$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c55c342-3199-32d1-98d9-557314814e8d.roa File: 5c55c342-3199-32d1-98d9-557314814e8d.roa (raw, json) Hash identifier: ItWRq1bHNRZhgZ3GucwXA54rbSm+YutGXxbeDgCkg0c= Subject key identifier: D9:3F:F7:0F:E6:F8:9B:AF:18:F7:68:21:DF:0A:64:C4:53:67:28:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA58FD5EAABA8931A6D904 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c55c342-3199-32d1-98d9-557314814e8d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.40.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:58:fd:5e:aa:ba:89:31:a6:d9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9b20f627-ab86-4b26-a1e3-d320fbb5889c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:78:fb:ea:a9:ec:39:a6:4e:17:85:c0:12: c2:c2:36:3f:ce:0f:2c:3d:c0:95:22:36:c8:e5:64: a2:ea:d8:aa:b9:7c:a0:00:09:47:88:90:90:d6:38: c3:1d:cb:16:65:26:d2:f4:9b:8c:4a:85:66:5d:32: 6e:1d:62:47:45:3d:65:2f:65:f0:c7:47:71:62:14: ee:47:e6:b7:ff:90:0d:31:b3:59:1c:eb:01:7e:12: cb:04:86:0f:1b:80:b0:0a:15:0b:ad:83:b8:53:d0: 67:80:80:69:37:ea:cf:fc:2a:a6:45:68:03:6a:55: 5c:04:95:f5:f0:74:e8:b1:c5:b2:34:92:5c:19:36: 91:15:b6:71:7a:26:96:17:7b:9d:8f:06:83:25:44: 91:fb:62:7e:31:e5:d7:5b:ab:7e:84:48:17:f1:d4: ec:38:e7:4f:de:10:8b:fb:ba:2b:2b:86:6f:46:a8: ee:da:6f:0d:cd:0c:52:9a:cc:43:16:d4:df:b4:f2: 46:11:51:85:05:2c:43:60:59:cc:58:73:a9:07:50: 33:5d:89:60:70:72:aa:12:8f:ee:e1:f9:ba:20:7b: 08:58:6d:2d:c9:99:64:84:41:47:dd:94:38:42:eb: d4:81:51:aa:44:e2:87:bd:29:15:50:0c:ee:be:56: 5e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3F:F7:0F:E6:F8:9B:AF:18:F7:68:21:DF:0A:64:C4:53:67:28:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c55c342-3199-32d1-98d9-557314814e8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:81:ac:d2:19:d3:00:d3:1f:b4:97:6d:3a:eb:d3:2d:e5:c5: b5:64:64:59:e2:b8:83:12:3d:f0:2e:d3:1a:80:c8:ad:fd:79: 85:d1:48:af:be:df:95:e5:7e:80:57:27:04:f3:5f:26:4d:b2: ec:75:1c:13:78:aa:5c:71:4f:1f:e0:2f:21:dc:d2:0e:35:64: 7b:38:02:e4:1e:11:95:dd:9a:c6:3e:22:66:6b:0f:dd:83:67: b2:f8:48:47:b4:58:c1:e1:76:1d:1a:a5:08:38:80:0f:36:ea: a7:0f:2a:19:1a:63:e8:71:3a:ef:0f:fa:b3:35:40:6b:7c:83: b9:5b:79:de:ca:1e:5a:09:34:78:e7:9d:51:57:df:a6:5c:af: e1:f4:25:11:0a:7f:51:7f:12:19:70:f4:6c:bb:27:74:ba:65: 33:3c:68:ad:85:5a:d3:3f:7a:c2:78:49:38:68:88:4f:57:b0: 4c:8c:17:a1:46:34:2e:3d:b5:14:84:51:c1:2d:8d:12:ca:97: b8:95:29:00:49:6c:89:3b:02:04:4a:bb:b6:99:a2:bf:86:b0: 85:ae:85:dd:83:8d:f7:7d:1c:8e:af:10:b6:6e:af:89:a4:20: 17:aa:6d:0f:51:80:8b:bf:02:e0:4f:1e:ea:1c:53:52:22:c5: 3e:27:89:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlj9Xqq6iTGm2QQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWIyMGY2MjctYWI4Ni00YjI2LWExZTMtZDMyMGZiYjU4ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLN4++qp7DmmTheFwBLCwjY/zg8sPcCVIjbI 5WSi6tiquXygAAlHiJCQ1jjDHcsWZSbS9JuMSoVmXTJuHWJHRT1lL2Xwx0dxYhTu R+a3/5ANMbNZHOsBfhLLBIYPG4CwChULrYO4U9BngIBpN+rP/CqmRWgDalVcBJX1 8HToscWyNJJcGTaRFbZxeiaWF3udjwaDJUSR+2J+MeXXW6t+hEgX8dTsOOdP3hCL +7orK4ZvRqju2m8NzQxSmsxDFtTftPJGEVGFBSxDYFnMWHOpB1AzXYlgcHKqEo/u 4fm6IHsIWG0tyZlkhEFH3ZQ4QuvUgVGqROKHvSkVUAzuvlZeAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk/9w/m+JuvGPdoId8KZMRTZyhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM1NWMzNDItMzE5OS0z MmQxLTk4ZDktNTU3MzE0ODE0ZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKBrNIZ0wDTH7SXbTrr0y3lxbVkZFniuIMSPfAu0xqAyK39eYXRSK++ 35XlfoBXJwTzXyZNsux1HBN4qlxxTx/gLyHc0g41ZHs4AuQeEZXdmsY+ImZrD92D Z7L4SEe0WMHhdh0apQg4gA826qcPKhkaY+hxOu8P+rM1QGt8g7lbed7KHloJNHjn nVFX36Zcr+H0JREKf1F/Ehlw9Gy7J3S6ZTM8aK2FWtM/esJ4SThoiE9XsEyMF6FG NC49tRSEUcEtjRLKl7iVKQBJbIk7AgRKu7aZor+GsIWuhd2Djfd9HI6vELZur4mk IBeqbQ9RgIu/AuBPHuocU1IixT4niSI= -----END CERTIFICATE-----Generated at Tue Oct 21 22:19:50 2025 by rpki-client