$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80e18cbf-de3f-3d33-9373-f4c2efc6e040.roa File: 80e18cbf-de3f-3d33-9373-f4c2efc6e040.roa (raw, json) Hash identifier: OOzXpz6kIcYodHbJinSrQ7tFT+JvaGeAA01J6AB2Ycc= Subject key identifier: 8B:3A:93:2F:B7:40:23:60:00:D2:4B:46:84:63:44:F4:DE:3F:1B:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8BCEC56A1F3ECBBCEDE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80e18cbf-de3f-3d33-9373-f4c2efc6e040.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.42.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:bc:ec:56:a1:f3:ec:bb:ce:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a1782e82-4354-45b2-b0ec-e230ac974d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c4:f5:0e:ec:17:00:ea:60:a7:7f:6a:c4:c9: 51:97:03:9d:c6:0a:ff:ce:e4:04:33:66:4c:2f:0f: 03:0a:b7:7a:d2:b5:ac:0d:8e:e2:14:37:06:31:0a: 35:4a:52:ea:b9:6f:49:9d:91:49:cf:0f:bf:7a:2d: 2d:09:8d:5d:dc:65:08:cb:c6:87:79:7b:0d:1c:7a: 6e:1b:86:fc:ca:fb:14:fa:1b:eb:66:db:29:98:01: 32:9b:b3:d4:00:c3:e4:57:87:68:b8:8a:b6:b6:0d: c2:cd:e0:b6:56:3f:63:45:a5:c4:d6:f7:05:4a:98: 52:54:55:b8:e2:c3:78:13:6b:0d:c5:5a:0d:36:21: e2:33:d1:e2:84:9a:52:3d:ab:fc:57:77:ae:d3:bc: 8d:ff:bc:c3:5c:47:4f:31:3d:10:e6:b2:34:1d:a2: 41:78:75:cd:60:86:5e:90:eb:56:3c:2f:e7:72:be: 77:63:03:26:88:76:a0:dc:38:90:24:48:50:e4:fd: 40:dc:d2:66:7c:3e:d6:f9:86:5e:ea:25:cf:78:22: 50:38:1f:08:98:08:25:10:b7:5c:42:8e:ae:70:64: d0:32:42:2c:65:3a:cb:ae:55:0b:e6:cf:d2:36:c1: 01:c2:31:66:6c:e3:62:02:58:62:ae:20:97:37:0b: c8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3A:93:2F:B7:40:23:60:00:D2:4B:46:84:63:44:F4:DE:3F:1B:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80e18cbf-de3f-3d33-9373-f4c2efc6e040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:57:b1:c1:01:9f:4f:98:3e:fe:3e:39:c4:28:a9:de:3d:0f: dc:06:7e:9e:f0:13:55:1a:36:85:43:5a:69:53:39:48:ab:58: ab:54:34:98:60:7f:f7:6e:95:9b:34:fd:02:76:36:f2:16:52: 66:06:b6:26:15:da:12:0c:7f:fa:a8:b5:21:ef:a5:79:fb:2f: bd:63:3a:87:da:33:7f:49:23:86:c0:a8:0f:84:84:90:72:4c: bb:45:85:26:dc:7e:fa:4e:f1:25:c0:d0:81:99:27:4b:6c:3c: 42:84:bb:f8:94:0a:f0:f2:58:56:0a:c1:c9:bd:39:ae:df:08: e6:c3:51:2f:a5:1f:82:ec:4d:a3:db:71:07:4f:a1:63:d5:29: d5:1a:4b:f9:b1:e0:04:b8:5a:13:6d:ae:f9:a2:5c:a7:53:fd: 1f:6e:3e:85:80:9c:68:c0:53:1e:dd:1e:c3:c1:81:30:c1:b3: 81:58:25:e4:35:d1:5f:17:0a:57:c0:b4:5e:a2:c0:5c:24:da: 14:c1:c4:bd:ec:38:93:3d:05:ac:b8:55:0e:b3:ab:f1:2c:4a: bb:81:fa:8d:22:44:89:7a:9f:7a:8c:6e:3e:75:2e:8b:0e:45: f8:5d:10:f1:3a:df:e5:f4:42:50:e7:7d:85:d5:cf:c2:f1:d9: 4b:eb:3e:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLzsVqHz7LvO3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTE3ODJlODItNDM1NC00NWIyLWIwZWMtZTIzMGFjOTc0ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcT1DuwXAOpgp39qxMlRlwOdxgr/zuQEM2ZM Lw8DCrd60rWsDY7iFDcGMQo1SlLquW9JnZFJzw+/ei0tCY1d3GUIy8aHeXsNHHpu G4b8yvsU+hvrZtspmAEym7PUAMPkV4douIq2tg3CzeC2Vj9jRaXE1vcFSphSVFW4 4sN4E2sNxVoNNiHiM9HihJpSPav8V3eu07yN/7zDXEdPMT0Q5rI0HaJBeHXNYIZe kOtWPC/ncr53YwMmiHag3DiQJEhQ5P1A3NJmfD7W+YZe6iXPeCJQOB8ImAglELdc Qo6ucGTQMkIsZTrLrlUL5s/SNsEBwjFmbONiAlhiriCXNwvICwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs6ky+3QCNgANJLRoRjRPTePxvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODBlMThjYmYtZGUzZi0z ZDMzLTkzNzMtZjRjMmVmYzZlMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1XscEBn0+YPv4+OcQoqd49D9wGfp7wE1UaNoVDWmlTOUirWKtUNJhg f/dulZs0/QJ2NvIWUmYGtiYV2hIMf/qotSHvpXn7L71jOofaM39JI4bAqA+EhJBy TLtFhSbcfvpO8SXA0IGZJ0tsPEKEu/iUCvDyWFYKwcm9Oa7fCObDUS+lH4LsTaPb cQdPoWPVKdUaS/mx4AS4WhNtrvmiXKdT/R9uPoWAnGjAUx7dHsPBgTDBs4FYJeQ1 0V8XClfAtF6iwFwk2hTBxL3sOJM9Bay4VQ6zq/EsSruB+o0iRIl6n3qMbj51LosO RfhdEPE63+X0QlDnfYXVz8Lx2UvrPgU= -----END CERTIFICATE-----Generated at Wed Oct 22 00:28:07 2025 by rpki-client