$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3bbf49-8b91-35b1-afc2-f34991aad29c.roa File: ca3bbf49-8b91-35b1-afc2-f34991aad29c.roa (raw, json) Hash identifier: gvBFUqmTxZmnCa+tfyLaU9AKvtdRPL1WIYbk1SopvUA= Subject key identifier: 5B:04:4B:0A:67:F9:BA:D3:A9:4D:00:61:CC:AD:E2:A7:58:52:F6:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8B5E73DD39F30C04A4EA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3bbf49-8b91-35b1-afc2-f34991aad29c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.37.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:b5:e7:3d:d3:9f:30:c0:4a:4e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=695d67d3-db77-481d-ab42-a2a55654d409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:ff:da:48:bf:0c:66:fc:90:11:97:3e:ae: f8:58:22:4c:7d:50:06:ef:f4:f6:d0:be:c1:44:dc: 6f:6f:5b:fa:24:90:0b:99:4c:9a:e4:10:a7:e3:2e: b2:e7:95:8d:5e:26:ff:a0:e4:83:44:d6:d2:15:f3: ae:fd:29:1c:61:5b:4f:54:a0:63:93:b4:f3:6a:fe: 85:a7:47:6a:24:71:67:6e:5a:92:7f:8d:7e:39:4d: a0:34:8c:41:00:1e:d1:0e:57:9f:e4:cf:bb:9d:99: 27:39:8f:d1:16:41:69:cc:63:0c:84:d3:b6:a9:7c: 51:ed:29:3e:45:27:41:98:30:76:73:64:06:79:93: f9:df:35:9a:70:5b:04:f8:cf:f6:81:c5:c6:e4:0b: c8:dd:19:75:5e:40:27:eb:fe:bf:a4:3d:fe:39:b5: 10:6a:80:63:b7:74:14:84:2c:22:de:48:1b:4c:ed: bf:71:98:1c:8c:67:68:47:36:9f:05:69:f8:ec:db: 91:95:87:56:6e:65:bc:67:ae:bf:af:8c:0f:23:62: ab:0b:d6:f7:02:48:e6:ce:5b:5c:4f:7f:01:ae:71: 25:1c:0f:fa:99:95:62:ba:ba:bc:f7:50:85:08:87: bf:41:5b:50:65:6d:d1:3a:92:2c:10:66:b8:c8:ca: bd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:04:4B:0A:67:F9:BA:D3:A9:4D:00:61:CC:AD:E2:A7:58:52:F6:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3bbf49-8b91-35b1-afc2-f34991aad29c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:6b:e5:2a:27:88:d8:01:cf:59:a7:32:5c:0d:c1:5b:93:e9: 18:6d:13:dd:06:81:c2:d1:cd:67:60:8d:a1:b1:ef:ad:6a:ce: 7d:9c:9c:13:c2:fc:4f:72:e9:92:ce:48:87:f7:3f:a5:ce:16: af:4d:ff:87:dd:fa:78:56:1e:c7:f9:f1:a1:6f:ed:58:34:5f: 61:5e:90:25:27:9a:43:d9:af:3f:1b:da:14:07:52:5c:f8:a0: 79:77:e3:cd:f1:3f:ef:36:4a:b8:c3:84:25:dc:15:9f:8d:7c: 62:06:fa:99:05:8c:27:81:0e:ee:d7:e7:03:0c:b0:32:c7:15: 69:9e:a4:8f:0e:51:73:63:78:cf:16:33:8a:66:05:1b:41:0a: 12:a8:3e:8e:91:06:9f:f8:72:95:6d:e2:c5:5f:fc:86:63:a8: fe:04:9f:97:aa:f6:c3:e1:6b:35:f7:50:d2:8a:13:d9:7b:92: d0:2b:1e:0f:81:8a:e7:9e:fc:10:bc:00:f7:af:c4:32:8c:88: 6a:40:4b:86:4e:ef:10:e9:b2:36:dc:a5:f9:7a:fe:43:4a:25: 36:a1:2e:07:0a:e2:c9:a2:7d:4f:38:40:a1:5a:06:07:07:5d: 98:ad:0b:9b:ca:d6:d5:61:24:8d:67:7b:4a:31:58:60:a5:fc: 12:2f:14:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLXnPdOfMMBKTqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Njk1ZDY3ZDMtZGI3Ny00ODFkLWFiNDItYTJhNTU2NTRkNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSv/2ki/DGb8kBGXPq74WCJMfVAG7/T20L7B RNxvb1v6JJALmUya5BCn4y6y55WNXib/oOSDRNbSFfOu/SkcYVtPVKBjk7Tzav6F p0dqJHFnblqSf41+OU2gNIxBAB7RDlef5M+7nZknOY/RFkFpzGMMhNO2qXxR7Sk+ RSdBmDB2c2QGeZP53zWacFsE+M/2gcXG5AvI3Rl1XkAn6/6/pD3+ObUQaoBjt3QU hCwi3kgbTO2/cZgcjGdoRzafBWn47NuRlYdWbmW8Z66/r4wPI2KrC9b3Akjmzltc T38BrnElHA/6mZViurq891CFCIe/QVtQZW3ROpIsEGa4yMq9BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsESwpn+brTqU0AYcyt4qdYUvZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2EzYmJmNDktOGI5MS0z NWIxLWFmYzItZjM0OTkxYWFkMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINr5SoniNgBz1mnMlwNwVuT6RhtE90GgcLRzWdgjaGx761qzn2cnBPC /E9y6ZLOSIf3P6XOFq9N/4fd+nhWHsf58aFv7Vg0X2FekCUnmkPZrz8b2hQHUlz4 oHl3483xP+82SrjDhCXcFZ+NfGIG+pkFjCeBDu7X5wMMsDLHFWmepI8OUXNjeM8W M4pmBRtBChKoPo6RBp/4cpVt4sVf/IZjqP4En5eq9sPhazX3UNKKE9l7ktArHg+B iuee/BC8APevxDKMiGpAS4ZO7xDpsjbcpfl6/kNKJTahLgcK4smifU84QKFaBgcH XZitC5vK1tVhJI1ne0oxWGCl/BIvFFw= -----END CERTIFICATE-----Generated at Tue Oct 21 21:56:42 2025 by rpki-client