$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b5dc55b-379d-3aa1-b1f4-f69a1e0e9565.roa File: 8b5dc55b-379d-3aa1-b1f4-f69a1e0e9565.roa (raw, json) Hash identifier: uazaazD68qiJfGbfCoRi3aX/I0NecQpZRn+1M6vEZ+4= Subject key identifier: 4D:0F:20:B9:AE:C1:EF:F5:18:70:79:75:79:64:6B:FE:3D:01:BF:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA65B76CF0250A3D5E7640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b5dc55b-379d-3aa1-b1f4-f69a1e0e9565.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.48.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:65:b7:6c:f0:25:0a:3d:5e:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=27d5ee99-36f8-48a4-950b-232c8a95dedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e1:09:64:c3:05:11:35:85:2c:5e:de:b8:d8: 2a:68:c7:76:2f:79:fa:5d:64:34:94:c1:82:ee:6b: f1:73:d6:12:5d:47:eb:35:dc:04:46:67:f5:d5:c9: 0d:3f:f3:73:25:79:c5:10:61:85:ee:cd:d7:70:08: 58:02:1f:34:22:7c:3b:e7:16:66:9b:b8:38:63:e7: f5:1b:ca:e1:5f:5a:75:60:db:8c:02:76:4e:3a:b3: e9:13:df:1a:10:a9:9b:82:89:90:a8:51:5c:9e:c7: c0:0d:fa:52:64:3a:22:40:ac:ea:61:64:89:08:0b: 5d:df:41:b8:0e:60:0e:6c:1f:39:b2:e6:de:2b:7d: 30:43:4c:c4:3e:f0:68:a7:ba:69:f0:fa:ce:46:b3: d2:8b:9c:89:16:06:19:28:ed:de:0d:de:0b:0f:c9: 11:44:15:25:38:d1:dc:d3:10:46:28:2c:90:5b:c6: 61:2a:9d:88:94:c4:e0:ed:59:5c:56:bc:31:ed:1a: 19:3a:31:d3:47:6d:5e:4a:b0:b4:bd:bb:fb:c1:29: 4b:44:ca:12:7f:12:17:72:78:4e:c0:4f:cb:e5:0f: 06:31:26:6a:54:8d:60:87:11:ff:c8:42:30:c3:ae: 28:4c:48:2f:ee:14:52:74:fa:fa:cb:e8:ef:fd:f1: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0F:20:B9:AE:C1:EF:F5:18:70:79:75:79:64:6B:FE:3D:01:BF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b5dc55b-379d-3aa1-b1f4-f69a1e0e9565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:8e:2e:00:7b:b3:df:2f:92:21:0b:0e:2d:57:13:41:1e:da: b8:8e:2e:b0:42:55:fe:4e:66:9a:a5:93:ae:f7:1f:2a:a5:59: 46:36:bd:1d:81:3d:ed:29:c4:5a:30:40:f8:60:0c:24:57:7a: f8:95:67:02:17:90:06:a5:31:26:6a:85:d9:94:16:22:eb:44: 39:1d:ee:f1:bf:56:a3:c0:7a:aa:96:62:57:4c:88:62:19:41: 11:dc:24:44:ee:9d:3a:90:38:f2:59:6f:bf:f6:a5:cf:79:d5: 6b:3c:ef:c8:70:37:22:1e:30:7c:2f:bb:2c:a9:23:f4:28:9d: fc:8a:b0:e3:f8:43:a7:34:e6:40:54:7d:43:53:50:76:fb:74: 33:91:11:36:96:ae:ed:39:8c:f2:4e:92:13:ce:5f:1d:32:fe: b5:0a:bd:e4:9b:7f:5e:09:45:9c:d5:ed:ba:2b:5d:35:bd:2a: 47:38:72:a9:f5:a2:e1:50:56:cf:8a:83:af:ff:2b:9e:11:95: eb:57:a7:f9:79:50:99:e5:74:8f:58:5f:0f:cd:0b:c0:16:fd: be:11:72:ca:89:17:c2:e2:e4:fa:08:96:da:1e:11:ca:28:d1: f2:59:08:12:a8:9e:0e:f1:14:f6:98:ad:05:f0:d2:02:f2:27: 6c:2d:bd:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqmW3bPAlCj1edkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjdkNWVlOTktMzZmOC00OGE0LTk1MGItMjMyYzhhOTVkZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+EJZMMFETWFLF7euNgqaMd2L3n6XWQ0lMGC 7mvxc9YSXUfrNdwERmf11ckNP/NzJXnFEGGF7s3XcAhYAh80Inw75xZmm7g4Y+f1 G8rhX1p1YNuMAnZOOrPpE98aEKmbgomQqFFcnsfADfpSZDoiQKzqYWSJCAtd30G4 DmAObB85subeK30wQ0zEPvBop7pp8PrORrPSi5yJFgYZKO3eDd4LD8kRRBUlONHc 0xBGKCyQW8ZhKp2IlMTg7VlcVrwx7RoZOjHTR21eSrC0vbv7wSlLRMoSfxIXcnhO wE/L5Q8GMSZqVI1ghxH/yEIww64oTEgv7hRSdPr6y+jv/fF6RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0PILmuwe/1GHB5dXlka/49Ab99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGI1ZGM1NWItMzc5ZC0z YWExLWIxZjQtZjY5YTFlMGU5NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMmOLgB7s98vkiELDi1XE0Ee2riOLrBCVf5OZpqlk673HyqlWUY2vR2B Pe0pxFowQPhgDCRXeviVZwIXkAalMSZqhdmUFiLrRDkd7vG/VqPAeqqWYldMiGIZ QRHcJETunTqQOPJZb7/2pc951Ws878hwNyIeMHwvuyypI/QonfyKsOP4Q6c05kBU fUNTUHb7dDORETaWru05jPJOkhPOXx0y/rUKveSbf14JRZzV7borXTW9Kkc4cqn1 ouFQVs+Kg6//K54RletXp/l5UJnldI9YXw/NC8AW/b4RcsqJF8Li5PoIltoeEcoo 0fJZCBKong7xFPaYrQXw0gLyJ2wtvSE= -----END CERTIFICATE-----Generated at Wed Oct 22 00:28:21 2025 by rpki-client