f0:cf:10:28:28:d3:46: eb:be:16:b7:7e:c9:ce:e3:17:7a:43:51:ea:25:45: 05:78:4f:0f:27:b7:93:77:a7:69:0e:4b:be:a9:3b: 4b:2b:04:e3:9b:a3:3d:68:aa:ed:10:b1:8e:9c:ac: 32:25:88:94:ec:eb:9f:af:dd:7e:9a:86:49:19:eb: aa:0d:f0:dd:0f:cc:01:01:d8:7e:56:5a:dc:6e:c5: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EA:03:0F:1C:A0:61:C1:F7:35:9B:F7:6F:ED:D0:D0:C9:B8:00:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bddd35c-b414-3df5-a1d9-1713bcf40ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:59:cf:3f:cb:b6:45:ee:7a:5f:fc:74:6a:12:dc:32:68:4a: 1e:19:75:35:78:05:46:e9:50:f7:83:3e:f5:19:33:b0:5f:c9: 34:06:d1:7a:80:4a:f0:f4:9c:0d:b3:c0:9d:5b:67:ae:08:c1: 40:f7:ec:e4:bf:d6:e1:bc:0f:30:e7:71:22:1f:c5:b3:30:78: eb:66:a5:43:05:e4:14:ad:9b:c9:60:25:68:05:11:4a:40:5e: 4e:19:c5:1d:12:2f:9d:bd:51:d1:0f:78:9c:ee:c3:c3:45:65: 1c:94:20:7e:35:84:fe:45:dc:b4:96:b5:8a:b3:3f:e2:00:3a: eb:43:f6:6f:76:87:02:03:23:09:01:6d:4b:0d:6a:37:e9:61: 18:72:35:f4:23:8f:3e:2f:5c:82:be:a5:6e:1a:af:2c:9d:22: b8:54:5b:55:05:a4:1c:5d:83:ab:e6:ec:67:22:c4:6e:c1:5c: 07:8d:d0:19:64:f1:69:4a:7b:45:e9:a6:3c:f6:9e:84:f6:3f: 65:e2:b2:03:e5:d1:75:8f:ab:96:48:d6:06:fa:9f:dc:e6:a2: dc:c6:78:28:1c:80:b7:88:f9:dd:c6:a1:73:02:96:70:a6:ce: e0:59:b9:6f:e4:6a:19:9e:91:2f:69:c5:a8:3a:a5:ee:9a:aa: b7:04:d5:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMRxUiyS7L1ebwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YmRiNDc5MWMtZDU0OC00NGIyLWE3NzQtNDdkMmRiZmFiODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM5b11CzCdiH13qD6sI1JEy1m1YUIPr85Beh uH6dQvItVu177WYT4UMI4jRJKXh7+gmuVjCLLY/YsGVDPzWYvl14MGPVFUKAZlqs SP12LxF6oUgpEsSjYrIaQEInzeccZjMU2uwONhWOM97KU2b5IbSK9DlE6wsadd0P /Je5pKszniLz/zGFWTE+JZ1yaajHtOlmXPaCDb9Rbc/GyODrgyKpUP/Jt3S/y1cb EfDPECgo00brvha3fsnO4xd6Q1HqJUUFeE8PJ7eTd6dpDku+qTtLKwTjm6M9aKrt ELGOnKwyJYiU7Oufr91+moZJGeuqDfDdD8wBAdh+VlrcbsV3MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfqAw8coGHB9zWb92/t0NDJuABRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJkZGQzNWMtYjQxNC0z ZGY1LWExZDktMTcxM2JjZjQwYWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDCpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpZzz/LtkXuel/8dGoS3DJoSh4ZdTV4BUbpUPeDPvUZM7BfyTQG0XqA SvD0nA2zwJ1bZ64IwUD37OS/1uG8DzDncSIfxbMweOtmpUMF5BStm8lgJWgFEUpA Xk4ZxR0SL529UdEPeJzuw8NFZRyUIH41hP5F3LSWtYqzP+IAOutD9m92hwIDIwkB bUsNajfpYRhyNfQjjz4vXIK+pW4aryydIrhUW1UFpBxdg6vm7GcixG7BXAeN0Blk 8WlKe0Xppjz2noT2P2XisgPl0XWPq5ZI1gb6n9zmotzGeCgcgLeI+d3GoXMClnCm zuBZuW/kahmekS9pxag6pe6aqrcE1cU= -----END CERTIFICATE-----Generated at Tue Oct 21 21:45:40 2025 by rpki-client