$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae17a50b-f7bc-3eec-83cd-cb5830d93dbb.roa File: ae17a50b-f7bc-3eec-83cd-cb5830d93dbb.roa (raw, json) Hash identifier: DQ1SPROirjNRTj8PnYlTxTxdDcwz98rF3qMZbUwgvQw= Subject key identifier: 5C:65:B1:E5:D9:B3:51:B5:6C:37:4D:14:7B:46:94:06:9E:E2:F2:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA55F3815EF4C92AD15C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae17a50b-f7bc-3eec-83cd-cb5830d93dbb.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.37.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:55:f3:81:5e:f4:c9:2a:d1:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4d96a0fb-4857-481c-8c78-5f922363a643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:ce:ee:99:0d:63:ff:36:d9:41:b2:a0:87: 45:78:6d:72:8b:aa:66:b5:09:fc:9d:cb:0f:33:58: a9:aa:b7:01:64:8c:80:1f:67:05:07:74:32:50:2b: 22:db:67:89:b3:8c:ee:11:48:89:f9:7f:f7:ef:8a: 32:76:4f:51:dc:c6:1c:31:b7:cb:1a:5e:9e:0b:9b: f4:e1:85:97:13:89:60:e5:bf:2a:da:10:39:2b:20: fa:29:8e:f1:6c:45:58:44:56:8e:7d:e1:31:ad:3d: b6:16:d9:6b:f1:ea:fe:0c:c8:62:40:9c:43:ca:d8: a9:21:c7:fe:ea:16:02:fd:c0:13:59:a5:e1:7f:ef: a6:e8:95:64:55:72:eb:16:29:71:d3:30:4d:a0:76: 72:cf:5f:5c:7d:3b:ca:00:93:3d:e9:17:ff:d7:33: d7:5e:44:c3:07:be:1e:f7:fb:91:53:e8:84:ce:7b: 3d:8a:60:74:fe:e3:07:24:64:dc:d8:fa:77:fb:ae: ac:31:de:d1:e2:21:26:f5:c5:02:d1:1f:53:99:bb: 96:c9:24:68:1d:df:36:10:54:88:bf:93:9d:0b:8b: 0a:77:47:af:33:aa:61:c0:fa:b5:48:b3:6e:64:ee: 2b:0e:bc:b0:a9:f4:b2:76:89:87:2e:2f:94:43:11: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:65:B1:E5:D9:B3:51:B5:6C:37:4D:14:7B:46:94:06:9E:E2:F2:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae17a50b-f7bc-3eec-83cd-cb5830d93dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:7b:3e:47:1f:00:26:df:f6:ae:38:a0:b4:c7:4e:79:51:2c: c7:46:fe:22:b1:2c:8d:9e:38:fa:57:1b:59:fe:49:59:4b:55: ce:94:14:24:17:d7:79:bf:2c:c5:6c:a5:08:9e:40:50:e0:08: 99:e2:23:1e:ee:3a:85:56:c6:36:ff:f0:ab:66:2f:2a:ae:09: 50:a9:06:96:b2:01:4a:5a:b7:9f:98:85:8b:34:f3:c2:dc:e1: c7:d6:5a:50:89:a9:7f:05:2e:7c:80:51:09:a0:cf:14:5e:3a: c6:07:73:d0:4b:b1:24:cc:7b:7a:ce:42:56:de:b3:17:4c:93: f1:b5:76:be:a7:67:f3:0b:53:86:f1:0e:6b:8b:40:80:21:05: 81:be:4f:2e:4e:af:a0:81:42:de:6e:98:28:c2:a4:f4:ab:11: 0a:8f:79:06:6f:da:c0:92:a2:cb:49:06:74:88:2c:d2:df:df: 35:f1:69:0c:84:f6:c9:76:5a:f8:ed:12:aa:af:93:97:6d:3d: f6:af:a5:bd:3e:75:7f:5f:04:f7:bd:c3:1c:5e:23:f5:aa:e4: 4b:a4:99:a6:97:81:ac:5b:e6:2b:ee:cd:1c:e1:0e:18:4b:a1: 5e:f3:fd:3f:e3:7c:48:5e:a4:0d:be:b2:9e:dd:2d:97:2e:0b: e4:0e:77:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlXzgV70ySrRXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGQ5NmEwZmItNDg1Ny00ODFjLThjNzgtNWY5MjIzNjNhNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu23O7pkNY/822UGyoIdFeG1yi6pmtQn8ncsP M1ipqrcBZIyAH2cFB3QyUCsi22eJs4zuEUiJ+X/374oydk9R3MYcMbfLGl6eC5v0 4YWXE4lg5b8q2hA5KyD6KY7xbEVYRFaOfeExrT22Ftlr8er+DMhiQJxDytipIcf+ 6hYC/cATWaXhf++m6JVkVXLrFilx0zBNoHZyz19cfTvKAJM96Rf/1zPXXkTDB74e 9/uRU+iEzns9imB0/uMHJGTc2Pp3+66sMd7R4iEm9cUC0R9TmbuWySRoHd82EFSI v5OdC4sKd0evM6phwPq1SLNuZO4rDrywqfSydomHLi+UQxF8AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxlseXZs1G1bDdNFHtGlAae4vLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWUxN2E1MGItZjdiYy0z ZWVjLTgzY2QtY2I1ODMwZDkzZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt7PkcfACbf9q44oLTHTnlRLMdG/iKxLI2eOPpXG1n+SVlLVc6UFCQX 13m/LMVspQieQFDgCJniIx7uOoVWxjb/8KtmLyquCVCpBpayAUpat5+YhYs088Lc 4cfWWlCJqX8FLnyAUQmgzxReOsYHc9BLsSTMe3rOQlbesxdMk/G1dr6nZ/MLU4bx DmuLQIAhBYG+Ty5Or6CBQt5umCjCpPSrEQqPeQZv2sCSostJBnSILNLf3zXxaQyE 9sl2WvjtEqqvk5dtPfavpb0+dX9fBPe9wxxeI/Wq5EukmaaXgaxb5ivuzRzhDhhL oV7z/T/jfEhepA2+sp7dLZcuC+QOd1s= -----END CERTIFICATE-----Generated at Tue Oct 21 21:56:34 2025 by rpki-client