$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d422f0da-3695-36a7-818e-730e64837d6a.roa File: d422f0da-3695-36a7-818e-730e64837d6a.roa (raw, json) Hash identifier: RmfnHGjDEPb7nwbXYS9RoMa/DYQTzbweLxcUAc+WmcI= Subject key identifier: 5A:7A:71:39:3B:E0:73:D6:75:CC:53:9B:B7:3B:16:00:4F:C3:B5:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8D6B0112547D6FC90F480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d422f0da-3695-36a7-818e-730e64837d6a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.61.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:d6:b0:11:25:47:d6:fc:90:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=46ce359e-5a7f-4806-9639-6c342c8abe2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:fb:a1:1d:79:c7:5c:7b:b8:72:66:b7:d8: 4d:fc:3f:1c:13:04:19:25:90:5a:1f:7d:02:37:94: 12:e0:e0:8a:b6:19:7a:77:b3:c9:20:d5:eb:d3:44: 1e:d3:68:45:9e:77:b0:f2:76:cf:d2:ab:97:ad:81: 82:ad:c7:bc:5c:4c:84:8d:ff:ff:a4:a6:fe:68:16: 95:52:67:8b:94:19:b8:ce:52:56:fc:b2:7a:b0:22: 89:d8:b4:65:b8:42:c6:8f:13:87:e8:69:df:aa:de: 2e:f7:db:55:14:0b:fc:bf:94:3b:78:f0:92:32:ae: 68:3a:e0:24:dd:19:90:be:5d:0d:59:cb:65:cf:3c: 6d:cd:f5:7c:e3:0d:b0:87:c6:4b:10:d4:22:8e:11: b2:42:65:43:a4:34:db:eb:22:8d:40:64:f7:dd:5c: a7:a1:d4:d0:10:e9:92:2b:d1:b1:c2:e9:68:ce:6b: 9d:80:54:33:75:a1:23:f7:5c:15:26:bf:87:60:fd: f4:e7:fb:12:f0:7e:b2:ac:4c:98:37:e0:39:24:d5: 4c:9d:7d:7c:90:51:cf:bd:b9:dc:5f:f1:af:ca:cf: 12:0e:72:06:f6:65:e7:15:bd:f1:4f:61:72:ff:66: 95:ab:98:30:8d:f2:04:63:1a:b4:a0:0e:fe:b6:4c: 63:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7A:71:39:3B:E0:73:D6:75:CC:53:9B:B7:3B:16:00:4F:C3:B5:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d422f0da-3695-36a7-818e-730e64837d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.61.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:fa:7a:cd:59:97:b1:ba:73:90:47:52:f9:96:8c:af:19:b5: 81:7e:ad:76:08:0f:51:0a:ba:64:4f:ad:1e:2e:e7:50:0d:70: 0d:1c:5b:d7:b4:1b:df:66:34:12:f4:5c:c4:c8:e3:93:6b:90: 17:80:9e:e6:3d:e2:15:bd:a4:03:17:d7:c9:f6:8b:c8:a4:6a: 1c:af:62:21:52:d5:b8:b9:c6:d3:97:8c:96:92:6f:81:bc:82: 40:a5:6c:b2:db:fa:d2:c9:da:8a:1a:b1:3e:39:88:20:9d:c3: ca:27:bb:ae:49:07:e4:bb:dd:2a:b1:39:e3:0c:ef:a5:da:a6: a1:77:ad:88:f6:b4:bb:a7:0f:f4:f9:4f:32:da:04:0a:d1:b0: 83:af:21:8d:42:e1:66:25:93:eb:3c:ad:b3:cf:50:5a:aa:5c: 19:50:0a:57:5b:95:1d:99:bb:05:9a:8a:ac:dd:9d:ba:1f:f7: 4e:60:b2:79:64:0c:a6:d5:c3:f5:18:5f:a5:b0:01:68:03:56: 74:65:5c:85:9e:da:4b:5e:82:6d:fd:f2:31:80:ff:36:81:51: 88:e7:b1:b8:ce:75:e7:1f:ce:e0:b0:07:0a:24:81:1a:cb:49: 16:34:61:27:50:66:82:56:e6:a7:ac:e3:35:f0:eb:37:cf:1e: a1:12:0a:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqNawESVH1vyQ9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDZjZTM1OWUtNWE3Zi00ODA2LTk2MzktNmMzNDJjOGFiZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+X7oR15x1x7uHJmt9hN/D8cEwQZJZBaH30C N5QS4OCKthl6d7PJINXr00Qe02hFnnew8nbP0quXrYGCrce8XEyEjf//pKb+aBaV UmeLlBm4zlJW/LJ6sCKJ2LRluELGjxOH6Gnfqt4u99tVFAv8v5Q7ePCSMq5oOuAk 3RmQvl0NWctlzzxtzfV84w2wh8ZLENQijhGyQmVDpDTb6yKNQGT33VynodTQEOmS K9GxwulozmudgFQzdaEj91wVJr+HYP305/sS8H6yrEyYN+A5JNVMnX18kFHPvbnc X/Gvys8SDnIG9mXnFb3xT2Fy/2aVq5gwjfIEYxq0oA7+tkxjIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp6cTk74HPWdcxTm7c7FgBPw7VMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQyMmYwZGEtMzY5NS0z NmE3LTgxOGUtNzMwZTY0ODM3ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARD0FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE36es1Zl7G6c5BHUvmWjK8ZtYF+rXYID1EKumRPrR4u51ANcA0cW9e0 G99mNBL0XMTI45NrkBeAnuY94hW9pAMX18n2i8ikahyvYiFS1bi5xtOXjJaSb4G8 gkClbLLb+tLJ2ooasT45iCCdw8onu65JB+S73SqxOeMM76XapqF3rYj2tLunD/T5 TzLaBArRsIOvIY1C4WYlk+s8rbPPUFqqXBlQCldblR2ZuwWaiqzdnbof905gsnlk DKbVw/UYX6WwAWgDVnRlXIWe2ktegm398jGA/zaBUYjnsbjOdecfzuCwBwokgRrL SRY0YSdQZoJW5qes4zXw6zfPHqESCiI= -----END CERTIFICATE-----Generated at Tue Oct 21 19:39:52 2025 by rpki-client