$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fd659b4-a32e-3304-b37e-5521278834c5.roa File: 5fd659b4-a32e-3304-b37e-5521278834c5.roa (raw, json) Hash identifier: jWcJ90CqpzTQ8J/Gy7PMUMvVopHqROkyuEjlIkelRfc= Subject key identifier: C2:C7:15:E7:2D:AB:AD:8C:16:D3:D9:E1:E8:46:7D:7A:19:E4:E7:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA51057842D70645ACB540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fd659b4-a32e-3304-b37e-5521278834c5.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.32.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:51:05:78:42:d7:06:45:ac:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1d167fa5-caa9-4b66-a2dd-39d0e2b39cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:45:75:7c:ac:0b:ab:1b:6e:97:30:66:7b:85: 74:a9:e2:f7:a9:a3:36:34:a8:1e:e9:b0:89:3d:d6: 7d:9f:23:8d:de:a8:c7:2e:8e:04:94:70:9c:f9:5d: 6f:2f:47:0a:cf:3a:f2:c7:a2:66:ac:63:21:96:d9: de:e4:8a:be:dc:d0:80:13:16:b0:ea:7a:b5:23:7f: ce:6e:87:0a:19:b2:cb:ea:8d:d0:6b:e6:3d:55:31: 16:c5:9b:a7:5b:94:a9:e1:f6:d4:bc:e5:32:f3:60: bb:f2:c4:13:aa:59:eb:56:69:34:15:9d:31:50:89: 37:8a:af:3d:44:58:19:7e:85:68:a9:a9:90:8e:9c: c2:04:79:94:9c:c9:2d:19:00:2f:6d:33:6b:1c:bb: e5:81:6c:af:46:9e:a4:0d:3c:5b:b2:ab:df:7e:f7: f2:52:ca:6f:e2:0b:32:59:8c:91:f0:04:12:a4:71: 32:65:0f:9f:99:d0:e3:10:6e:1a:27:6c:6c:0c:9b: 17:8f:37:07:ac:08:54:a8:27:0e:e1:d7:92:e9:a7: 63:0e:bd:0e:37:c0:f2:a6:d7:b4:29:67:95:e1:67: 9f:0e:d0:a1:f2:61:9c:47:09:fc:c1:65:93:f1:f3: d2:7e:d3:f5:f3:12:c3:78:55:e6:d4:d2:95:0c:e4: 3a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C7:15:E7:2D:AB:AD:8C:16:D3:D9:E1:E8:46:7D:7A:19:E4:E7:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fd659b4-a32e-3304-b37e-5521278834c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:e9:e7:5e:cb:86:73:26:99:57:c5:b4:2a:f1:f7:95:24:47: 89:33:e3:ea:fc:3c:13:b4:b0:cd:85:e2:d1:75:f8:b1:c9:65: e5:86:4c:08:9e:56:4d:0b:9d:b7:22:d9:bb:09:4b:15:10:75: fd:a6:14:f6:f9:7a:25:1d:e3:c5:de:4c:fe:f8:90:b1:43:d3: 93:3d:0d:09:f5:10:a5:9c:15:32:1d:34:bb:b1:71:34:b2:65: 60:d8:34:3d:7d:26:97:dc:e0:0b:c8:d1:80:ee:d4:4d:83:7e: 2d:8e:69:3b:cd:9a:75:28:1e:75:9a:56:62:02:3a:33:5a:e8: 8b:17:a6:a2:ad:bb:6a:db:ec:af:3c:64:1d:88:7c:f9:e6:b2: ef:f9:a1:99:62:73:07:fc:53:e1:34:6e:eb:23:6e:33:73:c1: f7:33:99:b6:86:cc:36:59:b5:f2:a4:51:58:ba:79:bf:c2:fe: 52:4e:df:29:36:c9:97:de:f4:b6:aa:94:d3:ac:30:4f:69:65: 46:90:d3:d8:21:1d:a7:3b:a7:fa:d6:d5:ad:25:21:c5:ef:e2: 84:70:fc:80:53:9c:3f:47:e0:5b:69:cf:01:75:cd:54:4f:5f: e9:ed:4b:4c:f3:88:04:e1:d4:0b:8c:5c:b7:2a:db:9f:a5:d5: ae:55:31:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlEFeELXBkWstUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWQxNjdmYTUtY2FhOS00YjY2LWEyZGQtMzlkMGUyYjM5Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kV1fKwLqxtulzBme4V0qeL3qaM2NKge6bCJ PdZ9nyON3qjHLo4ElHCc+V1vL0cKzzryx6JmrGMhltne5Iq+3NCAExaw6nq1I3/O bocKGbLL6o3Qa+Y9VTEWxZunW5Sp4fbUvOUy82C78sQTqlnrVmk0FZ0xUIk3iq89 RFgZfoVoqamQjpzCBHmUnMktGQAvbTNrHLvlgWyvRp6kDTxbsqvffvfyUspv4gsy WYyR8AQSpHEyZQ+fmdDjEG4aJ2xsDJsXjzcHrAhUqCcO4deS6adjDr0ON8Dypte0 KWeV4WefDtCh8mGcRwn8wWWT8fPSftP18xLDeFXm1NKVDOQ68wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLHFectq62MFtPZ4ehGfXoZ5Oe+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWZkNjU5YjQtYTMyZS0z MzA0LWIzN2UtNTUyMTI3ODgzNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANbp517LhnMmmVfFtCrx95UkR4kz4+r8PBO0sM2F4tF1+LHJZeWGTAie Vk0Lnbci2bsJSxUQdf2mFPb5eiUd48XeTP74kLFD05M9DQn1EKWcFTIdNLuxcTSy ZWDYND19Jpfc4AvI0YDu1E2Dfi2OaTvNmnUoHnWaVmICOjNa6IsXpqKtu2rb7K88 ZB2IfPnmsu/5oZlicwf8U+E0busjbjNzwfczmbaGzDZZtfKkUVi6eb/C/lJO3yk2 yZfe9LaqlNOsME9pZUaQ09ghHac7p/rW1a0lIcXv4oRw/IBTnD9H4FtpzwF1zVRP X+ntS0zziATh1AuMXLcq25+l1a5VMeM= -----END CERTIFICATE-----Generated at Tue Oct 21 19:18:25 2025 by rpki-client