$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/950b5954-e84a-3476-b73e-57a38bf3014b.roa File: 950b5954-e84a-3476-b73e-57a38bf3014b.roa (raw, json) Hash identifier: nbXS2bXty3V92rsRVaPb5xIqRhnkniIlprSpQBgIKYc= Subject key identifier: 8F:1F:C8:CB:3D:A2:8C:66:26:92:D4:5D:3D:2D:48:CD:D7:78:E7:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C5D01258CC79F20DE500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/950b5954-e84a-3476-b73e-57a38bf3014b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.48.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c5:d0:12:58:cc:79:f2:0d:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ee3be7a8-5e17-43ff-af77-d1db2291520d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:d2:2d:55:2d:19:21:db:45:eb:bd:a0:fb: 80:43:24:d0:f4:27:01:9a:46:c2:51:57:6a:01:6a: 22:98:79:97:13:b1:d7:c5:60:36:4f:a7:3a:60:d5: d6:8b:c7:75:bc:5d:68:c3:a3:7d:b0:8c:0f:31:d4: 73:1c:4f:9b:4b:89:e0:35:69:1f:83:af:9a:83:01: 85:50:78:6e:ce:80:be:d8:dd:f1:63:37:eb:dc:33: 01:32:b2:e8:c6:91:06:17:df:75:97:2a:82:01:4e: 1d:ff:d2:78:56:b8:2a:8a:80:e9:63:c2:e5:65:86: 1e:5b:4b:36:c3:8b:f2:0f:88:ae:8d:54:c9:ad:5c: aa:3d:b9:3d:13:de:27:fe:dc:11:57:0d:8b:ef:38: 39:9c:fa:63:ec:cc:68:a4:8f:58:64:3f:3b:10:5d: 91:61:8f:7c:24:ed:7b:41:6a:5b:29:5a:c4:de:a5: c4:4c:25:6b:3a:d6:4f:a4:58:b5:49:bf:72:6c:d9: 8c:d9:1a:7a:c1:8d:d9:33:99:0b:43:bf:83:ca:c5: e4:01:3c:2d:93:17:d0:1e:f7:69:12:cf:fa:2d:22: 59:18:2a:c1:db:42:99:49:4d:af:89:58:9a:20:2f: 59:ec:7f:41:93:c4:f6:3b:75:e5:61:cd:cd:30:3a: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1F:C8:CB:3D:A2:8C:66:26:92:D4:5D:3D:2D:48:CD:D7:78:E7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/950b5954-e84a-3476-b73e-57a38bf3014b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:f3:69:f0:ce:15:f7:7a:4e:e3:3f:c4:29:29:bc:62:1d:56: 25:46:2d:55:ae:c2:2d:90:03:93:24:da:79:e4:5e:3e:b5:4f: bd:4d:2d:e0:4e:75:ff:4e:80:95:96:49:63:68:1e:6a:ba:7e: 77:79:91:25:4e:40:aa:ff:8c:98:c5:ef:a6:f3:31:02:c2:77: eb:49:c3:5d:b1:a6:7f:cd:27:4d:be:86:fc:cd:0d:6a:3e:d2: 53:c3:50:5b:f8:3f:a9:ee:02:81:3c:f5:20:7d:10:df:aa:82: a4:39:d8:dd:14:be:8f:7d:02:5e:ad:5b:9f:90:37:d9:b5:cf: cb:5a:71:82:34:0d:2c:1e:d1:85:e0:77:8f:a4:22:ac:02:0d: 5b:7d:ba:a0:85:ca:06:a6:ea:d8:a7:e0:c0:ff:06:67:30:70: 7a:cb:45:40:ec:41:0f:b1:a8:45:ce:31:8e:d0:7a:4e:e2:59: e1:e9:91:7b:3f:db:eb:ff:bf:96:ba:e6:fe:c9:1f:6f:91:3c: 3b:43:7c:d6:5e:d8:99:57:c2:88:3b:02:df:00:ad:e8:93:80: 20:7e:3d:71:40:20:5f:42:bc:69:4c:9f:2b:9e:ac:dd:11:a3: 1e:c4:e3:98:75:50:9f:13:fc:af:2b:bb:c7:3d:3b:d0:15:f5: 8b:73:15:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMXQEljMefIN5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZWUzYmU3YTgtNWUxNy00M2ZmLWFmNzctZDFkYjIyOTE1MjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHjSLVUtGSHbReu9oPuAQyTQ9CcBmkbCUVdq AWoimHmXE7HXxWA2T6c6YNXWi8d1vF1ow6N9sIwPMdRzHE+bS4ngNWkfg6+agwGF UHhuzoC+2N3xYzfr3DMBMrLoxpEGF991lyqCAU4d/9J4VrgqioDpY8LlZYYeW0s2 w4vyD4iujVTJrVyqPbk9E94n/twRVw2L7zg5nPpj7MxopI9YZD87EF2RYY98JO17 QWpbKVrE3qXETCVrOtZPpFi1Sb9ybNmM2Rp6wY3ZM5kLQ7+DysXkATwtkxfQHvdp Es/6LSJZGCrB20KZSU2viViaIC9Z7H9Bk8T2O3XlYc3NMDo7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8fyMs9ooxmJpLUXT0tSM3XeOc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTUwYjU5NTQtZTg0YS0z NDc2LWI3M2UtNTdhMzhiZjMwMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHzafDOFfd6TuM/xCkpvGIdViVGLVWuwi2QA5Mk2nnkXj61T71NLeBO df9OgJWWSWNoHmq6fnd5kSVOQKr/jJjF76bzMQLCd+tJw12xpn/NJ02+hvzNDWo+ 0lPDUFv4P6nuAoE89SB9EN+qgqQ52N0Uvo99Al6tW5+QN9m1z8tacYI0DSwe0YXg d4+kIqwCDVt9uqCFygam6tin4MD/BmcwcHrLRUDsQQ+xqEXOMY7Qek7iWeHpkXs/ 2+v/v5a65v7JH2+RPDtDfNZe2JlXwog7At8AreiTgCB+PXFAIF9CvGlMnyuerN0R ox7E45h1UJ8T/K8ru8c9O9AV9YtzFck= -----END CERTIFICATE-----Generated at Tue Oct 21 22:05:58 2025 by rpki-client