$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70a4fdc5-9fd3-3b28-8a3b-f3fa6af4d1c0.roa File: 70a4fdc5-9fd3-3b28-8a3b-f3fa6af4d1c0.roa (raw, json) Hash identifier: SXO2VsR5CD2R6wllFlafu4ZJxQswhVKjk8UWGvZ9RBQ= Subject key identifier: 7F:82:DA:73:96:74:E9:DB:DC:A5:7F:21:BE:8B:FD:66:05:75:C2:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA64567F59803B049D5340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70a4fdc5-9fd3-3b28-8a3b-f3fa6af4d1c0.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.48.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:64:56:7f:59:80:3b:04:9d:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ef316a84-6f1c-4664-948e-4e23a82c1eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:85:5c:0c:a1:81:f9:1d:91:3e:39:88:83:62: c0:ef:84:77:d7:5d:1d:ed:fb:48:04:25:fb:7b:3a: af:4d:ea:63:61:32:8b:ef:ab:51:0f:06:8c:06:c9: c7:af:f2:eb:99:60:0c:d4:00:91:b9:d6:8e:bf:f7: ad:f0:7a:6e:0a:4f:a3:2e:1d:53:28:8e:db:d7:db: a9:77:6a:86:47:34:1c:19:0e:bf:a8:45:ec:77:1a: 74:3e:81:a2:bf:62:52:8f:6c:a7:11:f2:43:bf:e5: fa:ad:ac:5a:68:77:ac:c1:82:5f:04:25:3c:d6:b0: 97:3e:a4:d1:83:e9:af:5b:fa:c8:50:e1:55:45:f0: 29:f4:07:33:ef:d7:a1:b2:ce:6c:7a:95:e4:03:91: 31:ce:9c:af:d0:c7:a9:ab:4f:3e:6a:f4:3d:9b:ab: 5b:aa:38:31:82:7e:59:be:75:3f:87:6e:0a:5e:53: 0a:df:16:34:b9:af:f1:58:75:4c:16:79:05:b5:d2: 4e:ca:de:e4:a7:47:5b:79:99:9c:84:1c:ea:55:11: ee:80:17:27:f6:0f:fe:0d:bc:5c:bb:55:f8:72:c0: fd:a2:b2:eb:e3:2c:e9:76:07:ec:54:eb:50:af:5b: 12:ec:b7:59:f5:63:94:6c:4e:bf:93:c6:86:09:fd: 1d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:82:DA:73:96:74:E9:DB:DC:A5:7F:21:BE:8B:FD:66:05:75:C2:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70a4fdc5-9fd3-3b28-8a3b-f3fa6af4d1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f0:70:3b:66:57:8f:67:c7:63:4a:d7:b5:84:f3:78:4a:88: b4:eb:4f:e9:24:52:55:33:d9:1c:9e:c4:fe:76:1e:69:95:30: 37:43:65:d4:00:a4:c8:b7:60:8e:0c:c9:a5:fc:87:bb:6d:40: 59:a2:68:db:b8:2e:52:69:b7:aa:88:b1:41:13:3e:7e:ab:dd: 84:56:e7:f0:eb:03:20:c4:df:1a:3c:83:6a:a8:d3:60:94:2e: 20:61:85:c7:2c:87:0e:ed:71:d7:93:df:82:04:ed:bf:a5:2b: 17:c4:04:48:24:85:09:c8:fc:65:a8:bb:07:65:14:bf:eb:93: 73:c9:d8:0f:49:45:09:3e:54:49:6b:36:60:ae:23:70:a0:ec: 3b:ed:6f:90:33:da:55:bc:a8:85:55:cb:31:8b:80:61:72:9c: 7e:5f:f6:d7:59:b3:da:85:31:7e:b1:4f:ad:c6:98:58:f4:ef: 1a:a7:0d:f5:13:1f:5c:f8:ac:3a:58:75:a2:67:8d:d2:23:0b: ca:ed:fa:98:cc:cd:76:a5:76:2e:e0:cc:4c:a7:bf:76:13:dc: 29:10:90:55:7a:a4:30:aa:3e:37:36:a4:d9:e9:bc:28:bb:2a: 26:d5:93:c0:2f:30:15:85:f8:1c:14:6c:c4:71:f0:26:a1:fb: f9:15:33:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqmRWf1mAOwSdU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZWYzMTZhODQtNmYxYy00NjY0LTk0OGUtNGUyM2E4MmMxZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YVcDKGB+R2RPjmIg2LA74R3110d7ftIBCX7 ezqvTepjYTKL76tRDwaMBsnHr/LrmWAM1ACRudaOv/et8HpuCk+jLh1TKI7b19up d2qGRzQcGQ6/qEXsdxp0PoGiv2JSj2ynEfJDv+X6raxaaHeswYJfBCU81rCXPqTR g+mvW/rIUOFVRfAp9Acz79ehss5sepXkA5Exzpyv0Mepq08+avQ9m6tbqjgxgn5Z vnU/h24KXlMK3xY0ua/xWHVMFnkFtdJOyt7kp0dbeZmchBzqVRHugBcn9g/+Dbxc u1X4csD9orLr4yzpdgfsVOtQr1sS7LdZ9WOUbE6/k8aGCf0dFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+C2nOWdOnb3KV/Ib6L/WYFdcKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzBhNGZkYzUtOWZkMy0z YjI4LThhM2ItZjNmYTZhZjRkMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDwcDtmV49nx2NK17WE83hKiLTrT+kkUlUz2RyexP52HmmVMDdDZdQA pMi3YI4MyaX8h7ttQFmiaNu4LlJpt6qIsUETPn6r3YRW5/DrAyDE3xo8g2qo02CU LiBhhccshw7tcdeT34IE7b+lKxfEBEgkhQnI/GWouwdlFL/rk3PJ2A9JRQk+VElr NmCuI3Cg7Dvtb5Az2lW8qIVVyzGLgGFynH5f9tdZs9qFMX6xT63GmFj07xqnDfUT H1z4rDpYdaJnjdIjC8rt+pjMzXaldi7gzEynv3YT3CkQkFV6pDCqPjc2pNnpvCi7 KibVk8AvMBWF+BwUbMRx8Cah+/kVM98= -----END CERTIFICATE-----Generated at Wed Oct 22 00:19:41 2025 by rpki-client