$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63eab666-a9b1-3e60-9c94-472d242ccd47.roa File: 63eab666-a9b1-3e60-9c94-472d242ccd47.roa (raw, json) Hash identifier: KqMTZsRDLwlA0+llzFQdykgdHj4IonklvcjF3t09z1Q= Subject key identifier: 34:E2:39:00:DB:CB:0F:E5:8F:61:5F:EC:83:AB:39:8D:15:BF:92:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA53C1569D178AE97A4D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63eab666-a9b1-3e60-9c94-472d242ccd47.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.36.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:53:c1:56:9d:17:8a:e9:7a:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=81fea39b-d4fc-4ac7-8c61-cf6c2d5d2d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:61:21:bc:fd:04:24:bc:85:47:dd:c6:29: 2e:cd:64:b0:75:36:0b:90:31:ae:8b:04:a9:7b:24: 5c:9b:44:71:45:0e:12:44:7f:8d:34:2a:85:29:be: f3:fb:d6:d1:ec:9c:04:06:3f:71:20:ca:2b:2f:82: 85:f3:4d:ee:db:01:f4:dc:74:64:3f:2a:0c:b5:8b: 44:a0:de:45:03:e0:ad:93:26:db:c0:f8:8b:f5:a2: bb:62:6c:13:cf:68:5f:c4:53:1c:d4:b2:3a:13:b2: 1e:d2:c9:1f:39:48:34:64:87:e7:b3:8b:b0:10:fb: 76:70:3d:a4:3c:38:2f:69:5c:54:19:8a:21:f1:32: 62:29:1f:d1:da:39:17:cb:20:5a:bd:16:84:9f:6d: ff:ba:8e:fb:b2:9b:97:55:0d:40:08:b6:fa:b8:86: c6:61:6f:12:dc:c5:f9:19:d2:b6:2e:16:d0:f4:87: 6d:44:62:20:24:88:22:41:07:5b:ec:05:11:d3:66: 55:ae:fe:65:26:72:8c:22:ca:aa:19:a6:eb:e6:b2: 29:fb:e6:23:ba:8e:f0:cd:c2:73:38:17:f3:f5:53: 6b:9d:26:3c:e6:d0:01:f4:cc:f8:e4:f1:7e:a3:9e: ad:51:b2:be:d7:d8:00:8e:63:dc:d6:a1:96:5b:23: 12:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E2:39:00:DB:CB:0F:E5:8F:61:5F:EC:83:AB:39:8D:15:BF:92:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63eab666-a9b1-3e60-9c94-472d242ccd47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:69:27:00:f9:33:c7:22:1d:49:c9:fd:77:25:bf:4f:41:62: 1d:b2:1f:e8:72:b6:06:a5:3b:92:87:e1:ed:be:ac:60:70:29: 6f:e4:09:c3:db:65:d1:27:bd:08:60:ac:08:ab:40:f0:29:d5: 08:61:8a:f2:59:16:98:0a:ff:e3:33:7b:2e:75:fc:c0:ae:cf: dc:86:72:2b:2d:16:d1:a5:f6:ec:da:0f:1e:86:ee:bd:f1:29: 38:b5:f0:2b:33:39:75:8e:60:35:64:d0:3d:23:48:fa:50:ee: f0:f2:85:e6:9a:45:28:b7:92:24:73:38:ee:ab:71:03:7b:3b: da:12:f1:36:3f:56:47:6b:00:5f:87:1d:0a:38:3c:f9:f3:99: 25:8f:da:e5:86:94:e6:b2:6e:b2:9f:f5:05:68:3d:97:61:f4: 59:ac:ab:4e:32:1d:e7:94:a8:5e:b9:35:c2:11:d9:9f:7f:9e: 93:14:2f:15:39:12:e4:0f:2d:85:ce:20:54:df:eb:6e:11:dd: 93:85:fb:c8:81:ec:75:f1:f1:17:f6:a1:e2:e3:24:be:af:5e: 89:b0:70:33:e9:a8:da:5d:d6:a8:e9:5e:ac:59:9a:28:2a:52: 4b:88:22:8d:ce:33:59:37:10:35:ff:6a:db:73:90:62:b0:3d: 1c:1c:02:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlPBVp0Xiul6TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODFmZWEzOWItZDRmYy00YWM3LThjNjEtY2Y2YzJkNWQyZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmhhIbz9BCS8hUfdxikuzWSwdTYLkDGuiwSp eyRcm0RxRQ4SRH+NNCqFKb7z+9bR7JwEBj9xIMorL4KF803u2wH03HRkPyoMtYtE oN5FA+CtkybbwPiL9aK7YmwTz2hfxFMc1LI6E7Ie0skfOUg0ZIfns4uwEPt2cD2k PDgvaVxUGYoh8TJiKR/R2jkXyyBavRaEn23/uo77spuXVQ1ACLb6uIbGYW8S3MX5 GdK2LhbQ9IdtRGIgJIgiQQdb7AUR02ZVrv5lJnKMIsqqGabr5rIp++Yjuo7wzcJz OBfz9VNrnSY85tAB9Mz45PF+o56tUbK+19gAjmPc1qGWWyMS1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTiOQDbyw/lj2Ff7IOrOY0Vv5IpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjNlYWI2NjYtYTliMS0z ZTYwLTljOTQtNDcyZDI0MmNjZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9pJwD5M8ciHUnJ/Xclv09BYh2yH+hytgalO5KH4e2+rGBwKW/kCcPb ZdEnvQhgrAirQPAp1QhhivJZFpgK/+Mzey51/MCuz9yGcistFtGl9uzaDx6G7r3x KTi18CszOXWOYDVk0D0jSPpQ7vDyheaaRSi3kiRzOO6rcQN7O9oS8TY/VkdrAF+H HQo4PPnzmSWP2uWGlOaybrKf9QVoPZdh9Fmsq04yHeeUqF65NcIR2Z9/npMULxU5 EuQPLYXOIFTf624R3ZOF+8iB7HXx8Rf2oeLjJL6vXomwcDPpqNpd1qjpXqxZmigq UkuIIo3OM1k3EDX/attzkGKwPRwcAv0= -----END CERTIFICATE-----Generated at Tue Oct 21 19:47:54 2025 by rpki-client