$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb800a05-9a01-30d9-9210-55ad0745af5b.roa File: cb800a05-9a01-30d9-9210-55ad0745af5b.roa (raw, json) Hash identifier: 6ey/txCIQ38rmUJloUDgiq2yxjVSVZIRJb5EW+/RgOo= Subject key identifier: AE:69:F3:21:8A:10:C9:9C:9C:08:43:14:EE:C5:A7:A4:97:82:83:9A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8A7ABC5EA74BFE5E2E8C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb800a05-9a01-30d9-9210-55ad0745af5b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.32.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:a7:ab:c5:ea:74:bf:e5:e2:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=eb700dcf-269c-4187-84c5-2d1622e1837c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:13:e7:91:6d:97:71:ff:a8:f9:d0:a7:51:4c: 41:48:97:4f:9e:2e:10:b9:5b:69:7b:55:67:ff:ca: 05:c9:0e:29:05:4d:93:47:b8:c5:e6:8c:7d:99:91: 82:c0:f2:b8:c7:59:9a:cb:cd:5e:28:0c:c1:bb:15: f2:f4:6e:0b:78:11:19:22:d4:5d:2a:8e:ab:13:1e: a2:77:95:04:bb:c5:67:2e:6b:06:cd:7b:5f:43:86: 44:ae:8a:70:12:dc:bb:78:67:db:09:17:2e:83:4e: fc:bf:11:b0:33:7d:a6:de:dc:24:3e:2c:23:df:30: c6:e1:04:ab:4d:91:60:6a:23:98:f4:4f:1d:65:3f: ba:5b:fe:44:2e:71:f9:44:56:f2:e8:20:6f:34:c4: 79:91:e1:d4:dc:16:c6:29:23:b4:37:55:c2:2a:1d: e6:18:d9:4b:a8:e6:5a:de:0e:8c:2e:f5:33:86:20: 0d:60:b7:2c:96:a0:f7:6d:97:2f:19:5b:23:ce:66: 2b:75:c4:76:a0:a4:1c:30:a9:5b:e3:53:5b:ed:f5: f8:4a:34:f9:5f:c0:1e:67:77:e2:7c:82:bc:e7:ec: a8:a6:0c:61:0f:e7:ba:59:10:2f:37:db:76:48:14: a6:94:75:3c:df:18:76:94:2e:0d:c9:4e:cf:d6:a1: 6a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:69:F3:21:8A:10:C9:9C:9C:08:43:14:EE:C5:A7:A4:97:82:83:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb800a05-9a01-30d9-9210-55ad0745af5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:aa:a0:11:c0:08:a0:ba:63:79:61:07:a1:4d:45:77:dd:75: 5a:fe:6d:f6:b8:61:f7:13:35:55:1b:ee:1f:31:5e:ca:84:ed: a7:f2:f5:50:f6:95:e4:ad:1c:0d:c3:be:85:74:77:96:eb:72: b3:ad:04:c5:ed:84:8e:9b:4c:08:65:51:c5:fb:5b:bd:47:f6: cc:39:30:d5:21:8f:67:c7:97:03:34:f6:84:c7:87:0e:aa:1c: 45:7a:af:63:88:02:8e:4c:44:50:6d:fa:97:e7:c7:b4:50:85: 32:f9:83:27:e3:a3:91:13:4b:cf:36:6b:e5:4b:0f:4f:04:8b: 1c:f7:e4:7c:74:24:d6:a6:7f:6a:6c:86:d2:9d:dd:26:75:2d: 31:41:ac:4f:d4:fa:07:34:38:03:3b:1d:07:b5:32:4a:13:9e: 2f:5d:99:7e:85:71:6b:72:eb:6c:df:f1:ab:68:d1:d4:78:dc: 22:ea:29:5e:7b:48:25:c9:8b:f4:8e:51:12:db:4c:30:10:7a: cd:8a:54:b3:7f:fa:10:55:06:0b:97:09:dc:e6:16:68:fe:22: 2d:0a:c0:63:f3:11:5f:4d:54:dd:ab:b7:01:69:85:55:d4:38: 11:ef:34:1a:d6:38:a0:eb:1a:13:89:61:47:ac:18:54:34:f4: 10:5b:6c:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqKerxep0v+Xi6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZWI3MDBkY2YtMjY5Yy00MTg3LTg0YzUtMmQxNjIyZTE4MzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBPnkW2Xcf+o+dCnUUxBSJdPni4QuVtpe1Vn /8oFyQ4pBU2TR7jF5ox9mZGCwPK4x1may81eKAzBuxXy9G4LeBEZItRdKo6rEx6i d5UEu8VnLmsGzXtfQ4ZEropwEty7eGfbCRcug078vxGwM32m3twkPiwj3zDG4QSr TZFgaiOY9E8dZT+6W/5ELnH5RFby6CBvNMR5keHU3BbGKSO0N1XCKh3mGNlLqOZa 3g6MLvUzhiANYLcslqD3bZcvGVsjzmYrdcR2oKQcMKlb41Nb7fX4SjT5X8AeZ3fi fIK85+yopgxhD+e6WRAvN9t2SBSmlHU83xh2lC4NyU7P1qFqqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5p8yGKEMmcnAhDFO7Fp6SXgoOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I4MDBhMDUtOWEwMS0z MGQ5LTkyMTAtNTVhZDA3NDVhZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANKqoBHACKC6Y3lhB6FNRXfddVr+bfa4YfcTNVUb7h8xXsqE7afy9VD2 leStHA3DvoV0d5brcrOtBMXthI6bTAhlUcX7W71H9sw5MNUhj2fHlwM09oTHhw6q HEV6r2OIAo5MRFBt+pfnx7RQhTL5gyfjo5ETS882a+VLD08Eixz35Hx0JNamf2ps htKd3SZ1LTFBrE/U+gc0OAM7HQe1MkoTni9dmX6FcWty62zf8ato0dR43CLqKV57 SCXJi/SOURLbTDAQes2KVLN/+hBVBguXCdzmFmj+Ii0KwGPzEV9NVN2rtwFphVXU OBHvNBrWOKDrGhOJYUesGFQ09BBbbLo= -----END CERTIFICATE-----Generated at Tue Oct 21 19:35:16 2025 by rpki-client