$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b85d4820-6b00-3c42-8e82-8fb9103e02aa.roa File: b85d4820-6b00-3c42-8e82-8fb9103e02aa.roa (raw, json) Hash identifier: bB6Yov03Chch6WeuzAAmQF4/6hNUEm0rTsstKZfd3q4= Subject key identifier: 60:A5:D3:DD:5D:BF:84:01:C4:83:7E:B8:5B:47:4F:9D:97:FC:29:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A960DCB5CB80597551AF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b85d4820-6b00-3c42-8e82-8fb9103e02aa.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 67.189.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:60:dc:b5:cb:80:59:75:51:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=586e6935-d73b-4e1f-aa92-4206470687c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:30:64:4f:1e:e1:0d:11:ef:6e:93:ed:57: a4:7b:9f:68:cf:76:f7:a0:c8:b9:9e:0d:57:18:64: 65:54:ca:03:50:d3:d7:4c:aa:9a:4e:19:dc:b6:b7: 34:7a:32:f6:43:5b:6c:5f:f5:14:22:77:dc:65:ca: 78:c3:88:e2:5c:26:19:17:e1:0b:f3:7f:80:18:c0: 13:09:04:c5:f9:ac:e9:2c:d1:31:fa:86:11:ed:e3: cd:38:2b:18:28:e7:c9:e3:41:f7:53:3b:21:67:55: 55:68:6d:17:81:21:ef:34:23:4c:be:42:29:12:ae: d0:01:5a:dd:30:87:e6:66:9d:71:c0:e5:66:d9:4e: bc:9c:ae:27:f5:3f:df:ed:5a:68:bf:5e:40:1d:a4: 6b:97:a5:14:f7:eb:f0:08:9d:16:9d:1a:f3:9d:48: 2b:a9:84:2b:f8:26:4b:91:9a:fa:5f:80:a1:4a:8a: 64:d2:6d:c2:d9:3b:f2:f5:7e:bf:e6:6b:ca:4a:14: ae:28:1f:00:01:fa:fd:45:4c:ad:7c:53:ec:4d:f9: b0:52:4d:3c:cd:d6:b0:ae:9b:e2:e0:61:79:26:7a: 47:9b:51:52:03:fa:f4:3b:90:47:91:5a:63:28:70: 32:89:3f:a1:3d:b9:52:e7:2c:d8:ff:a2:64:f2:cd: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A5:D3:DD:5D:BF:84:01:C4:83:7E:B8:5B:47:4F:9D:97:FC:29:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b85d4820-6b00-3c42-8e82-8fb9103e02aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:70:7e:a3:bf:2c:2a:5e:28:ff:0d:5b:69:37:58:ae:f0:74: 8d:6a:fd:a4:74:28:6a:f7:3c:44:76:0f:01:f9:e7:da:4d:50: 65:bb:d5:7a:82:ed:c4:60:6c:2d:81:85:f5:d6:65:7e:e3:2c: 26:14:c7:a7:7d:55:b4:11:2c:b7:22:0f:92:9a:ea:ca:c2:44: 3d:46:fd:a3:51:18:16:4e:7e:22:91:fb:bf:fe:99:c5:64:b3: c7:cb:e5:a6:c1:c7:bc:00:be:f4:b7:0e:a3:7d:a7:a5:e9:21: 12:e7:62:49:92:c4:5d:f5:a6:f4:9e:f2:df:d9:fe:68:bb:c8: 64:f7:2a:24:5a:34:67:87:7a:02:77:13:e2:18:76:05:cf:dc: 98:0e:4d:04:f4:8a:b1:4e:f4:29:e0:8d:1c:70:0c:59:63:77: 8d:9e:1c:0a:4e:ca:8f:8b:1e:90:3e:cf:13:90:5a:f2:f2:c7: b0:fb:f7:ca:b4:9c:95:48:57:d6:c3:c2:11:c7:bb:02:16:24: d1:23:b1:b8:1f:87:f3:20:fb:40:ae:b4:97:24:1b:2b:95:3e: ce:92:af:13:e2:21:78:7f:99:25:86:21:84:3d:7e:62:ff:25: d4:43:53:40:8d:02:00:4e:cb:a7:75:f5:48:9b:7e:31:6a:51: a6:1e:f8:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqWDctcuAWXVRr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NTg2ZTY5MzUtZDczYi00ZTFmLWFhOTItNDIwNjQ3MDY4N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMYwZE8e4Q0R726T7Veke59oz3b3oMi5ng1X GGRlVMoDUNPXTKqaThnctrc0ejL2Q1tsX/UUInfcZcp4w4jiXCYZF+EL83+AGMAT CQTF+azpLNEx+oYR7ePNOCsYKOfJ40H3UzshZ1VVaG0XgSHvNCNMvkIpEq7QAVrd MIfmZp1xwOVm2U68nK4n9T/f7Vpov15AHaRrl6UU9+vwCJ0WnRrznUgrqYQr+CZL kZr6X4ChSopk0m3C2Tvy9X6/5mvKShSuKB8AAfr9RUytfFPsTfmwUk08zdawrpvi 4GF5JnpHm1FSA/r0O5BHkVpjKHAyiT+hPblS5yzY/6Jk8s1PJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCl091dv4QBxIN+uFtHT52X/CntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjg1ZDQ4MjAtNmIwMC0z YzQyLThlODItOGZiOTEwM2UwMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ71sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINwfqO/LCpeKP8NW2k3WK7wdI1q/aR0KGr3PER2DwH559pNUGW71XqC 7cRgbC2BhfXWZX7jLCYUx6d9VbQRLLciD5Ka6srCRD1G/aNRGBZOfiKR+7/+mcVk s8fL5abBx7wAvvS3DqN9p6XpIRLnYkmSxF31pvSe8t/Z/mi7yGT3KiRaNGeHegJ3 E+IYdgXP3JgOTQT0irFO9CngjRxwDFljd42eHApOyo+LHpA+zxOQWvLyx7D798q0 nJVIV9bDwhHHuwIWJNEjsbgfh/Mg+0CutJckGyuVPs6SrxPiIXh/mSWGIYQ9fmL/ JdRDU0CNAgBOy6d19UibfjFqUaYe+FQ= -----END CERTIFICATE-----Generated at Tue Oct 21 21:56:43 2025 by rpki-client