$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa File: 7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa (raw, json) Hash identifier: onONVib5+GhYe8GhtB2Nz9BwgEVmCG/96b/ggzTnQY4= Subject key identifier: D1:75:C3:FA:FD:C9:3F:18:52:5D:CD:C0:68:D7:E1:66:2D:AE:AF:3A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA5A9DBEE04F7D3B426000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.40.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:5a:9d:be:e0:4f:7d:3b:42:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=66a4aa4a-5ebd-42ba-a4f4-4c90734f4dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:5a:a5:9a:24:73:a6:36:f1:b9:0a:ce:7e: 89:51:d4:ae:db:92:92:7f:52:8b:a3:aa:2e:38:c7: c1:b0:9d:20:89:bb:af:ae:7b:24:69:a2:8c:33:ac: c1:b1:2c:6e:83:42:c9:bf:d5:58:df:47:92:4e:9a: f7:c6:d5:f8:27:90:38:33:89:be:a9:b1:57:9e:fd: 90:9d:21:70:fd:fe:6a:83:c3:49:20:77:0d:3a:29: d0:93:74:a2:7c:e7:ab:f2:1d:7a:ee:01:d3:5c:b3: 1a:66:6a:ad:ad:be:f7:c4:f5:4c:ed:54:2e:6c:09: db:c4:a0:a8:20:8b:7e:ea:ab:2f:2f:5f:cf:68:03: bf:45:1d:91:8d:45:01:d2:a0:b8:fe:31:3a:b4:9b: 18:c6:74:ea:6b:8b:e0:ab:c7:42:da:ef:a6:4b:83: 57:e1:7d:13:96:a4:75:1c:a2:85:66:63:28:b2:60: 4a:c0:29:30:67:cb:af:09:06:92:61:76:91:b7:08: bd:58:2f:a1:6b:56:ea:55:fa:95:aa:44:97:6b:43: b3:96:46:90:0d:ac:fe:c4:cd:d1:bc:35:42:14:02: 93:05:2d:09:da:b5:a3:5c:e8:77:31:97:0a:7a:44: 9e:c0:09:77:f7:30:f7:4e:6d:07:dc:16:b8:4f:4c: a1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:75:C3:FA:FD:C9:3F:18:52:5D:CD:C0:68:D7:E1:66:2D:AE:AF:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d0:86:9b:07:df:35:d9:5e:01:71:be:eb:e7:47:3f:12:1e: 8f:38:df:55:68:ec:66:37:d0:80:d7:e1:a4:1a:75:ff:2d:e5: 6a:cd:05:9b:b2:d4:0d:a4:16:34:a4:ad:0f:10:3d:cd:f0:cc: 66:35:41:99:66:c6:80:fe:79:fc:6f:f8:aa:3f:6c:6c:dd:21: 00:6c:6b:f7:cf:fc:8a:1a:4b:c8:a1:a3:8c:05:fc:08:6c:87: 21:b3:55:4c:e4:85:ae:2b:de:4d:11:c2:3d:04:c4:62:c0:8b: 61:b8:29:ef:3e:60:5c:ce:86:21:ab:4e:c5:12:d5:ac:56:97: b9:6d:22:78:75:a4:92:c7:1f:6f:3d:60:69:ec:03:a8:5f:e3: e6:54:57:4a:55:38:18:aa:cd:b6:21:28:73:f9:7f:6a:81:51: 4d:d9:5c:65:1c:a0:b2:a9:f3:a9:78:88:12:12:3f:d0:7a:97: e6:e7:a7:7f:cb:60:89:6a:65:24:d4:c9:60:e8:6c:b9:c3:9d: a6:9d:02:da:bb:65:66:83:b0:b3:de:e2:76:3a:03:e5:a0:78: 97:f3:62:72:a4:f6:c8:8c:80:f9:d7:7e:a5:7d:88:da:3e:1b: a6:c1:f7:f3:22:92:a1:e3:2b:74:84:08:dc:6a:22:ac:f7:94: 34:b8:15:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlqdvuBPfTtCYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjZhNGFhNGEtNWViZC00MmJhLWE0ZjQtNGM5MDczNGY0ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg9apZokc6Y28bkKzn6JUdSu25KSf1KLo6ou OMfBsJ0gibuvrnskaaKMM6zBsSxug0LJv9VY30eSTpr3xtX4J5A4M4m+qbFXnv2Q nSFw/f5qg8NJIHcNOinQk3SifOer8h167gHTXLMaZmqtrb73xPVM7VQubAnbxKCo IIt+6qsvL1/PaAO/RR2RjUUB0qC4/jE6tJsYxnTqa4vgq8dC2u+mS4NX4X0TlqR1 HKKFZmMosmBKwCkwZ8uvCQaSYXaRtwi9WC+ha1bqVfqVqkSXa0OzlkaQDaz+xM3R vDVCFAKTBS0J2rWjXOh3MZcKekSewAl39zD3Tm0H3Ba4T0yhqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNF1w/r9yT8YUl3NwGjX4WYtrq86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E0ZjQ0MzQtZmQxYS0z YzU1LWExNmQtYzBlNDIyYWNjYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7QhpsH3zXZXgFxvuvnRz8SHo8431Vo7GY30IDX4aQadf8t5WrNBZuy 1A2kFjSkrQ8QPc3wzGY1QZlmxoD+efxv+Ko/bGzdIQBsa/fP/IoaS8iho4wF/Ahs hyGzVUzkha4r3k0Rwj0ExGLAi2G4Ke8+YFzOhiGrTsUS1axWl7ltInh1pJLHH289 YGnsA6hf4+ZUV0pVOBiqzbYhKHP5f2qBUU3ZXGUcoLKp86l4iBISP9B6l+bnp3/L YIlqZSTUyWDobLnDnaadAtq7ZWaDsLPe4nY6A+WgeJfzYnKk9siMgPnXfqV9iNo+ G6bB9/MikqHjK3SECNxqIqz3lDS4FZ4= -----END CERTIFICATE-----Generated at Wed Oct 22 00:39:29 2025 by rpki-client