$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1e6a5a0-67e7-3dbc-aa6a-d954e558c8bc.roa File: b1e6a5a0-67e7-3dbc-aa6a-d954e558c8bc.roa (raw, json) Hash identifier: NVDietrfK2Td3ilPjDbs93rrs+dqGhNCbdjnAEVoeOk= Subject key identifier: 98:EE:E5:53:86:89:88:82:41:36:4C:BB:61:37:17:B4:FA:06:CE:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA6D497163C94F91C1F880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1e6a5a0-67e7-3dbc-aa6a-d954e558c8bc.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.56.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:6d:49:71:63:c9:4f:91:c1:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f31a0e43-ad5e-4edd-add2-ca607ba6a637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:e2:f1:f8:7d:49:08:8f:4e:e3:16:97:89: 83:ef:73:cf:52:c3:5e:00:bc:51:15:e0:4c:98:d5: 92:a8:35:89:a4:ea:14:d5:fc:df:e3:78:3f:5c:32: 41:6c:cf:4f:a3:8e:91:8f:aa:8a:4a:8d:46:a6:c6: 14:ed:ff:9b:e6:ed:2e:e3:5f:6f:f5:d2:09:1a:3d: 40:17:d6:4f:6b:45:bb:5d:e1:c1:4f:df:da:86:22: b3:11:a0:2e:0f:29:e5:8c:57:2e:ab:fc:30:0e:2c: 55:ff:9d:5f:09:fe:da:03:1a:27:fc:92:30:bb:12: 7e:ac:5c:4a:56:93:73:b3:77:c4:b5:36:86:2d:1d: 4a:f0:a9:08:16:18:0d:f2:df:3c:82:54:05:3a:0d: 6e:df:4b:d7:92:24:54:fe:32:2f:4a:39:7d:c9:c8: b1:07:f4:88:4c:bd:b9:73:58:f0:06:67:ce:be:64: 6a:64:95:ba:1b:c4:5d:6b:5a:de:26:d3:64:d4:06: d5:21:14:0b:13:ce:d0:81:f1:84:d1:38:50:c0:11: 9a:e1:19:4b:58:71:e0:74:d8:ab:40:23:f5:4b:b2: 9e:71:c7:43:29:c9:6c:c1:12:da:38:63:b5:b7:a2: 9e:1d:61:e0:55:81:97:de:0a:12:68:3b:8d:ba:ca: 8c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EE:E5:53:86:89:88:82:41:36:4C:BB:61:37:17:B4:FA:06:CE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1e6a5a0-67e7-3dbc-aa6a-d954e558c8bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f1:0d:b2:53:44:e2:a3:ed:4d:c5:57:67:67:4e:f1:b6:49: cc:5f:39:d9:76:8a:a6:c2:8c:25:6e:cb:da:dc:dd:d6:b2:f1: ef:a9:de:1d:bc:46:cd:6b:73:f8:be:73:c7:6f:56:a8:3b:eb: fb:79:1c:7d:9a:fc:7d:79:d2:e7:69:f8:1a:8d:5b:cd:68:b9: 5b:e5:a1:00:4d:7d:67:24:21:70:05:0d:4d:c4:8d:fc:45:ea: 39:31:3a:f4:7a:3f:66:e8:f8:ae:d5:23:96:5f:3b:ee:69:ac: ed:00:e0:7c:e4:d6:6d:2c:00:43:56:3b:99:b6:8a:e2:4f:99: 94:f8:8d:6d:02:ac:80:4a:12:94:15:9e:60:45:0c:9d:ab:49: d4:f0:4e:8e:2b:17:a3:f6:6f:a1:99:a6:2e:67:58:8e:a7:2e: e7:4e:e7:37:6d:fa:68:28:c7:f7:dc:1d:41:9b:83:a1:0f:9b: ec:62:7c:05:8d:7a:44:44:6f:5d:80:f7:38:dd:e2:c0:f0:36: b5:58:e9:13:44:b8:43:11:f7:1c:78:6c:28:44:e1:bc:e5:45: 07:e5:99:dd:82:98:ef:d3:a4:c8:ae:a6:e5:22:5b:4f:6e:95: 80:2b:f6:8a:20:45:ad:28:b6:5b:1d:3d:c7:b3:a5:c0:84:d6: 87:77:d1:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqm1JcWPJT5HB+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjMxYTBlNDMtYWQ1ZS00ZWRkLWFkZDItY2E2MDdiYTZhNjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ri8fh9SQiPTuMWl4mD73PPUsNeALxRFeBM mNWSqDWJpOoU1fzf43g/XDJBbM9Po46Rj6qKSo1GpsYU7f+b5u0u419v9dIJGj1A F9ZPa0W7XeHBT9/ahiKzEaAuDynljFcuq/wwDixV/51fCf7aAxon/JIwuxJ+rFxK VpNzs3fEtTaGLR1K8KkIFhgN8t88glQFOg1u30vXkiRU/jIvSjl9ycixB/SITL25 c1jwBmfOvmRqZJW6G8Rda1reJtNk1AbVIRQLE87QgfGE0ThQwBGa4RlLWHHgdNir QCP1S7KeccdDKclswRLaOGO1t6KeHWHgVYGX3goSaDuNusqMTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJju5VOGiYiCQTZMu2E3F7T6Bs7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjFlNmE1YTAtNjdlNy0z ZGJjLWFhNmEtZDk1NGU1NThjOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnxDbJTROKj7U3FV2dnTvG2ScxfOdl2iqbCjCVuy9rc3day8e+p3h28 Rs1rc/i+c8dvVqg76/t5HH2a/H150udp+BqNW81ouVvloQBNfWckIXAFDU3EjfxF 6jkxOvR6P2bo+K7VI5ZfO+5prO0A4Hzk1m0sAENWO5m2iuJPmZT4jW0CrIBKEpQV nmBFDJ2rSdTwTo4rF6P2b6GZpi5nWI6nLudO5zdt+mgox/fcHUGbg6EPm+xifAWN ekREb12A9zjd4sDwNrVY6RNEuEMR9xx4bChE4bzlRQflmd2CmO/TpMiupuUiW09u lYAr9oogRa0otlsdPcezpcCE1od30Q8= -----END CERTIFICATE-----Generated at Tue Oct 21 21:30:05 2025 by rpki-client