$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d94af84c-d8b2-320a-a52f-a0d39f1217e7.roa File: d94af84c-d8b2-320a-a52f-a0d39f1217e7.roa (raw, json) Hash identifier: 0+xsXcTGLB0wGdLLe3xy4PYSoaEQ9YPRxn0SDLEkVKg= Subject key identifier: 79:BC:3F:17:46:C7:B8:3B:64:C2:60:4E:7E:31:C6:BA:3C:AA:5B:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA665C3A273778F27EFB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d94af84c-d8b2-320a-a52f-a0d39f1217e7.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.48.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:66:5c:3a:27:37:78:f2:7e:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=11c95da0-f194-49e7-9938-71e07f85d414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:41:36:99:9d:db:7c:00:fe:ae:2d:e4:5f:03: 19:a3:97:02:55:6c:aa:27:12:d5:dd:38:0b:7f:48: ca:ea:a3:be:bb:d0:c3:f1:56:cf:5d:6e:16:b1:1d: 9f:b0:9c:07:a8:f4:2d:8e:bd:c3:26:99:72:83:8c: b4:d2:47:29:f5:a2:50:a6:c6:39:6d:1c:7d:37:68: 55:d7:a8:c3:0a:b5:4c:50:0c:98:0d:be:ce:ec:50: de:7f:51:c1:cf:44:29:2e:3a:e0:67:a2:0e:b5:d5: 3d:17:7a:51:6f:47:8c:90:57:13:5e:72:02:d0:eb: 61:c9:46:5f:68:de:e2:f6:be:7b:e8:94:ce:61:b2: 12:35:8d:62:a6:db:e8:44:19:3d:d0:93:1a:eb:f6: 47:26:bd:bf:88:61:84:4b:68:8a:65:a4:82:59:5e: 6c:ca:b0:15:b2:79:06:d6:98:ff:98:0f:82:fb:22: 78:7e:e4:6a:25:11:81:19:e6:8a:50:27:ff:54:05: b9:61:84:74:dd:ab:c9:0b:a4:da:7d:42:af:69:a3: ce:0f:5c:5f:b7:3c:2c:00:1e:2f:c5:87:3a:37:62: c0:73:bb:27:25:32:51:66:70:ce:21:1a:70:86:2d: 30:45:99:75:8d:25:dd:a8:ee:29:6b:4e:99:f5:e2: 09:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BC:3F:17:46:C7:B8:3B:64:C2:60:4E:7E:31:C6:BA:3C:AA:5B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d94af84c-d8b2-320a-a52f-a0d39f1217e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:6e:2a:7b:b5:be:df:56:6d:ba:a0:1c:15:75:5e:b4:87:53: ef:a9:27:f2:5f:5a:e6:99:3e:c0:28:57:66:c5:97:e1:70:52: a5:5d:12:bb:a0:49:dd:5c:03:ec:2d:5c:ae:16:d4:6e:08:fc: f4:6d:a9:89:c7:00:b8:42:de:30:9a:e4:f1:b5:d5:5d:f9:e1: f9:1d:2f:b8:67:d5:e4:61:5f:9c:b5:f5:51:d5:6d:57:ea:65: 5a:60:31:da:65:b1:06:cc:9f:ca:00:cd:ea:0b:18:34:17:09: 01:30:14:36:2d:ac:b3:d4:ba:ab:cf:aa:c2:40:d6:95:6f:e5: cb:e1:13:c2:c1:58:78:2c:85:ff:e4:13:eb:3c:07:68:18:2b: 07:75:82:74:32:f7:6e:cc:e1:7d:28:c2:fc:a9:d8:de:4e:46: b2:b7:44:9c:17:0e:1d:4e:0f:75:b6:37:eb:9b:60:2a:7e:20: 75:d4:6a:a8:f6:22:0f:c9:a6:c6:bc:9c:65:bc:30:95:18:5d: 0e:bc:0e:70:e0:f1:d8:39:f6:49:39:ca:ce:76:97:51:e8:c3: cc:4a:7e:96:4d:cf:dc:7a:6c:6c:29:47:6d:08:f1:13:c5:75: 4e:28:59:69:c4:c8:38:91:44:2a:27:80:53:99:25:57:13:31: 6a:15:eb:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqmZcOic3ePJ++4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTFjOTVkYTAtZjE5NC00OWU3LTk5MzgtNzFlMDdmODVkNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUE2mZ3bfAD+ri3kXwMZo5cCVWyqJxLV3TgL f0jK6qO+u9DD8VbPXW4WsR2fsJwHqPQtjr3DJplyg4y00kcp9aJQpsY5bRx9N2hV 16jDCrVMUAyYDb7O7FDef1HBz0QpLjrgZ6IOtdU9F3pRb0eMkFcTXnIC0OthyUZf aN7i9r576JTOYbISNY1iptvoRBk90JMa6/ZHJr2/iGGES2iKZaSCWV5syrAVsnkG 1pj/mA+C+yJ4fuRqJRGBGeaKUCf/VAW5YYR03avJC6TafUKvaaPOD1xftzwsAB4v xYc6N2LAc7snJTJRZnDOIRpwhi0wRZl1jSXdqO4pa06Z9eIJJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm8PxdGx7g7ZMJgTn4xxro8qltoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDk0YWY4NGMtZDhiMi0z MjBhLWE1MmYtYTBkMzlmMTIxN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKluKnu1vt9WbbqgHBV1XrSHU++pJ/JfWuaZPsAoV2bFl+FwUqVdErug Sd1cA+wtXK4W1G4I/PRtqYnHALhC3jCa5PG11V354fkdL7hn1eRhX5y19VHVbVfq ZVpgMdplsQbMn8oAzeoLGDQXCQEwFDYtrLPUuqvPqsJA1pVv5cvhE8LBWHgshf/k E+s8B2gYKwd1gnQy927M4X0owvyp2N5ORrK3RJwXDh1OD3W2N+ubYCp+IHXUaqj2 Ig/Jpsa8nGW8MJUYXQ68DnDg8dg59kk5ys52l1How8xKfpZNz9x6bGwpR20I8RPF dU4oWWnEyDiRRCongFOZJVcTMWoV63k= -----END CERTIFICATE-----Generated at Tue Oct 21 21:50:21 2025 by rpki-client