$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e175e12d-9ba7-3d19-a3d1-6742562df701.roa File: e175e12d-9ba7-3d19-a3d1-6742562df701.roa (raw, json) Hash identifier: NLlBUzUuK8vCxbzRGlyLTxRzN/qf12S/0EkhMrVc/mE= Subject key identifier: 92:2B:07:A3:8F:22:DD:C1:23:33:FE:55:1C:40:D1:DD:E3:39:6A:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8B257F9E498A4DAD6C840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e175e12d-9ba7-3d19-a3d1-6742562df701.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.36.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:b2:57:f9:e4:98:a4:da:d6:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=89256b69-0052-44a2-a0a7-2deb3f105e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:76:40:1a:18:2b:01:8f:2c:c7:dc:db:f7:ae: 9c:50:0d:c1:b0:24:b3:55:a0:a3:06:05:e2:7c:3e: d0:5b:5c:89:4b:b0:ea:cc:94:88:60:57:5d:b2:dd: 33:e3:37:1e:ec:97:84:3f:68:d6:d6:7d:a8:21:06: 32:82:05:d0:d9:08:bc:ff:70:49:a0:e2:fa:40:58: 60:b7:21:39:e1:41:47:0d:fe:49:02:88:61:42:a4: 22:98:aa:d0:16:6b:8d:6b:be:fd:c8:8b:b5:bc:b8: 5e:59:70:21:b8:97:b0:c6:1c:40:50:4f:df:b8:01: 86:69:6b:cc:7b:f2:12:af:4d:10:fc:4a:1d:f6:0d: b6:6b:ad:9f:10:96:28:e1:d9:8d:0b:73:f6:12:59: 28:aa:0e:d3:13:8e:28:67:b3:2f:f2:53:2d:06:d0: 70:f9:da:af:f9:1b:77:b9:dd:14:6e:9d:bc:0b:09: 07:f2:cc:e5:08:90:bb:b2:c8:f9:9a:a0:8d:f5:9b: 5f:a7:0f:7a:a8:2b:4a:3c:60:8d:08:b0:98:7a:04: 31:df:7d:f5:3e:1e:0c:53:26:53:94:fe:c9:c9:36: 84:59:3c:5f:37:67:f1:2a:99:1d:2e:5b:c8:72:fe: d6:98:f6:37:4d:dc:e7:b1:7d:3d:ae:fd:c6:c7:f5: 7a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2B:07:A3:8F:22:DD:C1:23:33:FE:55:1C:40:D1:DD:E3:39:6A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e175e12d-9ba7-3d19-a3d1-6742562df701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:37:db:03:bf:92:7a:bb:f8:47:c0:cd:e4:2a:2a:67:f1:0f: 12:a3:f3:49:a3:38:6e:18:a9:1a:a0:db:4a:1e:64:c6:c9:0c: 1f:89:f7:0c:ab:d8:33:9f:d0:86:12:83:88:b6:1d:6d:c9:85: ca:a1:8c:99:27:89:8d:9b:b4:20:b5:01:a0:2b:51:ba:b4:f5: 17:ef:50:35:7b:b2:ae:d9:67:1a:20:55:04:6b:30:ec:f2:05: 4d:c2:6c:4b:9c:ee:0e:06:5f:c2:9b:18:1d:ff:38:f4:0b:ec: 35:10:e5:70:d1:3f:19:aa:70:c3:11:29:08:9b:77:1f:f3:55: 73:cf:27:c6:4b:be:ef:40:90:c4:53:ba:cb:e6:40:42:95:2a: c0:23:91:16:46:5f:16:2d:b5:0f:9d:8c:9b:04:85:17:4c:d0: a1:52:4a:3f:7f:85:23:4c:04:bc:b9:77:a1:c6:5f:fd:b8:c0: 45:0c:3a:9a:c8:4a:2a:8f:c2:3d:81:84:c8:8c:4c:00:ed:03: 11:82:e4:90:05:30:4b:8c:7d:44:2c:1e:80:ec:97:a3:e4:95: 26:dc:33:c9:27:68:79:58:a1:73:7d:4c:59:59:5a:fe:ab:9d: 17:b7:51:7f:de:b8:35:b3:0c:83:a1:e1:07:96:ed:f4:66:be: bc:09:f9:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLJX+eSYpNrWyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODkyNTZiNjktMDA1Mi00NGEyLWEwYTctMmRlYjNmMTA1ZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknZAGhgrAY8sx9zb966cUA3BsCSzVaCjBgXi fD7QW1yJS7DqzJSIYFddst0z4zce7JeEP2jW1n2oIQYyggXQ2Qi8/3BJoOL6QFhg tyE54UFHDf5JAohhQqQimKrQFmuNa779yIu1vLheWXAhuJewxhxAUE/fuAGGaWvM e/ISr00Q/Eod9g22a62fEJYo4dmNC3P2Elkoqg7TE44oZ7Mv8lMtBtBw+dqv+Rt3 ud0Ubp28CwkH8szlCJC7ssj5mqCN9Ztfpw96qCtKPGCNCLCYegQx3331Ph4MUyZT lP7JyTaEWTxfN2fxKpkdLlvIcv7WmPY3TdznsX09rv3Gx/V6DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIrB6OPIt3BIzP+VRxA0d3jOWqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTE3NWUxMmQtOWJhNy0z ZDE5LWEzZDEtNjc0MjU2MmRmNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw32wO/knq7+EfAzeQqKmfxDxKj80mjOG4YqRqg20oeZMbJDB+J9wyr 2DOf0IYSg4i2HW3JhcqhjJkniY2btCC1AaArUbq09RfvUDV7sq7ZZxogVQRrMOzy BU3CbEuc7g4GX8KbGB3/OPQL7DUQ5XDRPxmqcMMRKQibdx/zVXPPJ8ZLvu9AkMRT usvmQEKVKsAjkRZGXxYttQ+djJsEhRdM0KFSSj9/hSNMBLy5d6HGX/24wEUMOprI SiqPwj2BhMiMTADtAxGC5JAFMEuMfUQsHoDsl6PklSbcM8knaHlYoXN9TFlZWv6r nRe3UX/euDWzDIOh4QeW7fRmvrwJ+dU= -----END CERTIFICATE-----Generated at Tue Oct 21 21:55:42 2025 by rpki-client