$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d4ba315-0bfd-3fab-b7a2-0e3464f24231.roa File: 7d4ba315-0bfd-3fab-b7a2-0e3464f24231.roa (raw, json) Hash identifier: w05WfYQwB3g3qobRIzOCiTUP/ldbRcVhb1w/iA5Et1I= Subject key identifier: 7F:AB:01:07:AC:AD:4A:DF:8D:60:AF:16:87:91:56:F4:66:B4:E2:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8B98386319E5DB1106760 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d4ba315-0bfd-3fab-b7a2-0e3464f24231.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.40.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:b9:83:86:31:9e:5d:b1:10:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7a2dcb90-9e0a-4ec1-a186-836f791542a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:33:ce:a4:b7:e2:cd:22:06:cf:9b:fd:c0:a4: ed:65:aa:32:a5:22:8d:77:73:47:6b:8a:82:1f:a3: cf:5b:30:c3:bf:6e:60:87:a1:15:54:99:4f:10:58: 66:50:58:2c:7e:a9:04:4f:e0:dc:6a:24:06:72:25: c7:97:b1:fc:27:67:50:a9:88:67:68:dc:e5:15:98: 94:71:ff:ee:59:b7:22:6f:7c:48:58:a5:03:0c:cb: 81:b6:80:ea:17:21:21:6c:c2:27:16:6a:79:1b:41: 8b:67:62:31:05:9a:b6:d1:87:cb:30:ef:c7:f5:2c: 8b:26:ca:61:ce:33:5c:20:3c:c7:36:ca:db:38:47: 62:81:5c:66:89:5f:0d:89:53:a3:bf:36:ef:be:01: 52:35:87:2b:fa:b8:72:99:a9:90:09:a2:23:d9:5a: bb:24:ba:62:af:ea:26:55:11:e4:62:54:c4:0f:d9: eb:c3:aa:7e:81:33:57:ac:b3:c9:b8:3a:10:22:fc: 34:6d:46:46:8e:0f:60:01:d7:8c:04:c2:6d:cc:32: 56:ef:76:55:f6:64:b7:36:5c:66:4f:36:ee:0a:6f: 9a:c1:4b:15:63:71:60:50:77:df:07:c5:86:64:2d: cc:8a:60:2b:25:4d:05:90:b8:8b:9b:95:e6:26:7a: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AB:01:07:AC:AD:4A:DF:8D:60:AF:16:87:91:56:F4:66:B4:E2:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d4ba315-0bfd-3fab-b7a2-0e3464f24231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:70:74:09:fa:38:23:0a:94:26:ff:00:9f:75:df:78:b5:b3: 48:ba:70:22:df:73:6e:f9:76:97:b3:a6:6c:d2:64:34:e3:49: 86:ea:cc:13:39:da:fd:21:45:5e:64:9d:95:c1:ad:1f:15:9f: 6e:78:b2:b4:3c:97:29:c5:b7:21:a7:4c:3c:d8:19:aa:48:35: b0:08:bd:06:99:a8:ba:1b:6c:dc:39:ea:2f:fd:6c:4a:56:52: cb:44:e3:84:e1:89:d1:5c:6b:31:6a:66:53:ec:c3:e4:be:e0: 25:05:3b:bd:83:ee:da:41:66:0c:fa:36:3c:0b:e2:db:fc:4b: e7:2e:9a:6e:b0:19:30:9a:32:79:f9:8f:9f:18:ab:a2:63:2f: 83:02:c8:5c:6b:89:bb:b7:1d:03:22:75:05:68:03:19:47:dd: 23:20:42:92:8e:94:7b:4a:50:61:a3:71:e2:1c:d7:ad:96:13: 65:30:25:fa:81:a2:3b:7b:b1:39:d3:45:df:27:1f:f6:35:00: f1:c4:6f:03:54:09:e0:31:a8:f1:a2:f8:a9:75:9c:75:ab:52: 89:c5:21:b3:86:55:e3:53:0a:58:e0:14:2b:fc:3d:27:68:bd: 8a:ae:de:91:bb:67:cd:e6:20:f0:f6:39:62:28:4b:e0:9d:2f: b3:2c:c7:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLmDhjGeXbEQZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2EyZGNiOTAtOWUwYS00ZWMxLWExODYtODM2Zjc5MTU0MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jPOpLfizSIGz5v9wKTtZaoypSKNd3NHa4qC H6PPWzDDv25gh6EVVJlPEFhmUFgsfqkET+DcaiQGciXHl7H8J2dQqYhnaNzlFZiU cf/uWbcib3xIWKUDDMuBtoDqFyEhbMInFmp5G0GLZ2IxBZq20YfLMO/H9SyLJsph zjNcIDzHNsrbOEdigVxmiV8NiVOjvzbvvgFSNYcr+rhymamQCaIj2Vq7JLpir+om VRHkYlTED9nrw6p+gTNXrLPJuDoQIvw0bUZGjg9gAdeMBMJtzDJW73ZV9mS3Nlxm TzbuCm+awUsVY3FgUHffB8WGZC3MimArJU0FkLiLm5XmJnomxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+rAQesrUrfjWCvFoeRVvRmtOJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2Q0YmEzMTUtMGJmZC0z ZmFiLWI3YTItMGUzNDY0ZjI0MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFwdAn6OCMKlCb/AJ9133i1s0i6cCLfc275dpezpmzSZDTjSYbqzBM5 2v0hRV5knZXBrR8Vn254srQ8lynFtyGnTDzYGapINbAIvQaZqLobbNw56i/9bEpW UstE44ThidFcazFqZlPsw+S+4CUFO72D7tpBZgz6NjwL4tv8S+cumm6wGTCaMnn5 j58Yq6JjL4MCyFxribu3HQMidQVoAxlH3SMgQpKOlHtKUGGjceIc162WE2UwJfqB ojt7sTnTRd8nH/Y1APHEbwNUCeAxqPGi+Kl1nHWrUonFIbOGVeNTCljgFCv8PSdo vYqu3pG7Z83mIPD2OWIoS+CdL7Msx7s= -----END CERTIFICATE-----Generated at Tue Oct 21 22:08:44 2025 by rpki-client