$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97b79125-7ad4-323a-b490-0000c317db2b.roa File: 97b79125-7ad4-323a-b490-0000c317db2b.roa (raw, json) Hash identifier: dh7t7iJWT5HDOiNXcQjJxR3vrjyhtxJnWol64NxOcAU= Subject key identifier: 28:03:CD:8F:42:9F:8F:60:74:30:D7:39:57:47:BF:23:07:44:3D:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C87D428C025C9E39C500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97b79125-7ad4-323a-b490-0000c317db2b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.51.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c8:7d:42:8c:02:5c:9e:39:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3933e7bb-5b04-451b-b3f8-e41bebe6c62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b6:23:b8:56:71:fa:72:da:02:d8:2f:c3:9c: e7:78:b3:c5:b4:f3:08:52:b5:ae:78:58:27:18:bc: 65:7e:d8:c6:20:e8:23:f9:d4:d0:62:60:3a:74:81: e3:a1:e4:29:ad:03:52:43:8b:c7:7e:38:ce:b3:b8: 8e:2f:dc:06:28:98:09:5e:f2:14:b3:00:20:73:d5: 50:bf:e3:0c:f4:bd:a2:64:f7:84:4e:1c:47:72:6e: 57:de:b5:62:cf:e2:2d:23:67:2a:9b:da:54:7a:a8: 96:23:32:72:5b:52:98:2d:0c:69:c1:9a:b2:a2:b0: 1f:68:40:18:44:7c:7b:c4:6a:00:c1:c4:a6:fc:0d: f8:34:c1:15:fa:99:bc:be:e0:36:04:46:de:f7:93: 94:67:c4:6d:09:62:60:4d:95:54:bc:64:34:9b:71: 60:68:cf:b6:8f:c8:85:39:76:56:0d:d2:97:f5:f7: c8:61:06:b7:4f:85:73:f8:e9:46:9c:ed:65:51:02: 78:73:a3:f0:96:c1:49:99:b9:82:14:0f:e2:e3:c4: ef:19:45:c5:13:63:1f:bf:72:52:c2:85:59:c7:7d: f3:12:e8:8a:09:32:6a:08:17:78:29:4e:ad:6e:d4: b5:38:16:b6:e7:b5:20:e9:eb:ea:60:e6:ef:0f:99: 63:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:03:CD:8F:42:9F:8F:60:74:30:D7:39:57:47:BF:23:07:44:3D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97b79125-7ad4-323a-b490-0000c317db2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:57:b0:ab:bb:cc:82:9b:2c:98:ea:51:e1:f0:b5:9a:05:7a: 90:08:71:1b:63:73:9a:a1:86:bb:13:ac:34:7c:f7:a5:e3:64: 76:5c:aa:9b:3d:05:68:14:83:94:9b:76:b8:1d:08:d5:9f:54: 6a:a4:71:88:8d:e5:36:ed:f4:d4:e6:3d:0f:10:ff:f3:2e:e0: f3:5a:e2:e4:5f:19:e6:5e:76:c5:00:f6:80:d7:ad:f5:52:a3: 1a:52:46:1a:cc:e0:7c:1b:f2:d1:d3:b1:cc:65:f4:6c:eb:42: 00:6f:1a:07:21:14:bd:2b:5f:b3:6f:82:fc:20:fb:a7:9e:99: cb:5d:07:3d:d6:70:81:28:f3:3b:ba:c6:84:fe:df:80:9e:6b: 1b:c8:cd:24:e8:7e:ac:5a:6b:45:60:bd:1d:aa:0b:d9:cb:8b: ec:57:e2:e2:d3:8e:7d:91:cc:94:9b:92:ef:61:1f:53:e1:66: d1:9e:05:6d:d4:94:ee:1b:2c:a8:90:0d:5b:ce:a5:d7:49:ef: d9:d1:40:7c:c0:d1:43:75:a3:aa:a5:df:92:79:e6:ef:f9:cb: 9e:1f:56:33:81:85:23:27:23:1a:f0:a1:1b:c4:72:b4:d8:f5: e9:64:ee:56:b1:5f:31:d2:75:af:ef:49:a6:d7:b1:00:0a:40: fa:53:cc:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMh9QowCXJ45xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MzkzM2U3YmItNWIwNC00NTFiLWIzZjgtZTQxYmViZTZjNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7YjuFZx+nLaAtgvw5zneLPFtPMIUrWueFgn GLxlftjGIOgj+dTQYmA6dIHjoeQprQNSQ4vHfjjOs7iOL9wGKJgJXvIUswAgc9VQ v+MM9L2iZPeEThxHcm5X3rViz+ItI2cqm9pUeqiWIzJyW1KYLQxpwZqyorAfaEAY RHx7xGoAwcSm/A34NMEV+pm8vuA2BEbe95OUZ8RtCWJgTZVUvGQ0m3FgaM+2j8iF OXZWDdKX9ffIYQa3T4Vz+OlGnO1lUQJ4c6PwlsFJmbmCFA/i48TvGUXFE2Mfv3JS woVZx33zEuiKCTJqCBd4KU6tbtS1OBa257Ug6evqYObvD5ljoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgDzY9Cn49gdDDXOVdHvyMHRD0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTdiNzkxMjUtN2FkNC0z MjNhLWI0OTAtMDAwMGMzMTdkYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9XsKu7zIKbLJjqUeHwtZoFepAIcRtjc5qhhrsTrDR896XjZHZcqps9 BWgUg5SbdrgdCNWfVGqkcYiN5Tbt9NTmPQ8Q//Mu4PNa4uRfGeZedsUA9oDXrfVS oxpSRhrM4Hwb8tHTscxl9GzrQgBvGgchFL0rX7Nvgvwg+6eemctdBz3WcIEo8zu6 xoT+34CeaxvIzSTofqxaa0VgvR2qC9nLi+xX4uLTjn2RzJSbku9hH1PhZtGeBW3U lO4bLKiQDVvOpddJ79nRQHzA0UN1o6ql35J55u/5y54fVjOBhSMnIxrwoRvEcrTY 9elk7laxXzHSda/vSabXsQAKQPpTzEY= -----END CERTIFICATE-----Generated at Tue Oct 21 19:40:37 2025 by rpki-client