$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b08b7563-4f7c-385c-b6f4-9fead572b03b.roa File: b08b7563-4f7c-385c-b6f4-9fead572b03b.roa (raw, json) Hash identifier: m6P+KLTms8z0TtnNA9KVrIADkzSkUKcsUe4BZKCJV18= Subject key identifier: 5B:59:74:6B:16:E3:91:FE:3B:19:E8:C2:BA:BE:72:27:15:F3:69:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA6115DE9228884D5B7B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b08b7563-4f7c-385c-b6f4-9fead572b03b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.43.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:61:15:de:92:28:88:4d:5b:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e0f05f14-f644-4ad3-89a0-a4bdbcb29996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:a6:a6:d9:83:ca:0c:44:ca:81:c5:e3:a7: 11:fe:0c:af:6f:c3:8c:cf:68:cf:67:0e:08:48:9f: a6:b4:07:f4:20:a2:10:0c:90:b0:a4:84:3d:fa:04: 82:2c:e0:82:10:bc:94:79:cb:7a:d9:e9:41:cd:9c: f9:c7:b3:eb:80:48:88:b2:22:48:ad:24:9f:c4:2c: 38:22:c4:cb:33:76:a4:ae:2c:44:56:cd:fe:81:d0: 1f:d9:dd:cb:12:1f:8b:24:52:2c:20:52:fb:92:a0: 48:e3:9c:c3:2e:57:a0:48:fd:80:cb:fe:8c:a8:4d: 90:2a:20:8f:05:84:7f:7f:17:e6:a8:d0:74:8f:16: 41:2b:e9:5b:a2:fe:bd:91:f8:5a:9e:d1:f4:24:5c: a2:8b:3b:88:0e:ab:83:b3:4a:a7:f1:ca:bd:65:7a: 12:3a:95:4a:55:2d:14:45:0b:44:4a:86:bc:cf:7a: 49:65:e0:f1:ac:9c:6a:fc:50:55:cb:71:84:b5:86: fc:1b:92:7b:22:f6:5c:5b:94:b5:62:1e:71:94:0f: 74:05:55:28:2b:22:ed:82:98:6f:bc:0b:0a:9e:8e: 37:c7:d9:3b:44:20:d4:20:85:47:56:c4:1a:fa:eb: 86:26:77:75:ad:52:0e:f6:af:b1:dd:45:85:b5:dd: f0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:59:74:6B:16:E3:91:FE:3B:19:E8:C2:BA:BE:72:27:15:F3:69:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b08b7563-4f7c-385c-b6f4-9fead572b03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:49:96:c7:1b:d8:27:6b:86:a9:f9:8c:d1:38:e7:79:a2:4e: 00:fe:e7:9b:cf:c5:f3:f5:1f:9f:2b:85:a0:88:d3:1d:9e:0d: c5:b5:70:f0:6a:ed:5e:0c:a9:05:81:12:dd:c6:20:67:d5:b2: 7e:d6:e2:86:d0:cf:68:54:a9:8d:63:ef:d8:7d:6c:18:6d:e8: 93:20:6f:85:cb:d0:92:f0:3a:dd:2c:a9:d3:55:13:bd:86:b4: 55:ce:ba:db:53:2c:bd:54:07:3e:ed:e9:25:29:08:0f:85:50: 3c:e8:f4:21:6e:3a:e9:d8:48:15:05:c7:f8:e4:3d:4e:c7:3d: 6e:ce:7f:5d:35:22:78:ef:d4:ea:fc:a2:65:af:4c:96:39:3a: 8b:4f:f1:7b:1a:7f:7d:b2:30:1f:44:e4:64:a4:ec:77:c0:78: b9:78:97:46:e7:a9:82:60:d9:a5:83:24:f1:46:4c:bd:ef:aa: 2e:a2:ed:f0:49:1d:46:35:c7:f3:68:3b:c6:35:be:4f:8e:9a: 08:a4:21:b9:7e:60:85:28:cc:c3:7d:f8:8f:5d:38:1b:54:c9: 1b:31:f7:e0:d2:a7:f7:ea:12:88:d2:7f:f4:03:c9:97:c4:10: fd:c3:21:92:ce:46:c8:3e:e3:8b:26:8e:14:04:36:dd:89:f7: 08:a4:d2:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqmEV3pIoiE1bewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTBmMDVmMTQtZjY0NC00YWQzLTg5YTAtYTRiZGJjYjI5OTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfemptmDygxEyoHF46cR/gyvb8OMz2jPZw4I SJ+mtAf0IKIQDJCwpIQ9+gSCLOCCELyUect62elBzZz5x7PrgEiIsiJIrSSfxCw4 IsTLM3akrixEVs3+gdAf2d3LEh+LJFIsIFL7kqBI45zDLlegSP2Ay/6MqE2QKiCP BYR/fxfmqNB0jxZBK+lbov69kfhantH0JFyiizuIDquDs0qn8cq9ZXoSOpVKVS0U RQtESoa8z3pJZeDxrJxq/FBVy3GEtYb8G5J7IvZcW5S1Yh5xlA90BVUoKyLtgphv vAsKno43x9k7RCDUIIVHVsQa+uuGJnd1rVIO9q+x3UWFtd3w6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtZdGsW45H+Oxnowrq+cicV82nLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjA4Yjc1NjMtNGY3Yy0z ODVjLWI2ZjQtOWZlYWQ1NzJiMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdJlscb2Cdrhqn5jNE453miTgD+55vPxfP1H58rhaCI0x2eDcW1cPBq 7V4MqQWBEt3GIGfVsn7W4obQz2hUqY1j79h9bBht6JMgb4XL0JLwOt0sqdNVE72G tFXOuttTLL1UBz7t6SUpCA+FUDzo9CFuOunYSBUFx/jkPU7HPW7Of101Injv1Or8 omWvTJY5OotP8Xsaf32yMB9E5GSk7HfAeLl4l0bnqYJg2aWDJPFGTL3vqi6i7fBJ HUY1x/NoO8Y1vk+OmgikIbl+YIUozMN9+I9dOBtUyRsx9+DSp/fqEojSf/QDyZfE EP3DIZLORsg+44smjhQENt2J9wik0oE= -----END CERTIFICATE-----Generated at Wed Oct 22 00:18:45 2025 by rpki-client