$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce042733-9a6d-331e-b20b-cd7a5a4c3c1c.roa File: ce042733-9a6d-331e-b20b-cd7a5a4c3c1c.roa (raw, json) Hash identifier: 9GcKy8srv4UIfOY0M3tf+fhNMvEBKcS6I5y/+zdQ7JM= Subject key identifier: 33:E4:E8:7D:EC:4B:8C:F6:A8:88:3A:87:EE:D4:60:D1:37:75:A1:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8BB94178B12A002C3CC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce042733-9a6d-331e-b20b-cd7a5a4c3c1c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.41.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:bb:94:17:8b:12:a0:02:c3:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b3a7dfc5-b714-4d54-b114-52e8399ad25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ed:d6:24:18:ef:ea:44:b8:c0:e1:8a:14:06: 9c:4b:be:05:fa:e5:9f:d7:d4:a1:a7:b7:e2:59:79: 94:84:84:04:c7:03:c2:4e:60:0c:2c:13:98:cb:c9: 17:47:fb:c1:7c:71:3d:3a:32:60:14:52:ea:3e:e3: 6d:cd:68:1e:2a:4f:95:61:65:2c:f5:4c:94:2b:26: 04:c7:0b:a2:91:6f:36:1e:d2:4b:21:03:8b:ca:e2: 2f:71:49:a0:5e:ed:46:7e:83:39:49:43:b2:98:1d: 95:a2:95:9c:e7:bf:cf:d2:8d:8c:46:69:78:3a:22: 7f:cb:8b:a7:5c:f3:b4:e7:d3:d2:94:70:eb:a2:4f: 09:44:ca:c0:21:14:e2:14:5c:7d:fb:51:ff:db:97: 4b:a1:b1:52:e7:ff:9a:0e:d4:94:b9:4a:b8:77:ce: e3:73:75:ce:a7:0e:c1:37:12:61:a9:ad:86:3a:f1: 74:99:7d:4d:d7:b2:1c:1a:34:4e:8c:fb:3e:78:a6: 23:25:50:d3:bd:91:1a:86:5f:a4:90:ff:af:6f:4b: 88:b0:04:10:12:5a:3e:04:b4:22:09:0c:56:d3:03: 19:7c:01:ff:4f:67:34:e4:c5:39:90:8f:f7:09:8d: 8f:c8:dd:94:49:88:39:56:44:6b:44:63:6c:09:26: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E4:E8:7D:EC:4B:8C:F6:A8:88:3A:87:EE:D4:60:D1:37:75:A1:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce042733-9a6d-331e-b20b-cd7a5a4c3c1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:da:5c:94:a6:b7:47:5f:b2:4c:f3:2d:4c:28:dd:1f:9b:70: cf:0e:e7:70:ac:0d:ff:81:23:3f:18:fb:ad:2f:80:a0:22:b3: 34:12:06:1c:b2:32:f8:56:4b:8a:18:f1:bb:8d:9c:ad:b9:6a: a0:f4:26:15:fd:ce:3c:c3:3c:1a:70:d7:8e:f8:f5:58:4e:2a: 15:9e:d8:32:bd:5e:c4:c1:e7:b1:07:86:c8:09:24:d9:ac:f2: ef:59:d8:a8:fb:2d:fb:63:18:c1:cb:fc:f3:30:5b:96:61:cc: 7c:9f:96:2a:dd:26:35:90:34:5c:4e:f7:a8:96:c1:53:d1:3b: 54:52:be:7d:4c:f1:c0:d1:9c:ae:ae:a1:56:27:8b:56:f6:60: d2:73:b5:5b:ec:0e:46:fd:32:85:8b:f2:d5:87:e2:ed:99:d5: 92:e9:10:fd:b8:76:6b:18:c4:2c:d8:e2:d6:5f:b5:7b:55:3e: 61:41:d2:e8:4c:35:d0:71:db:e0:b0:40:be:1b:9f:53:30:d1: 03:1e:2f:eb:52:e5:a9:c5:af:1a:34:fb:12:bb:a4:76:92:09: 89:72:9d:85:2f:84:bf:68:bc:28:15:dd:66:65:60:2b:3d:06: de:db:46:b2:54:04:03:65:38:ab:dd:ca:38:79:9f:77:2a:cb: f0:a1:97:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLuUF4sSoALDzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjNhN2RmYzUtYjcxNC00ZDU0LWIxMTQtNTJlODM5OWFkMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO3WJBjv6kS4wOGKFAacS74F+uWf19Shp7fi WXmUhIQExwPCTmAMLBOYy8kXR/vBfHE9OjJgFFLqPuNtzWgeKk+VYWUs9UyUKyYE xwuikW82HtJLIQOLyuIvcUmgXu1GfoM5SUOymB2VopWc57/P0o2MRml4OiJ/y4un XPO059PSlHDrok8JRMrAIRTiFFx9+1H/25dLobFS5/+aDtSUuUq4d87jc3XOpw7B NxJhqa2GOvF0mX1N17IcGjROjPs+eKYjJVDTvZEahl+kkP+vb0uIsAQQElo+BLQi CQxW0wMZfAH/T2c05MU5kI/3CY2PyN2USYg5VkRrRGNsCSbZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPk6H3sS4z2qIg6h+7UYNE3daFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2UwNDI3MzMtOWE2ZC0z MzFlLWIyMGItY2Q3YTVhNGMzYzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3aXJSmt0dfskzzLUwo3R+bcM8O53CsDf+BIz8Y+60vgKAiszQSBhyy MvhWS4oY8buNnK25aqD0JhX9zjzDPBpw14749VhOKhWe2DK9XsTB57EHhsgJJNms 8u9Z2Kj7LftjGMHL/PMwW5ZhzHyflirdJjWQNFxO96iWwVPRO1RSvn1M8cDRnK6u oVYni1b2YNJztVvsDkb9MoWL8tWH4u2Z1ZLpEP24dmsYxCzY4tZftXtVPmFB0uhM NdBx2+CwQL4bn1Mw0QMeL+tS5anFrxo0+xK7pHaSCYlynYUvhL9ovCgV3WZlYCs9 Bt7bRrJUBANlOKvdyjh5n3cqy/Chl0k= -----END CERTIFICATE-----Generated at Tue Oct 21 19:29:55 2025 by rpki-client