$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88607aea-863a-3484-9b0e-9448f89ae2ad.roa File: 88607aea-863a-3484-9b0e-9448f89ae2ad.roa (raw, json) Hash identifier: zsBzBTYLrhMfC7HZPYUdI1665y1BHg6/8n/MmeMqf5E= Subject key identifier: D3:B2:33:16:B8:42:83:C9:8E:70:8B:62:0A:4B:E0:15:5D:F7:BA:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8A956FA60465BF8608600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88607aea-863a-3484-9b0e-9448f89ae2ad.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.32.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:a9:56:fa:60:46:5b:f8:60:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=021320e3-c6f5-4087-85c5-a9926046d7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d7:44:71:4e:78:f0:62:e0:2a:e5:78:4d:5a: a5:16:59:cc:e3:e5:81:71:4c:17:b2:ca:0b:e0:80: 00:87:71:1f:0d:96:1c:05:79:07:59:56:f4:b1:59: 3b:7e:09:be:7c:9a:1d:62:fa:0d:2d:29:e7:f5:83: 4c:0b:cb:ce:be:6f:3b:c4:3f:fd:05:91:f1:75:a8: 22:61:c0:ae:ad:c7:cf:a7:a2:c6:18:39:1b:3c:ea: ea:55:fe:9f:f5:13:e3:98:31:d9:26:26:d3:e7:41: 26:ab:e2:73:ae:a7:62:06:14:4e:97:d2:83:1d:3a: c9:ac:22:7f:8f:0d:dd:56:34:8d:94:48:85:65:a9: 59:65:11:28:86:d5:c4:79:e3:37:24:39:d0:38:f2: 01:de:21:81:88:4b:d7:02:84:cb:e3:aa:44:d7:a0: b5:bc:eb:c5:13:da:ae:4a:eb:63:ef:7b:fe:34:20: 34:39:d9:d8:7c:6a:bf:b9:23:06:38:c1:0c:d3:39: d1:06:00:65:69:51:26:e9:1d:ce:f7:87:8c:b1:4b: 3e:92:72:3a:9f:af:8b:3f:39:6d:d6:c9:cc:a1:85: 9c:58:7a:2d:5f:81:e4:fb:73:c9:46:11:60:f8:63: 96:12:be:49:85:54:ec:84:0b:58:a6:ce:97:1e:65: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B2:33:16:B8:42:83:C9:8E:70:8B:62:0A:4B:E0:15:5D:F7:BA:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88607aea-863a-3484-9b0e-9448f89ae2ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:25:16:cb:6c:94:e0:42:64:6c:e2:40:31:6f:71:c4:45:2b: 21:e9:7d:f7:80:66:7c:98:c2:70:29:8b:b6:d3:c2:46:2a:ff: 9d:02:43:5e:ea:0a:d5:3a:31:56:f1:24:c9:bf:b1:4f:69:bb: 5c:27:b5:16:15:5c:27:34:9b:66:c6:a6:9e:a0:70:b3:ff:0f: f4:a9:4a:30:09:b7:ed:d5:6d:2f:da:9c:c5:83:99:11:96:a3: d4:61:55:ed:50:35:67:04:5e:29:04:20:c3:81:3b:21:6e:d2: 91:5d:73:0b:50:20:c1:0e:0c:ef:fc:af:d6:62:8c:dd:89:8e: d7:2a:ed:1f:50:9b:a1:38:39:d3:4c:e8:e9:88:cd:86:33:81: 79:bc:93:41:6a:59:4a:04:c3:05:5f:fc:96:c3:bc:23:12:19: 1c:81:7d:e1:2a:7b:5f:8a:dc:67:47:6f:b6:f1:55:f3:b9:b5: ce:a9:a0:eb:f4:45:f8:ff:09:26:c5:ab:cc:18:6a:c8:f3:f5: 1c:47:07:6b:f9:ae:28:26:8d:14:44:4e:1b:fa:40:fa:3e:b8: 91:ff:37:c8:37:bb:f2:63:bc:f9:b1:e5:5a:99:56:00:1b:3c: 54:f8:56:41:49:6a:89:2d:f0:ed:7b:73:17:7b:b8:69:5e:28: 5b:0c:fb:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqKlW+mBGW/hghgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDIxMzIwZTMtYzZmNS00MDg3LTg1YzUtYTk5MjYwNDZkN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NdEcU548GLgKuV4TVqlFlnM4+WBcUwXssoL 4IAAh3EfDZYcBXkHWVb0sVk7fgm+fJodYvoNLSnn9YNMC8vOvm87xD/9BZHxdagi YcCurcfPp6LGGDkbPOrqVf6f9RPjmDHZJibT50Emq+JzrqdiBhROl9KDHTrJrCJ/ jw3dVjSNlEiFZalZZREohtXEeeM3JDnQOPIB3iGBiEvXAoTL46pE16C1vOvFE9qu Sutj73v+NCA0OdnYfGq/uSMGOMEM0znRBgBlaVEm6R3O94eMsUs+knI6n6+LPzlt 1snMoYWcWHotX4Hk+3PJRhFg+GOWEr5JhVTshAtYps6XHmVFNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOyMxa4QoPJjnCLYgpL4BVd97q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg2MDdhZWEtODYzYS0z NDg0LTliMGUtOTQ0OGY4OWFlMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwlFstslOBCZGziQDFvccRFKyHpffeAZnyYwnApi7bTwkYq/50CQ17q CtU6MVbxJMm/sU9pu1wntRYVXCc0m2bGpp6gcLP/D/SpSjAJt+3VbS/anMWDmRGW o9RhVe1QNWcEXikEIMOBOyFu0pFdcwtQIMEODO/8r9ZijN2Jjtcq7R9Qm6E4OdNM 6OmIzYYzgXm8k0FqWUoEwwVf/JbDvCMSGRyBfeEqe1+K3GdHb7bxVfO5tc6poOv0 Rfj/CSbFq8wYasjz9RxHB2v5rigmjRREThv6QPo+uJH/N8g3u/JjvPmx5VqZVgAb PFT4VkFJaokt8O17cxd7uGleKFsM+60= -----END CERTIFICATE-----Generated at Tue Oct 21 19:37:15 2025 by rpki-client