$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd520bef-42d3-3f61-ae02-704de30c779d.roa File: cd520bef-42d3-3f61-ae02-704de30c779d.roa (raw, json) Hash identifier: RxPQtUjI9BYNRq566thCe0J/z9rtvlx97WSYm6sahrI= Subject key identifier: 0C:98:72:D4:59:EB:D9:4D:CF:8E:CD:87:36:10:51:7B:A4:02:20:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8BAA7BFD886854B2A3D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd520bef-42d3-3f61-ae02-704de30c779d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.41.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:ba:a7:bf:d8:86:85:4b:2a:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=25036070-0ae6-4472-b352-94de43adcbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:40:5b:b6:65:b9:bc:66:34:e6:3e:f4:72:83: 82:e1:6f:55:7d:0c:40:31:6d:80:ba:d0:c2:99:da: 30:7f:20:3e:5a:74:be:ac:45:b1:c8:84:6f:fd:c5: 7b:2b:50:d7:34:6a:f4:1a:41:a2:32:c2:7f:b8:e0: 52:ba:11:05:f7:b3:f3:e2:3f:f6:78:70:74:ea:33: b4:4e:85:e1:04:63:be:b9:e0:7b:79:6c:a7:d3:60: 51:da:a4:ca:3a:db:a7:79:9b:5c:c5:df:78:11:e0: 46:81:d5:c6:b5:ec:b2:f5:1e:27:25:9d:f1:ea:35: c7:01:ca:82:ff:1e:84:0f:13:86:b7:1e:a5:50:a9: df:b0:45:84:e7:4b:bf:2b:ec:be:44:33:ae:4a:23: 95:5d:12:f0:23:67:84:d6:54:fd:ac:9f:b7:51:34: 3e:b5:82:fd:5e:dc:52:a2:fd:8f:83:23:1d:d8:88: 04:a8:3f:8f:02:c7:88:ed:00:9a:a8:c7:30:27:3b: 8b:c9:84:32:da:c5:41:86:d7:c5:98:64:93:8b:d0: ee:c2:40:48:cc:6a:13:e7:aa:a7:38:ef:a7:bf:e0: e2:d5:b3:81:ef:bc:ec:e6:cc:10:98:82:52:f8:2b: 83:e6:07:ed:c2:4f:47:07:4a:49:6e:57:43:80:a7: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:98:72:D4:59:EB:D9:4D:CF:8E:CD:87:36:10:51:7B:A4:02:20:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd520bef-42d3-3f61-ae02-704de30c779d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:06:ac:66:ed:bb:00:16:0b:8e:a8:cb:eb:24:1f:a3:7a:12: ad:e8:04:29:d2:09:64:17:97:cb:b4:b3:94:9f:f6:32:2d:46: 15:8e:12:23:32:83:6e:30:ef:dd:00:af:39:94:f6:dc:34:2e: cc:c8:72:bf:e8:26:77:18:49:6a:47:8a:54:73:42:67:63:03: 19:99:f8:3b:a8:69:a0:61:fb:09:e6:87:45:f1:26:2a:30:22: 8d:d8:35:61:ac:57:7d:4d:a8:b1:ce:e6:c1:41:b7:e7:e5:5c: ea:71:fe:1d:6e:45:c7:65:7a:61:6e:57:ba:0a:54:b7:4a:01: a4:d6:1f:99:d0:30:41:50:ff:fa:06:10:2c:82:f3:6c:91:30: 71:ed:7c:cc:b2:31:86:de:76:0d:6f:36:79:d3:df:ca:34:f0: ad:9c:81:5a:af:6b:71:e4:db:e5:de:ee:83:8a:e4:92:ff:3d: 37:d0:74:55:a3:c1:b6:c3:9f:1d:73:4a:44:87:7f:f9:12:8c: a7:c0:15:31:ce:c2:e1:48:36:78:4d:e5:f3:88:20:f5:44:03: e3:52:25:39:84:47:8b:e9:8d:76:00:cd:14:2b:e7:de:c6:28: 5a:d2:5d:fc:96:25:f3:3c:cf:fd:09:da:16:83:7e:e6:36:d5: 3d:d1:58:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLqnv9iGhUsqPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjUwMzYwNzAtMGFlNi00NDcyLWIzNTItOTRkZTQzYWRjYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikBbtmW5vGY05j70coOC4W9VfQxAMW2AutDC mdowfyA+WnS+rEWxyIRv/cV7K1DXNGr0GkGiMsJ/uOBSuhEF97Pz4j/2eHB06jO0 ToXhBGO+ueB7eWyn02BR2qTKOtuneZtcxd94EeBGgdXGteyy9R4nJZ3x6jXHAcqC /x6EDxOGtx6lUKnfsEWE50u/K+y+RDOuSiOVXRLwI2eE1lT9rJ+3UTQ+tYL9XtxS ov2PgyMd2IgEqD+PAseI7QCaqMcwJzuLyYQy2sVBhtfFmGSTi9DuwkBIzGoT56qn OO+nv+Di1bOB77zs5swQmIJS+CuD5gftwk9HB0pJbldDgKeamQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyYctRZ69lNz47NhzYQUXukAiA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Q1MjBiZWYtNDJkMy0z ZjYxLWFlMDItNzA0ZGUzMGM3NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8GrGbtuwAWC46oy+skH6N6Eq3oBCnSCWQXl8u0s5Sf9jItRhWOEiMy g24w790ArzmU9tw0LszIcr/oJncYSWpHilRzQmdjAxmZ+DuoaaBh+wnmh0XxJiow Io3YNWGsV31NqLHO5sFBt+flXOpx/h1uRcdlemFuV7oKVLdKAaTWH5nQMEFQ//oG ECyC82yRMHHtfMyyMYbedg1vNnnT38o08K2cgVqva3Hk2+Xe7oOK5JL/PTfQdFWj wbbDnx1zSkSHf/kSjKfAFTHOwuFINnhN5fOIIPVEA+NSJTmER4vpjXYAzRQr597G KFrSXfyWJfM8z/0J2haDfuY21T3RWEk= -----END CERTIFICATE-----Generated at Tue Oct 21 21:47:23 2025 by rpki-client