$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ed4408e-8861-3637-a3b9-72ccfd21db91.roa File: 5ed4408e-8861-3637-a3b9-72ccfd21db91.roa (raw, json) Hash identifier: fCMe5dDPQDxz3qHWrnHFic6I1E6vupnOTg5rtOnHQDY= Subject key identifier: CB:DD:D7:51:47:2E:03:37:92:D3:51:95:AC:6C:50:25:CA:96:DD:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C0C66256E683D7D6F980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ed4408e-8861-3637-a3b9-72ccfd21db91.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.43.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c0:c6:62:56:e6:83:d7:d6:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9231cc85-1f76-425b-b0e1-d3ebc6a33c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:13:d6:c3:75:03:b3:d9:fc:9c:a2:1d:55: 26:ac:b9:d4:39:09:eb:43:15:19:fc:2b:7a:dc:da: 62:20:db:35:c4:5b:2b:a8:77:2a:0c:51:f4:1c:6c: a1:03:1b:f4:44:56:d7:55:91:be:ef:d7:76:a8:df: de:85:71:4c:db:fc:f3:f6:73:c8:81:8d:ba:01:94: bf:bf:ae:90:67:c1:c4:1c:cf:1a:99:b1:e8:31:bf: a2:39:58:37:e6:83:1d:ee:29:ed:d1:63:f9:4e:34: b4:5e:4e:13:4b:c2:de:ce:3b:42:a3:c7:dd:b8:88: fc:af:d5:8a:c3:bf:a3:07:83:73:10:22:e9:e5:ab: e0:bb:bb:2a:61:01:30:3f:79:16:90:92:7c:d2:0b: 9b:4e:b4:cb:d2:5a:2d:c1:9e:88:32:23:2e:fa:73: 47:30:a1:08:1c:46:a8:4b:fc:ba:c7:c9:03:2c:52: fe:63:de:73:69:69:7f:14:65:e7:d8:24:5a:5f:b6: 4e:03:e6:dc:e3:f9:79:6a:27:07:54:0c:fd:07:ee: 63:74:5d:a6:98:f9:50:c7:c0:26:6e:ce:f4:94:e1: 1b:b7:de:22:7e:64:37:91:4c:07:0e:38:d4:a0:d9: a4:a4:5b:d1:da:7a:7b:d4:43:25:a5:11:b2:a5:90: 79:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DD:D7:51:47:2E:03:37:92:D3:51:95:AC:6C:50:25:CA:96:DD:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ed4408e-8861-3637-a3b9-72ccfd21db91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d5:ce:a8:b9:d7:5c:3e:ac:28:c9:b3:98:eb:94:fc:a1:fc: bd:8f:3f:6f:7e:e3:ff:8c:3a:a7:f6:79:18:b8:d6:e7:f0:e6: c5:37:17:4a:55:0f:9e:be:9a:a2:62:f3:1d:08:4a:67:f6:f0: d0:44:18:cc:7b:b7:58:85:48:55:c9:d4:4d:d1:0c:25:a7:42: f1:7b:1a:bd:91:8c:3b:47:39:29:c6:da:2b:24:e6:5c:c1:2f: d8:22:f2:f0:04:97:bb:b3:4b:54:f4:89:63:3c:12:27:53:6e: b0:74:bb:22:c3:07:ed:59:37:57:8b:25:84:97:2b:9a:ee:5d: 85:ef:1c:76:c3:13:9c:6e:98:5c:55:d0:b1:95:a9:7f:3f:0b: fe:e4:24:40:b5:2f:ca:b9:3e:68:f1:be:1f:2d:72:83:94:12: 4d:7c:ac:93:96:e2:0c:bd:13:e7:a1:39:87:84:a7:38:7e:58: 45:5f:c4:9f:0d:35:86:10:b5:aa:06:fb:86:8f:ef:cf:d3:2f: b4:06:fd:e2:3a:34:b3:01:78:bf:c4:c5:26:04:cc:41:fd:1f: 72:d9:b3:57:a2:4c:1f:d3:0e:d4:ba:ef:73:d0:7c:e5:37:a7: 4e:f5:4d:5a:25:82:4d:e3:2c:78:d2:ae:73:65:92:d6:10:3a: 0c:e5:47:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMDGYlbmg9fW+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OTIzMWNjODUtMWY3Ni00MjViLWIwZTEtZDNlYmM2YTMzYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGET1sN1A7PZ/JyiHVUmrLnUOQnrQxUZ/Ct6 3NpiINs1xFsrqHcqDFH0HGyhAxv0RFbXVZG+79d2qN/ehXFM2/zz9nPIgY26AZS/ v66QZ8HEHM8ambHoMb+iOVg35oMd7int0WP5TjS0Xk4TS8LezjtCo8fduIj8r9WK w7+jB4NzECLp5avgu7sqYQEwP3kWkJJ80gubTrTL0lotwZ6IMiMu+nNHMKEIHEao S/y6x8kDLFL+Y95zaWl/FGXn2CRaX7ZOA+bc4/l5aicHVAz9B+5jdF2mmPlQx8Am bs70lOEbt94ifmQ3kUwHDjjUoNmkpFvR2np71EMlpRGypZB5lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvd11FHLgM3ktNRlaxsUCXKlt1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWVkNDQwOGUtODg2MS0z NjM3LWEzYjktNzJjY2ZkMjFkYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/Vzqi511w+rCjJs5jrlPyh/L2PP29+4/+MOqf2eRi41ufw5sU3F0pV D56+mqJi8x0ISmf28NBEGMx7t1iFSFXJ1E3RDCWnQvF7Gr2RjDtHOSnG2isk5lzB L9gi8vAEl7uzS1T0iWM8EidTbrB0uyLDB+1ZN1eLJYSXK5ruXYXvHHbDE5xumFxV 0LGVqX8/C/7kJEC1L8q5Pmjxvh8tcoOUEk18rJOW4gy9E+ehOYeEpzh+WEVfxJ8N NYYQtaoG+4aP78/TL7QG/eI6NLMBeL/ExSYEzEH9H3LZs1eiTB/TDtS673PQfOU3 p071TVolgk3jLHjSrnNlktYQOgzlR8s= -----END CERTIFICATE-----Generated at Wed Oct 22 03:08:19 2025 by rpki-client