$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b91f98d-abb5-375a-97db-d262b6c53f59.roa File: 8b91f98d-abb5-375a-97db-d262b6c53f59.roa (raw, json) Hash identifier: Za/TGJA5I6QBRv6c1Inc9alyjR6zQkzih6U0TnvjuYI= Subject key identifier: A9:61:36:DC:68:4D:9E:AD:56:D7:91:13:70:86:F5:D9:6C:2C:E2:3A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA51FB103316CB6B255800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b91f98d-abb5-375a-97db-d262b6c53f59.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.34.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:51:fb:10:33:16:cb:6b:25:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=0357b4f9-d07c-4e1e-9db1-0ae6ac7ca09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:73:cc:58:01:df:85:35:78:f1:ef:38:b5:38: f3:3a:d4:c8:80:d2:25:b5:ab:a3:dd:9a:4c:f0:0a: c2:67:66:2a:2d:e7:70:51:e0:bc:9a:40:28:33:ea: 02:72:59:54:fb:cc:3f:08:1d:c1:6e:9d:41:f1:b9: 19:95:4f:20:4c:b5:0d:7e:68:9a:6d:fd:ee:66:de: 00:a9:83:2a:24:19:88:df:a2:81:94:96:d9:b2:51: 54:18:ed:5c:f6:54:6b:ea:7e:72:60:64:9a:6a:6c: 6b:f9:ca:36:51:bd:2f:c7:10:9c:b5:a7:a3:9e:05: 57:b1:56:3e:92:2b:8d:5d:bc:04:15:57:df:bf:62: 20:41:65:8e:fa:17:ea:0d:35:14:f7:23:c0:97:1e: 30:b0:68:1f:49:06:2c:eb:1a:26:3d:eb:74:78:54: 25:be:b6:ec:2a:ef:2c:32:96:88:cc:6b:3c:0c:1e: 81:24:6b:10:5d:6c:59:71:f2:d0:a1:66:00:cf:b7: 7e:89:18:aa:17:62:62:d1:1b:7a:26:fe:43:d2:3b: c7:4d:84:04:ac:b7:11:17:fa:f8:eb:a3:21:b9:3b: 1b:6b:87:da:bd:6e:6f:d5:b8:95:ce:c0:20:13:90: be:e0:4f:39:af:7b:72:00:92:3f:2c:b3:00:5d:01: 86:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:61:36:DC:68:4D:9E:AD:56:D7:91:13:70:86:F5:D9:6C:2C:E2:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b91f98d-abb5-375a-97db-d262b6c53f59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:24:19:ae:25:31:c4:84:27:b5:b6:e8:95:7d:4c:d7:4c:5e: 98:31:ed:0f:e5:b8:e8:46:93:b6:c6:aa:57:41:5f:72:eb:f0: 2a:9f:ec:77:a5:00:4b:e8:6f:c1:b7:5c:dc:a7:6b:ee:d7:7b: c7:22:72:8e:7a:ba:e6:d1:c0:d6:f3:6b:c3:9c:09:05:4e:47: d5:27:63:91:a4:da:14:07:19:86:ba:0b:ba:0c:38:45:c6:c6: 69:79:08:81:eb:ce:40:41:8e:6f:42:80:c8:c6:8e:49:28:f7: 3d:bf:5a:65:ed:78:d0:3a:5c:2d:b6:7f:5d:c0:94:de:43:f4: 63:7e:92:fc:71:11:df:4f:cb:9f:1d:47:bd:33:4b:b3:9c:b1: 35:70:ba:0a:ee:44:52:7e:4e:c4:a4:26:b6:5c:bb:fc:f6:9e: 84:83:d8:2e:73:c7:8f:2e:62:1b:bc:24:0d:df:b8:fa:5b:7c: 02:6a:d1:f7:55:37:24:f2:84:0e:62:a9:8b:33:74:07:d7:78: 07:e8:5e:63:ef:c2:7d:aa:67:11:d4:cb:00:d5:c6:5b:e5:65: 52:de:90:04:8e:35:42:7d:df:b7:89:f6:3a:13:6e:b4:94:17: f7:49:cf:bf:dc:b6:5d:41:14:90:64:fe:ab:2f:15:37:33:d7: 92:4b:91:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlH7EDMWy2slWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDM1N2I0ZjktZDA3Yy00ZTFlLTlkYjEtMGFlNmFjN2NhMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHPMWAHfhTV48e84tTjzOtTIgNIltauj3ZpM 8ArCZ2YqLedwUeC8mkAoM+oCcllU+8w/CB3Bbp1B8bkZlU8gTLUNfmiabf3uZt4A qYMqJBmI36KBlJbZslFUGO1c9lRr6n5yYGSaamxr+co2Ub0vxxCctaejngVXsVY+ kiuNXbwEFVffv2IgQWWO+hfqDTUU9yPAlx4wsGgfSQYs6xomPet0eFQlvrbsKu8s MpaIzGs8DB6BJGsQXWxZcfLQoWYAz7d+iRiqF2Ji0Rt6Jv5D0jvHTYQErLcRF/r4 66MhuTsba4favW5v1biVzsAgE5C+4E85r3tyAJI/LLMAXQGG5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlhNtxoTZ6tVteRE3CG9dlsLOI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGI5MWY5OGQtYWJiNS0z NzVhLTk3ZGItZDI2MmI2YzUzZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8kGa4lMcSEJ7W26JV9TNdMXpgx7Q/luOhGk7bGqldBX3Lr8Cqf7Hel AEvob8G3XNyna+7Xe8cico56uubRwNbza8OcCQVOR9UnY5Gk2hQHGYa6C7oMOEXG xml5CIHrzkBBjm9CgMjGjkko9z2/WmXteNA6XC22f13AlN5D9GN+kvxxEd9Py58d R70zS7OcsTVwugruRFJ+TsSkJrZcu/z2noSD2C5zx48uYhu8JA3fuPpbfAJq0fdV NyTyhA5iqYszdAfXeAfoXmPvwn2qZxHUywDVxlvlZVLekASONUJ937eJ9joTbrSU F/dJz7/ctl1BFJBk/qsvFTcz15JLkVk= -----END CERTIFICATE-----Generated at Tue Oct 21 19:21:24 2025 by rpki-client