$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d908e9e6-f824-3d7a-ac55-42c3566bd46f.roa File: d908e9e6-f824-3d7a-ac55-42c3566bd46f.roa (raw, json) Hash identifier: /30bmPDHKf96j8rWKZXTORJQ81M/MgxFPimy8XoK+m8= Subject key identifier: 8B:86:70:01:85:22:4C:2F:7D:50:4D:FE:FD:51:AA:39:40:1C:88:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C9FA58E9A137C8BBD1E8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d908e9e6-f824-3d7a-ac55-42c3566bd46f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.54.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c9:fa:58:e9:a1:37:c8:bb:d1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b3d5036d-b028-4684-9caa-2388c89f226e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bf:06:9b:9d:92:8f:8e:6d:fd:67:83:81:79: 8f:48:8e:6b:f6:1b:d5:f8:6f:32:6c:37:ed:f3:fe: 92:9f:c9:f6:b2:7c:f2:2b:f2:6d:2d:82:e2:ea:a0: 00:79:cc:a3:95:6e:79:67:36:e4:32:d9:69:5b:38: 36:dd:77:c7:62:b0:fb:55:21:c3:99:b3:e5:29:b4: 2a:6d:d3:bf:f9:d7:07:f5:68:00:d2:4a:a7:6f:48: 97:3b:c6:b2:f9:70:47:4c:48:a0:28:70:76:30:05: df:ca:8a:6c:13:aa:76:39:28:4d:14:18:19:4d:c0: 9d:c1:5b:58:19:d5:42:78:33:a6:71:af:e8:07:8a: 6b:47:57:a3:24:bb:6a:fe:2f:69:c0:66:35:a1:dd: 53:5f:3d:7e:2b:1b:71:46:2c:75:2e:19:f2:16:4e: 23:a9:4e:d1:8e:77:f6:0d:1e:4b:5f:b0:2c:e7:d0: 0a:8c:ec:a9:71:23:ec:fb:1a:39:3c:58:51:04:9c: 42:18:a6:eb:1c:78:45:3b:ec:ea:a9:b1:a0:a5:02: 88:01:56:28:6c:32:45:af:67:18:51:ad:ee:e1:75: 97:d6:05:f9:92:0d:d3:c9:8f:c9:0d:c2:7a:29:20: 88:fd:07:57:c8:b5:21:a8:2b:3c:62:c6:09:27:76: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:86:70:01:85:22:4C:2F:7D:50:4D:FE:FD:51:AA:39:40:1C:88:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d908e9e6-f824-3d7a-ac55-42c3566bd46f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:3b:b6:44:48:55:fd:3a:20:2e:83:49:97:a7:fa:64:d5:bd: 5a:57:5d:d2:45:bd:6d:b0:4b:ae:d6:ee:e4:c6:9f:62:0d:03: 4a:2a:10:6e:a7:f5:3f:8f:98:59:b4:b2:77:be:91:a4:6f:c7: a6:a0:76:47:ce:24:84:77:4f:bc:86:fa:1a:07:3a:b4:89:0b: 71:77:79:32:d3:4a:0c:7b:48:17:f9:11:0c:f4:a9:5c:c0:71: 5f:2d:7f:2a:9b:1c:c6:dd:9c:0d:f9:e7:0d:89:b5:95:29:91: 11:43:2b:48:e6:e7:f6:cb:96:c5:b3:8b:03:92:0d:17:bc:cb: c8:40:91:86:04:94:0a:7e:a9:ca:10:08:8a:2b:2a:ba:2e:3a: 85:fc:a0:72:3e:0f:5d:7a:17:90:8d:fd:41:62:17:c0:99:60: e9:2a:2e:be:2a:b8:f9:19:97:7c:2a:c8:bc:89:4c:9d:e7:35: 1e:a1:7d:5a:0e:0b:32:71:e9:c2:f1:32:8f:3d:52:4c:0e:97: 03:dc:46:00:e4:12:5a:1d:64:5f:37:cf:ac:f9:93:28:b0:fd: 38:a7:53:ab:9a:dc:01:2e:b7:4a:33:67:2f:45:6a:e6:6a:91: dc:5b:b2:aa:f5:e2:a0:ea:cb:fc:33:cd:03:c5:6e:51:a0:7d: 8a:8f:8a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMn6WOmhN8i70egwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjNkNTAzNmQtYjAyOC00Njg0LTljYWEtMjM4OGM4OWYyMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr8Gm52Sj45t/WeDgXmPSI5r9hvV+G8ybDft 8/6Sn8n2snzyK/JtLYLi6qAAecyjlW55ZzbkMtlpWzg23XfHYrD7VSHDmbPlKbQq bdO/+dcH9WgA0kqnb0iXO8ay+XBHTEigKHB2MAXfyopsE6p2OShNFBgZTcCdwVtY GdVCeDOmca/oB4prR1ejJLtq/i9pwGY1od1TXz1+KxtxRix1LhnyFk4jqU7Rjnf2 DR5LX7As59AKjOypcSPs+xo5PFhRBJxCGKbrHHhFO+zqqbGgpQKIAVYobDJFr2cY Ua3u4XWX1gX5kg3TyY/JDcJ6KSCI/QdXyLUhqCs8YsYJJ3b0/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuGcAGFIkwvfVBN/v1RqjlAHIg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDkwOGU5ZTYtZjgyNC0z ZDdhLWFjNTUtNDJjMzU2NmJkNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQ7tkRIVf06IC6DSZen+mTVvVpXXdJFvW2wS67W7uTGn2INA0oqEG6n 9T+PmFm0sne+kaRvx6agdkfOJIR3T7yG+hoHOrSJC3F3eTLTSgx7SBf5EQz0qVzA cV8tfyqbHMbdnA355w2JtZUpkRFDK0jm5/bLlsWziwOSDRe8y8hAkYYElAp+qcoQ CIorKrouOoX8oHI+D116F5CN/UFiF8CZYOkqLr4quPkZl3wqyLyJTJ3nNR6hfVoO CzJx6cLxMo89UkwOlwPcRgDkElodZF83z6z5kyiw/TinU6ua3AEut0ozZy9FauZq kdxbsqr14qDqy/wzzQPFblGgfYqPihQ= -----END CERTIFICATE-----Generated at Tue Oct 21 19:23:36 2025 by rpki-client