$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e7c6e95-9c43-3124-b135-04aaaa3b14cd.roa File: 8e7c6e95-9c43-3124-b135-04aaaa3b14cd.roa (raw, json) Hash identifier: DHenDIul0Q4uLY5QAKnjIIz+1VBUSl9xSlXekLtXa3A= Subject key identifier: 5D:0E:7B:C4:C6:A1:38:7E:6C:E8:0D:0F:4B:1F:C7:16:91:93:5D:7C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA6EBC38DD828F0BD3E040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e7c6e95-9c43-3124-b135-04aaaa3b14cd.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.56.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:6e:bc:38:dd:82:8f:0b:d3:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e155634a-1992-4bb0-8703-5fbb82aaf86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:70:c8:ee:63:9d:41:c2:8a:19:09:a6:fd: 71:77:44:c0:14:d2:34:35:71:af:3e:93:5e:e6:a7: c0:85:8c:46:f6:e6:9c:d6:85:fb:f6:76:8d:d5:3d: f7:3b:9d:0d:30:2b:d6:10:8b:30:eb:41:a3:52:90: 24:7e:a5:8f:9e:57:4a:1b:a8:05:d6:e7:46:eb:81: 5e:06:16:d6:85:5c:80:fb:eb:00:63:0c:66:15:56: bd:84:95:45:d2:42:a7:2c:3b:a6:14:0a:17:d3:ba: 36:a9:48:81:7c:1d:53:f9:56:f9:9d:25:38:33:0a: 70:b7:13:29:38:fd:e1:10:3e:f3:6c:b2:b2:1a:7b: f0:b5:40:f3:29:5c:1d:df:24:fa:22:df:27:9f:f5: d9:9c:29:2d:f7:ee:ca:7f:9b:5a:e7:99:91:59:e8: 44:6e:ef:b9:e3:11:fa:8a:5d:f2:ea:a8:eb:9e:fd: 4d:93:db:14:ed:ea:3e:1c:b0:56:5d:c8:a5:49:22: ed:00:24:42:2f:08:ce:05:2d:7c:5e:29:4b:25:55: 66:7f:4c:68:7b:7f:fe:05:c7:46:4d:f9:90:b4:8f: 26:c8:f9:8a:e8:64:eb:89:4f:9f:9e:4a:06:6e:f6: 71:da:99:2b:66:96:ad:43:2f:6f:59:38:42:21:3e: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0E:7B:C4:C6:A1:38:7E:6C:E8:0D:0F:4B:1F:C7:16:91:93:5D:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e7c6e95-9c43-3124-b135-04aaaa3b14cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:56:20:63:53:d7:4b:f9:ed:46:5d:fb:ff:10:68:4d:92:fd: 4a:f6:d8:5e:13:aa:70:f0:2c:45:ce:2b:9b:04:61:bb:41:55: a3:df:df:97:c8:4e:35:8b:b7:06:9c:b2:6d:6c:14:e6:f5:ff: e6:53:80:ea:fb:27:50:97:9b:7e:75:ef:9f:ce:fa:88:69:5a: 3c:58:e5:7a:ee:ca:94:9a:ba:e9:d4:dc:11:d7:4f:10:1e:25: be:20:5f:1d:07:bf:8a:41:35:4b:aa:fb:be:62:c7:98:79:fe: d3:f4:c7:c8:a1:33:b8:ed:b4:25:7e:f0:7c:bd:73:3e:f4:bd: 2f:f4:d6:56:33:d0:06:1c:c8:0f:15:24:00:a3:48:01:67:10: ad:a8:0f:35:25:1c:72:76:9d:3c:20:0e:f7:b6:15:b6:d1:d2: 54:14:e0:38:0a:b7:95:22:71:16:d5:55:d6:b9:59:f4:60:e4: 2b:cb:0f:08:40:26:cb:85:3d:24:1d:f7:dc:12:98:f2:1b:ba: a3:a0:02:e1:32:d3:19:ff:bf:d2:d4:2b:3f:71:82:c5:5e:60: d2:6c:b3:0e:f8:7e:99:4e:03:6d:43:55:a7:e9:41:d2:4d:ef: fd:cf:b8:0a:1f:a0:76:4c:e6:77:ff:1e:20:84:58:c2:a9:00: 3f:a0:16:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqm68ON2CjwvT4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTE1NTYzNGEtMTk5Mi00YmIwLTg3MDMtNWZiYjgyYWFmODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09lwyO5jnUHCihkJpv1xd0TAFNI0NXGvPpNe 5qfAhYxG9uac1oX79naN1T33O50NMCvWEIsw60GjUpAkfqWPnldKG6gF1udG64Fe BhbWhVyA++sAYwxmFVa9hJVF0kKnLDumFAoX07o2qUiBfB1T+Vb5nSU4MwpwtxMp OP3hED7zbLKyGnvwtUDzKVwd3yT6It8nn/XZnCkt9+7Kf5ta55mRWehEbu+54xH6 il3y6qjrnv1Nk9sU7eo+HLBWXcilSSLtACRCLwjOBS18XilLJVVmf0xoe3/+BcdG TfmQtI8myPmK6GTriU+fnkoGbvZx2pkrZpatQy9vWThCIT5gfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0Oe8TGoTh+bOgND0sfxxaRk118MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGU3YzZlOTUtOWM0My0z MTI0LWIxMzUtMDRhYWFhM2IxNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVWIGNT10v57UZd+/8QaE2S/Ur22F4TqnDwLEXOK5sEYbtBVaPf35fI TjWLtwacsm1sFOb1/+ZTgOr7J1CXm35175/O+ohpWjxY5XruypSauunU3BHXTxAe Jb4gXx0Hv4pBNUuq+75ix5h5/tP0x8ihM7jttCV+8Hy9cz70vS/01lYz0AYcyA8V JACjSAFnEK2oDzUlHHJ2nTwgDve2FbbR0lQU4DgKt5UicRbVVda5WfRg5CvLDwhA JsuFPSQd99wSmPIbuqOgAuEy0xn/v9LUKz9xgsVeYNJssw74fplOA21DVafpQdJN 7/3PuAofoHZM5nf/HiCEWMKpAD+gFkc= -----END CERTIFICATE-----Generated at Tue Oct 21 22:18:20 2025 by rpki-client