$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd860549-3f89-30bd-a86a-e6550ed97700.roa File: bd860549-3f89-30bd-a86a-e6550ed97700.roa (raw, json) Hash identifier: l1kR7ZVn7K6yWpbu/Pt4W7ZCw6hnecSf2Zmzv8rlHe8= Subject key identifier: 47:63:85:93:8E:26:E6:73:B9:D5:8E:BD:0C:82:84:BC:CC:06:0E:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA523F5540DA238AED0200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd860549-3f89-30bd-a86a-e6550ed97700.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.34.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:52:3f:55:40:da:23:8a:ed:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=96c32038-f047-4ea9-8d07-cb4907c3fb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:cf:35:d9:74:e0:60:d6:93:fc:0a:33:02: 11:c4:73:87:80:2c:d1:f6:1e:9a:11:85:f7:8c:17: 43:41:29:2f:88:d7:a6:64:ce:c7:d3:74:b5:93:eb: 7a:0d:47:12:d5:95:de:5f:f6:4f:3d:76:d4:a2:2a: 0e:bf:1a:47:d0:63:7c:4d:e5:95:5a:0b:a2:2a:97: f1:08:a8:d6:7e:9b:3d:26:87:db:5c:b2:e8:54:22: 4c:d7:2d:2e:38:80:24:1d:47:5f:71:f8:1c:da:35: c4:3a:5f:e3:71:b8:65:15:57:24:d3:9c:e4:ee:09: a8:1b:66:22:77:6a:6a:20:ba:37:e4:8b:4f:e7:1b: 30:14:e9:1a:c1:f3:ae:2f:a3:9a:77:85:f5:46:b0: ac:b5:2d:76:ad:c5:8b:96:4a:f4:4a:55:c4:bc:0d: 5b:a1:40:71:9a:ef:6b:4c:dd:ff:7b:93:c0:14:50: 63:4a:f0:e1:79:3f:57:43:e3:33:64:cc:c8:db:8e: aa:cd:f3:75:b9:69:75:c8:04:31:90:91:b8:b8:1a: 7a:28:06:59:52:da:74:dd:8f:62:68:22:10:95:67: df:e1:44:5b:31:4b:5e:64:84:c8:53:6a:69:07:d4: 18:91:a3:35:a4:8e:7b:39:9e:3b:23:9b:6f:9a:8c: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:63:85:93:8E:26:E6:73:B9:D5:8E:BD:0C:82:84:BC:CC:06:0E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd860549-3f89-30bd-a86a-e6550ed97700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d9:8c:68:de:ae:a4:5d:e8:70:48:ac:bb:0d:6d:c4:5b:11: 09:15:6d:14:95:91:ba:67:cc:4d:65:ed:55:64:41:18:cb:a6: 8e:fb:6b:94:7e:b9:da:bc:7b:51:22:65:d9:7f:f8:04:e1:db: 9e:57:61:0b:d0:10:23:1a:61:87:62:e2:0c:7f:65:26:0d:a1: 37:36:ff:18:36:55:1a:4b:c7:ed:fd:5c:6c:0d:68:9c:91:f5: 85:0b:ab:f9:00:51:d6:4f:62:a7:48:ec:09:48:9e:bb:a3:aa: a6:c9:35:59:3b:83:8c:c4:f0:e2:1d:fb:3c:ad:4b:fb:5b:a5: 73:71:38:89:6d:1f:11:34:e9:fc:ce:bc:52:c0:46:90:96:63: fb:c3:42:b5:0d:20:28:75:3a:84:41:7a:33:a3:0b:9f:9a:30: 90:6c:4b:dd:84:30:d1:54:20:f3:b8:a5:5a:f7:4d:3c:61:b6: 8f:c5:4a:86:12:3e:ae:a5:a5:4e:65:23:b9:a2:00:34:3e:f5: b3:4b:6e:2b:67:d1:c3:67:de:ac:c0:bd:e0:a1:2e:5e:19:9f: 13:70:fe:bf:7e:34:a2:5d:b9:34:20:15:00:9d:43:84:4b:2a: 65:48:40:c3:60:21:af:4e:4f:5f:dc:ea:26:8b:af:73:23:f6: 65:69:ff:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlI/VUDaI4rtAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OTZjMzIwMzgtZjA0Ny00ZWE5LThkMDctY2I0OTA3YzNmYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSHPNdl04GDWk/wKMwIRxHOHgCzR9h6aEYX3 jBdDQSkviNemZM7H03S1k+t6DUcS1ZXeX/ZPPXbUoioOvxpH0GN8TeWVWguiKpfx CKjWfps9JofbXLLoVCJM1y0uOIAkHUdfcfgc2jXEOl/jcbhlFVck05zk7gmoG2Yi d2pqILo35ItP5xswFOkawfOuL6Oad4X1RrCstS12rcWLlkr0SlXEvA1boUBxmu9r TN3/e5PAFFBjSvDheT9XQ+MzZMzI246qzfN1uWl1yAQxkJG4uBp6KAZZUtp03Y9i aCIQlWff4URbMUteZITIU2ppB9QYkaM1pI57OZ47I5tvmoye3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdjhZOOJuZzudWOvQyChLzMBg6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ4NjA1NDktM2Y4OS0z MGJkLWE4NmEtZTY1NTBlZDk3NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXZjGjerqRd6HBIrLsNbcRbEQkVbRSVkbpnzE1l7VVkQRjLpo77a5R+ udq8e1EiZdl/+ATh255XYQvQECMaYYdi4gx/ZSYNoTc2/xg2VRpLx+39XGwNaJyR 9YULq/kAUdZPYqdI7AlInrujqqbJNVk7g4zE8OId+zytS/tbpXNxOIltHxE06fzO vFLARpCWY/vDQrUNICh1OoRBejOjC5+aMJBsS92EMNFUIPO4pVr3TTxhto/FSoYS Pq6lpU5lI7miADQ+9bNLbitn0cNn3qzAveChLl4ZnxNw/r9+NKJduTQgFQCdQ4RL KmVIQMNgIa9OT1/c6iaLr3Mj9mVp/2s= -----END CERTIFICATE-----Generated at Tue Oct 21 22:21:41 2025 by rpki-client