$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd2cdcd9-3af7-3761-aff7-61fcb4c0de14.roa File: dd2cdcd9-3af7-3761-aff7-61fcb4c0de14.roa (raw, json) Hash identifier: pO+28hmMOLAbHixvZEC581YesE3cUGdyP7dA3VkYvaw= Subject key identifier: 8E:45:16:CC:3A:FA:25:43:C2:AA:BE:02:C2:77:21:62:8F:E4:D7:8B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8B068842FA77876ED6A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd2cdcd9-3af7-3761-aff7-61fcb4c0de14.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.36.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:b0:68:84:2f:a7:78:76:ed:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=6631b61e-5cb7-4382-9fe6-a4cef1ef5d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:80:de:a9:1f:66:93:0e:c8:38:9f:ec:18:4f: 26:4c:03:c2:ca:d6:9b:b3:dd:c0:df:97:b8:3d:97: 48:05:25:04:cf:56:be:5a:4a:a5:9d:56:7d:6b:b6: 08:1a:04:79:6a:b1:17:5e:e5:05:8a:f7:56:db:5a: 8c:f4:6d:8a:46:b5:c1:79:0d:34:84:5f:2c:dc:e1: a6:2b:4f:fa:0b:1e:8e:8a:0c:fb:f9:7b:2b:44:eb: 91:71:33:78:4d:ff:8e:d2:a5:15:f7:3f:67:ea:d3: 8a:4e:fd:00:c4:c7:53:51:6a:cc:92:b7:62:c1:31: a1:6f:07:b3:5b:53:84:16:05:41:6d:1e:cb:1a:9e: 7c:d3:ad:41:ad:15:10:9b:a9:8b:5a:94:31:93:6f: ac:6b:e5:70:38:6c:1b:0f:77:3c:e6:de:de:8d:8e: 58:78:de:a9:51:6f:6b:a4:9c:8e:ab:cf:c2:11:39: 6d:09:d8:d4:92:e6:f2:bd:e8:18:9a:61:0b:cb:f9: 10:2f:27:2a:82:d6:f4:dc:a5:88:54:0d:d3:f4:bf: 23:c4:d0:a9:59:68:8a:35:34:d1:ab:a5:76:4c:d6: f6:d9:ac:d5:cd:d7:c2:56:e5:63:74:52:73:f1:f7: 7c:85:a0:81:a6:d1:04:44:93:f2:d7:39:ef:bc:47: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:45:16:CC:3A:FA:25:43:C2:AA:BE:02:C2:77:21:62:8F:E4:D7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd2cdcd9-3af7-3761-aff7-61fcb4c0de14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:2e:93:67:91:2b:3b:34:79:ef:11:b0:2e:07:1f:12:c9:78: 5e:af:03:98:c1:93:6c:41:be:e9:f6:0e:a1:79:76:c5:08:d1: d9:0e:c1:d4:71:1b:69:0b:f9:df:25:83:9f:c7:7e:1b:93:8a: 68:ec:89:55:d6:ba:01:d0:be:86:95:4b:ce:38:00:58:ef:70: 45:4d:a1:75:58:b1:3a:50:3f:6f:60:b0:99:1f:c9:71:c7:8e: 57:b8:c9:e4:5c:6b:9c:c6:2f:c6:6c:31:94:10:b8:6a:05:d8: 54:2b:78:ba:a7:d0:fd:32:1b:73:d7:d2:88:15:81:a0:ca:04: f0:c1:59:6b:3e:0b:44:3d:69:e6:f5:05:c2:aa:43:f8:c5:e6: 55:91:b7:8a:7a:99:ea:73:f1:b8:98:c4:97:09:a2:5c:d5:42: 14:bd:73:6b:65:8e:c4:64:30:8b:fd:bd:80:dc:0d:9b:ee:8f: 94:11:67:45:3b:d8:8c:7a:14:a7:15:00:90:85:39:0e:4f:af: 3b:6b:73:fc:47:69:5b:99:25:47:82:ca:10:a8:ed:1b:a4:d8: 45:50:f1:90:5d:e1:98:4e:90:ad:da:c6:cb:3e:b3:7b:e9:e1: 3b:83:cf:95:98:be:e4:cf:df:f3:be:45:25:6c:32:13:1e:de: 4c:69:04:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLBohC+neHbtaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjYzMWI2MWUtNWNiNy00MzgyLTlmZTYtYTRjZWYxZWY1ZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIDeqR9mkw7IOJ/sGE8mTAPCytabs93A35e4 PZdIBSUEz1a+WkqlnVZ9a7YIGgR5arEXXuUFivdW21qM9G2KRrXBeQ00hF8s3OGm K0/6Cx6Oigz7+XsrROuRcTN4Tf+O0qUV9z9n6tOKTv0AxMdTUWrMkrdiwTGhbwez W1OEFgVBbR7LGp58061BrRUQm6mLWpQxk2+sa+VwOGwbD3c85t7ejY5YeN6pUW9r pJyOq8/CETltCdjUkubyvegYmmELy/kQLycqgtb03KWIVA3T9L8jxNCpWWiKNTTR q6V2TNb22azVzdfCVuVjdFJz8fd8haCBptEERJPy1znvvEcqbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5FFsw6+iVDwqq+AsJ3IWKP5NeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQyY2RjZDktM2FmNy0z NzYxLWFmZjctNjFmY2I0YzBkZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCSTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwuk2eRKzs0ee8RsC4HHxLJeF6vA5jBk2xBvun2DqF5dsUI0dkOwdRx G2kL+d8lg5/HfhuTimjsiVXWugHQvoaVS844AFjvcEVNoXVYsTpQP29gsJkfyXHH jle4yeRca5zGL8ZsMZQQuGoF2FQreLqn0P0yG3PX0ogVgaDKBPDBWWs+C0Q9aeb1 BcKqQ/jF5lWRt4p6mepz8biYxJcJolzVQhS9c2tljsRkMIv9vYDcDZvuj5QRZ0U7 2Ix6FKcVAJCFOQ5Prztrc/xHaVuZJUeCyhCo7Ruk2EVQ8ZBd4ZhOkK3axss+s3vp 4TuDz5WYvuTP3/O+RSVsMhMe3kxpBIQ= -----END CERTIFICATE-----Generated at Tue Oct 21 19:18:18 2025 by rpki-client