$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7844817c-1df2-3500-a8f6-4c397d045ffc.roa File: 7844817c-1df2-3500-a8f6-4c397d045ffc.roa (raw, json) Hash identifier: 46+Im2tlEFuc4m7GjBgCfeAe4HNt1AE0Xje6FPKJK4M= Subject key identifier: 45:05:1E:FE:0C:70:53:0B:8B:2A:43:61:0F:FF:C1:52:97:20:7B:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C0973D1E2BBC04573500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7844817c-1df2-3500-a8f6-4c397d045ffc.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.43.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c0:97:3d:1e:2b:bc:04:57:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1757752d-a0c8-43b1-b370-5d2ea9fc1564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:50:e6:d8:ef:3e:1e:a1:e7:e6:93:72:fe: d4:0f:ea:87:ec:2b:90:77:23:6b:1e:e1:bd:2b:47: f6:01:5d:b8:84:e2:bf:09:39:48:0c:be:5a:16:df: 7e:29:52:a4:2a:f2:b5:dc:4d:f2:fa:65:86:83:25: 89:50:71:a6:c5:9b:ca:45:7a:73:3d:26:ee:13:19: cd:ed:18:ee:f9:31:02:19:0d:9b:fd:b0:1c:82:96: f9:f5:96:20:b4:10:f8:d2:33:29:a2:6d:f0:b9:0f: 05:c0:4a:c0:14:d6:10:da:de:ff:e6:32:f4:e7:ba: 33:2f:23:75:7e:fe:14:12:95:d7:cd:b9:db:30:be: 61:e9:9f:b4:b5:58:2a:f3:4d:fc:3d:9e:f8:d9:6e: 32:4f:a3:e6:a4:e8:bc:3a:c9:ea:01:64:88:7e:de: 44:25:57:5b:95:94:ab:3e:f2:e7:f0:d5:c1:57:41: eb:07:cb:4d:3f:5c:88:80:28:a6:be:83:5e:ba:1d: d2:46:61:e9:21:5d:54:f1:02:0c:af:97:23:da:72: 74:66:02:2f:8e:c4:81:cd:8b:82:0b:bf:9a:16:74: 72:cb:fd:9a:05:9a:a6:9f:d9:81:dc:fe:e1:ee:51: fb:41:a9:e1:31:ac:3a:b1:01:52:29:9e:7a:0e:c3: 2b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:05:1E:FE:0C:70:53:0B:8B:2A:43:61:0F:FF:C1:52:97:20:7B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7844817c-1df2-3500-a8f6-4c397d045ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:dc:4a:d0:9e:3c:e4:f2:a2:52:be:62:6c:5b:a7:07:0f:b9: 90:37:5c:f5:cf:57:3a:6f:95:da:18:e7:7c:ce:7e:51:f0:79: d3:0c:f0:f5:b6:52:34:83:8c:6f:c3:9d:ce:aa:32:42:c4:63: 35:55:f9:83:31:8c:61:b9:02:2f:a9:e1:35:b3:96:68:11:c7: e0:2b:33:2f:73:8a:be:70:43:c3:8a:dd:43:bf:71:82:b2:af: c7:4b:b9:76:26:72:e7:52:1d:39:bc:10:78:c9:b1:a7:ff:1b: 95:52:25:50:4a:39:76:19:00:6b:9f:c1:8c:3c:89:04:b8:40: 62:2f:ef:8a:48:7f:f4:ca:7c:29:ab:08:3c:a9:2f:c5:cf:12: 5d:c6:19:e3:87:a7:76:40:d8:36:69:47:12:db:e9:31:80:0e: b6:13:92:02:7e:dd:38:c2:58:fe:8e:49:fb:15:e7:5d:91:8a: 29:96:ae:7f:8f:67:e1:b2:d4:92:e9:a3:60:c4:91:d1:4f:aa: 09:92:a1:92:88:cb:22:34:3f:97:b2:38:b2:42:87:af:1d:e3: 42:8e:5c:7b:5e:b6:51:9a:93:dd:77:fc:8e:d3:a1:5b:8e:a4: d4:ff:29:86:7b:0d:35:05:11:44:51:00:b5:63:2b:b9:5f:43: 32:6c:76:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMCXPR4rvARXNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTc1Nzc1MmQtYTBjOC00M2IxLWIzNzAtNWQyZWE5ZmMxNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4VQ5tjvPh6h5+aTcv7UD+qH7CuQdyNrHuG9 K0f2AV24hOK/CTlIDL5aFt9+KVKkKvK13E3y+mWGgyWJUHGmxZvKRXpzPSbuExnN 7Rju+TECGQ2b/bAcgpb59ZYgtBD40jMpom3wuQ8FwErAFNYQ2t7/5jL057ozLyN1 fv4UEpXXzbnbML5h6Z+0tVgq8038PZ742W4yT6PmpOi8OsnqAWSIft5EJVdblZSr PvLn8NXBV0HrB8tNP1yIgCimvoNeuh3SRmHpIV1U8QIMr5cj2nJ0ZgIvjsSBzYuC C7+aFnRyy/2aBZqmn9mB3P7h7lH7QanhMaw6sQFSKZ56DsMr0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUFHv4McFMLiypDYQ//wVKXIHtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzg0NDgxN2MtMWRmMi0z NTAwLWE4ZjYtNGMzOTdkMDQ1ZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCt7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADcStCePOTyolK+YmxbpwcPuZA3XPXPVzpvldoY53zOflHwedMM8PW2 UjSDjG/Dnc6qMkLEYzVV+YMxjGG5Ai+p4TWzlmgRx+ArMy9zir5wQ8OK3UO/cYKy r8dLuXYmcudSHTm8EHjJsaf/G5VSJVBKOXYZAGufwYw8iQS4QGIv74pIf/TKfCmr CDypL8XPEl3GGeOHp3ZA2DZpRxLb6TGADrYTkgJ+3TjCWP6OSfsV512RiimWrn+P Z+Gy1JLpo2DEkdFPqgmSoZKIyyI0P5eyOLJCh68d40KOXHtetlGak913/I7ToVuO pNT/KYZ7DTUFEURRALVjK7lfQzJsdsI= -----END CERTIFICATE-----Generated at Wed Oct 22 00:19:29 2025 by rpki-client