$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df89c50c-62c6-3b77-9fec-19798455694b.roa File: df89c50c-62c6-3b77-9fec-19798455694b.roa (raw, json) Hash identifier: KnLJ3J/2uA9y5s1MevmL6B4z97L98gClZSsqyma+7Jk= Subject key identifier: 32:65:11:B6:EB:32:6A:B5:7C:0D:07:0F:15:B6:E5:AF:46:ED:FE:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA5EC32AC76AA09B984200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df89c50c-62c6-3b77-9fec-19798455694b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.42.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:5e:c3:2a:c7:6a:a0:9b:98:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=346f809c-20f4-4949-8153-aa0cc0e4966a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:02:85:75:3a:d1:94:24:01:dd:d6:9a:f9:09: 1b:39:41:3f:e9:51:8f:02:e3:73:ee:16:ad:6f:0a: 37:77:18:16:27:fe:09:94:47:09:e4:f6:7e:8f:12: a5:67:04:4c:b4:58:3d:4d:32:e9:36:6f:e3:ae:40: 90:f9:c0:00:ae:7a:4d:dd:65:21:1b:e3:9b:4e:ed: 3b:05:d4:4b:0a:2f:0e:4c:75:ad:2b:5a:7a:b9:f3: 4e:f8:3f:33:8b:0a:dd:b6:fc:d0:f4:8f:c8:14:f4: 7c:d1:26:9a:84:12:1b:7f:ab:0f:76:12:a6:46:6a: 52:60:f5:13:67:5c:b9:81:91:dc:18:ac:b4:2b:15: 7a:a7:7b:60:97:5f:2f:40:5d:27:c7:e5:75:4f:f5: f2:7d:19:2c:e5:6d:f1:7b:3a:a0:80:41:5f:1f:b7: 9b:32:57:d2:a6:31:4f:7f:f9:e8:48:8b:ab:ea:79: dd:ae:18:39:89:b1:e8:a3:16:8e:5f:22:bc:4f:39: 83:f0:c0:60:2c:bb:84:01:07:56:a7:93:ba:d6:c2: ae:79:82:ee:de:67:4e:2e:e6:92:e9:a5:5f:1a:de: 9f:ac:ce:ce:87:62:bb:c8:b0:78:88:74:98:da:d7: dd:91:73:32:5b:99:74:59:1a:cf:df:02:15:e1:45: db:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:65:11:B6:EB:32:6A:B5:7C:0D:07:0F:15:B6:E5:AF:46:ED:FE:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df89c50c-62c6-3b77-9fec-19798455694b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:34:f4:eb:fa:22:a4:3e:e4:e5:15:05:72:6b:55:51:c7:51: 60:2a:d6:e3:fb:88:c2:4b:65:b4:1b:51:c4:9a:68:42:48:16: 59:de:71:d4:42:55:ed:ea:27:4f:d4:31:d5:27:77:bb:e3:d6: 86:78:f6:e4:62:ea:c4:dc:2f:6e:b3:4c:77:1e:2c:86:df:53: bf:df:74:f9:4d:1c:42:a4:7e:6e:ea:5e:6c:c6:3e:78:af:8e: 74:bd:9a:7b:77:a2:f0:0c:10:1d:70:d0:d8:2b:ff:57:fc:5c: ca:53:72:65:e7:4a:55:88:89:1b:a9:a5:64:62:78:46:1b:f2: 48:d2:66:7f:67:c6:0c:2d:12:53:2c:07:9d:a4:99:c9:7c:d5: e1:13:ea:96:f9:0c:cc:6c:7b:4f:20:fa:88:56:5a:3f:66:67: f9:64:dd:81:54:ba:56:fe:3d:ad:57:5f:ae:ea:21:fb:c9:14: fc:1c:e5:24:9e:0f:b7:e9:ee:af:d0:b3:6d:94:fc:9f:43:9a: e1:9a:a6:f3:6f:d4:19:1c:75:aa:82:e6:c6:a4:fb:a7:e8:42: 9f:32:b2:7c:e2:5e:a5:f1:40:e4:3c:61:a6:f0:ef:c9:52:64: 07:a8:6d:c2:d2:d8:d0:95:2b:78:1c:ca:6f:ea:ac:96:94:98: 56:fe:1c:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVql7DKsdqoJuYQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MzQ2ZjgwOWMtMjBmNC00OTQ5LTgxNTMtYWEwY2MwZTQ5NjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAKFdTrRlCQB3daa+QkbOUE/6VGPAuNz7hat bwo3dxgWJ/4JlEcJ5PZ+jxKlZwRMtFg9TTLpNm/jrkCQ+cAArnpN3WUhG+ObTu07 BdRLCi8OTHWtK1p6ufNO+D8ziwrdtvzQ9I/IFPR80SaahBIbf6sPdhKmRmpSYPUT Z1y5gZHcGKy0KxV6p3tgl18vQF0nx+V1T/XyfRks5W3xezqggEFfH7ebMlfSpjFP f/noSIur6nndrhg5ibHooxaOXyK8TzmD8MBgLLuEAQdWp5O61sKueYLu3mdOLuaS 6aVfGt6frM7Oh2K7yLB4iHSY2tfdkXMyW5l0WRrP3wIV4UXbMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJlEbbrMmq1fA0HDxW25a9G7f6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY4OWM1MGMtNjJjNi0z Yjc3LTlmZWMtMTk3OTg0NTU2OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo09Ov6IqQ+5OUVBXJrVVHHUWAq1uP7iMJLZbQbUcSaaEJIFlnecdRC Ve3qJ0/UMdUnd7vj1oZ49uRi6sTcL26zTHceLIbfU7/fdPlNHEKkfm7qXmzGPniv jnS9mnt3ovAMEB1w0Ngr/1f8XMpTcmXnSlWIiRuppWRieEYb8kjSZn9nxgwtElMs B52kmcl81eET6pb5DMxse08g+ohWWj9mZ/lk3YFUulb+Pa1XX67qIfvJFPwc5SSe D7fp7q/Qs22U/J9DmuGapvNv1BkcdaqC5sak+6foQp8ysnziXqXxQOQ8Yabw78lS ZAeobcLS2NCVK3gcym/qrJaUmFb+HLU= -----END CERTIFICATE-----Generated at Tue Oct 21 19:34:06 2025 by rpki-client