$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bddd19f8-5a45-3afa-88e4-e740114b72e3.roa File: bddd19f8-5a45-3afa-88e4-e740114b72e3.roa (raw, json) Hash identifier: eZw/rPXcV2y0khhTmTmhM8w0HyGmD85/arr0JtKf2UI= Subject key identifier: 8D:8C:69:9C:1E:72:90:F1:CB:B0:A4:21:54:58:DE:B9:95:62:73:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8AF5B0DB44FF7FB69CD90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bddd19f8-5a45-3afa-88e4-e740114b72e3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.34.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:af:5b:0d:b4:4f:f7:fb:69:cd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c848f101-2666-4186-b6ab-859004d1c147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:d5:98:23:cf:15:82:8a:ec:d0:77:4e:75: 56:62:16:7f:e7:95:b9:56:1f:a3:09:4c:6c:fe:91: ac:5b:03:51:0b:ae:f1:78:d0:9e:05:c0:4b:bc:dc: 47:41:0c:d1:ce:3c:23:f6:43:0d:08:dd:38:32:86: d0:6f:35:93:58:06:88:3d:9d:3c:c1:22:17:fe:94: e2:c0:96:21:07:83:15:9a:24:dc:b2:b5:11:a3:54: 7f:9f:7f:7d:a2:67:d0:8b:3b:0d:e6:7e:b6:5e:21: be:83:e9:19:2f:c0:e3:e0:8c:2e:e1:8a:03:e3:b9: d6:19:c0:40:51:ea:d3:67:0a:37:b4:ec:90:e1:3b: 26:ec:a6:d2:b0:7d:7c:6f:6b:7b:8f:6a:36:59:a2: 86:cf:f3:86:24:da:a9:b0:aa:b4:bd:e4:11:79:a6: cd:e4:e5:32:5a:23:0c:ea:71:1f:e0:c3:1a:4c:6d: 25:13:02:f1:a5:25:4c:08:4d:71:21:62:bd:7d:a8: 36:8e:c0:7c:62:43:5d:0e:0e:69:ec:66:ee:9f:c3: bf:62:f4:b2:91:73:31:32:20:57:67:69:85:83:47: b0:f6:eb:b0:4f:8a:ce:ba:de:ce:3f:61:0e:37:3e: bb:7c:f6:cf:0a:c2:cf:9b:fe:93:6b:b5:8d:2f:30: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8C:69:9C:1E:72:90:F1:CB:B0:A4:21:54:58:DE:B9:95:62:73:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bddd19f8-5a45-3afa-88e4-e740114b72e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:45:ce:f4:a2:fd:d3:b3:62:86:da:6e:a7:8f:49:fa:da:74: 74:37:2f:9a:97:4e:d2:35:6a:90:d5:ae:99:90:26:9b:ca:bd: bc:31:d9:d6:70:f9:b3:f5:bc:4b:8d:57:ff:e9:a2:6e:c7:2a: a3:d9:42:ae:c8:28:9b:5c:e3:71:83:66:a6:de:b1:87:51:1d: 2c:b3:a8:00:8c:a5:76:9d:6b:e9:05:e2:79:03:af:76:3f:96: 64:56:a5:ee:f5:d0:09:f0:38:52:78:f9:46:be:13:12:1b:b6: 3f:b5:04:6f:43:dc:3b:4f:1e:1c:3b:af:6a:70:cd:07:e2:12: 2c:87:04:e9:76:1b:ff:1f:85:76:f9:1e:18:f6:dd:11:d6:ec: 8a:e1:98:09:b4:d4:8f:a9:33:25:11:39:46:77:c3:76:cd:8a: e1:b8:a6:b2:ca:71:68:54:a7:0c:d5:22:45:55:c6:f1:36:18: bc:e4:2a:25:3a:dd:40:7e:44:61:84:8d:4d:11:f0:24:4a:55: e6:d0:88:2b:8d:22:97:a1:c8:80:17:d9:16:1b:f5:62:6e:34: 78:23:e7:3b:d0:07:b6:a1:6f:14:05:7c:68:dd:83:1e:3b:09: 89:77:fe:db:77:af:9c:57:37:3f:4a:6c:2a:91:0c:e0:b6:79: 9a:ab:4b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqK9bDbRP9/tpzZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Yzg0OGYxMDEtMjY2Ni00MTg2LWI2YWItODU5MDA0ZDFjMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW7VmCPPFYKK7NB3TnVWYhZ/55W5Vh+jCUxs /pGsWwNRC67xeNCeBcBLvNxHQQzRzjwj9kMNCN04MobQbzWTWAaIPZ08wSIX/pTi wJYhB4MVmiTcsrURo1R/n399omfQizsN5n62XiG+g+kZL8Dj4Iwu4YoD47nWGcBA UerTZwo3tOyQ4Tsm7KbSsH18b2t7j2o2WaKGz/OGJNqpsKq0veQReabN5OUyWiMM 6nEf4MMaTG0lEwLxpSVMCE1xIWK9fag2jsB8YkNdDg5p7Gbun8O/YvSykXMxMiBX Z2mFg0ew9uuwT4rOut7OP2EONz67fPbPCsLPm/6Ta7WNLzBVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2MaZwecpDxy7CkIVRY3rmVYnPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmRkZDE5ZjgtNWE0NS0z YWZhLTg4ZTQtZTc0MDExNGI3MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCI2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9FzvSi/dOzYobabqePSfradHQ3L5qXTtI1apDVrpmQJpvKvbwx2dZw +bP1vEuNV//pom7HKqPZQq7IKJtc43GDZqbesYdRHSyzqACMpXada+kF4nkDr3Y/ lmRWpe710AnwOFJ4+Ua+ExIbtj+1BG9D3DtPHhw7r2pwzQfiEiyHBOl2G/8fhXb5 Hhj23RHW7IrhmAm01I+pMyUROUZ3w3bNiuG4prLKcWhUpwzVIkVVxvE2GLzkKiU6 3UB+RGGEjU0R8CRKVebQiCuNIpehyIAX2RYb9WJuNHgj5zvQB7ahbxQFfGjdgx47 CYl3/tt3r5xXNz9KbCqRDOC2eZqrSxw= -----END CERTIFICATE-----Generated at Tue Oct 21 19:23:48 2025 by rpki-client