$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf53a7e5-8d49-3a69-87e5-daf40af22df4.roa File: cf53a7e5-8d49-3a69-87e5-daf40af22df4.roa (raw, json) Hash identifier: at+89pgHIRlUePUYzjWmKbC9WWGXxBhQCYUJ44VqzeQ= Subject key identifier: 24:5E:A7:6A:D7:C8:14:51:FC:88:87:C5:8A:4A:71:0D:A6:51:FA:12 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C2BBD313D944E0CB5B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf53a7e5-8d49-3a69-87e5-daf40af22df4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.43.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c2:bb:d3:13:d9:44:e0:cb:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b2f51599-a228-4608-a100-b6eea1ed6d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0b:3e:dc:33:ca:e3:d5:83:f9:a3:10:ce:03: a5:72:1b:f4:15:9f:c8:d4:24:e6:5b:c7:a7:a3:09: ec:23:2b:20:32:11:2e:8f:95:82:bc:d1:ae:f0:3b: dd:de:4f:75:ce:b6:63:65:23:2f:0f:9b:8f:1f:0b: 25:4a:de:81:5a:51:a7:4a:74:98:d3:3b:1b:58:32: 81:1c:cf:52:83:eb:c2:fc:26:d3:d5:73:ef:d1:6a: 41:47:60:33:89:0e:93:e2:17:74:c8:35:c6:d9:fb: ac:e1:2e:88:39:f2:0d:0e:7f:82:a9:f3:52:ba:bc: 62:36:e2:d1:d9:d8:e9:8c:b7:63:7d:24:ec:05:d3: f5:83:3f:d6:6d:f0:8d:7d:33:04:ef:44:0e:6a:ca: b6:01:83:23:31:f2:7a:39:98:91:fe:d5:0f:6b:eb: 82:e4:20:ea:e3:02:b3:82:6d:fc:ae:f2:e2:ed:f8: f1:47:4a:13:c4:04:55:dc:f1:b9:91:42:ff:19:0d: 8a:68:8f:4b:b8:49:d1:12:b8:4f:6d:6a:8a:63:39: 92:1e:6d:48:42:e7:12:38:09:dd:ee:66:89:79:04: 44:d9:2d:d4:b3:1b:72:ca:ce:55:56:03:f8:a5:b3: a9:3b:d8:16:b5:43:82:07:49:d2:92:db:33:3f:6c: 73:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5E:A7:6A:D7:C8:14:51:FC:88:87:C5:8A:4A:71:0D:A6:51:FA:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf53a7e5-8d49-3a69-87e5-daf40af22df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:1d:6e:59:aa:56:0c:f2:43:31:7c:81:12:8b:d3:0b:67:4b: fd:be:a6:d3:36:87:9c:c2:d8:11:e8:5a:cf:8c:d4:c2:bb:07: a2:22:42:df:2b:ec:8c:87:8b:8b:81:4c:89:74:b8:8a:e8:b3: a2:3b:a6:f5:07:bb:b7:d0:33:f6:89:57:05:43:15:e7:60:ab: 2e:72:58:81:ca:cc:57:01:7f:23:6b:2f:b6:63:74:80:dd:b5: 2d:18:2e:76:ff:5d:b2:14:a5:f5:e7:32:b3:7a:3c:79:03:f3: 4a:95:f0:cd:bf:df:d7:56:90:4b:3b:e6:d3:8e:bf:0a:27:10: 2a:aa:af:7c:9e:a5:6f:99:5c:d7:e5:8b:af:8e:43:d3:3e:39: 30:e8:2a:f0:be:21:0e:a2:d1:7b:d3:fb:ba:14:a4:75:90:e9: a3:0d:20:5d:0a:26:2f:e9:9f:bb:91:26:11:f0:38:6d:52:68: 44:e3:c0:89:1c:6d:fd:e9:e1:9f:ad:ff:e0:f7:e4:d1:5f:14: f9:27:d4:b6:a7:e6:b6:1d:dc:72:e5:b2:56:b2:65:2b:d6:c4: 43:d4:6e:d5:94:02:5b:d1:21:bf:ea:c1:79:f7:2d:5e:6d:24: cd:d7:37:0d:31:eb:51:9e:6e:c0:cf:74:0f:1e:17:d4:41:3a: 63:7e:90:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMK70xPZRODLW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjJmNTE1OTktYTIyOC00NjA4LWExMDAtYjZlZWExZWQ2ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAs+3DPK49WD+aMQzgOlchv0FZ/I1CTmW8en ownsIysgMhEuj5WCvNGu8Dvd3k91zrZjZSMvD5uPHwslSt6BWlGnSnSY0zsbWDKB HM9Sg+vC/CbT1XPv0WpBR2AziQ6T4hd0yDXG2fus4S6IOfINDn+CqfNSurxiNuLR 2djpjLdjfSTsBdP1gz/WbfCNfTME70QOasq2AYMjMfJ6OZiR/tUPa+uC5CDq4wKz gm38rvLi7fjxR0oTxARV3PG5kUL/GQ2KaI9LuEnRErhPbWqKYzmSHm1IQucSOAnd 7maJeQRE2S3Usxtyys5VVgP4pbOpO9gWtUOCB0nSktszP2xz4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRep2rXyBRR/IiHxYpKcQ2mUfoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y1M2E3ZTUtOGQ0OS0z YTY5LTg3ZTUtZGFmNDBhZjIyZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIdblmqVgzyQzF8gRKL0wtnS/2+ptM2h5zC2BHoWs+M1MK7B6IiQt8r 7IyHi4uBTIl0uIros6I7pvUHu7fQM/aJVwVDFedgqy5yWIHKzFcBfyNrL7ZjdIDd tS0YLnb/XbIUpfXnMrN6PHkD80qV8M2/39dWkEs75tOOvwonECqqr3yepW+ZXNfl i6+OQ9M+OTDoKvC+IQ6i0XvT+7oUpHWQ6aMNIF0KJi/pn7uRJhHwOG1SaETjwIkc bf3p4Z+t/+D35NFfFPkn1Lan5rYd3HLlslayZSvWxEPUbtWUAlvRIb/qwXn3LV5t JM3XNw0x61GebsDPdA8eF9RBOmN+kIQ= -----END CERTIFICATE-----Generated at Wed Oct 22 00:19:19 2025 by rpki-client