$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e726f2d3-2829-3901-bef8-02e5158bfa4f.roa File: e726f2d3-2829-3901-bef8-02e5158bfa4f.roa (raw, json) Hash identifier: R9dF2gvGyJlU+qDN3bluZZzBxk0V4gKJ4smGgyiHUZ4= Subject key identifier: 98:5C:16:DF:AE:A1:04:91:C7:4D:40:6F:B8:A8:06:5F:D0:F8:4F:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA57BB61FCD73CE4290740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e726f2d3-2829-3901-bef8-02e5158bfa4f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.37.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:57:bb:61:fc:d7:3c:e4:29:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=0e46760b-7e76-4871-844e-55d387703625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:68:1a:29:30:55:2e:7a:21:df:a8:58:db: 85:4b:85:e2:f5:08:74:e1:9c:6e:d3:76:a4:22:c9: 45:bb:d6:0d:57:00:f5:57:ea:31:ff:57:c5:c1:d3: 9a:30:f3:9c:22:44:dc:e3:e2:0b:59:b4:8e:f6:8f: ab:a7:84:f4:5d:1d:25:1c:4d:59:88:dd:e2:4e:0b: ba:c1:b7:a7:c8:2c:57:43:21:eb:cd:03:fd:23:19: 7a:52:2e:17:22:d9:5b:9d:0d:dc:fe:d6:23:4f:9e: 53:f3:e2:3a:31:83:f8:52:f7:58:49:b2:b7:7b:0e: e3:49:5d:96:34:88:83:06:da:47:b0:76:89:c1:bc: 9f:41:45:f7:0c:36:4e:c1:c5:9b:43:46:2b:6e:d3: c8:ae:db:75:72:32:d8:93:78:27:ec:cd:fb:b3:e4: 25:6b:14:97:32:d4:93:97:c7:5a:40:cc:8c:1d:cb: 54:a2:0e:45:0d:78:bc:93:62:62:dc:2c:9f:1b:80: ea:7a:08:34:4a:56:24:a5:ae:06:d4:67:5e:02:35: 05:a2:04:03:5a:66:fd:3d:7b:70:01:4a:76:82:a5: 50:be:ce:e1:3e:67:c3:d0:9f:b9:2b:41:e8:0c:42: 43:49:7f:6b:df:da:44:c9:76:e9:55:6e:26:1e:09: 4e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5C:16:DF:AE:A1:04:91:C7:4D:40:6F:B8:A8:06:5F:D0:F8:4F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e726f2d3-2829-3901-bef8-02e5158bfa4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f3:72:c0:de:cf:29:b4:30:4b:ab:20:50:b4:bd:63:96:8d: f7:30:dc:73:8e:50:5b:c0:ba:95:42:8b:3f:83:bb:d4:14:b1: 70:b2:fd:01:58:cc:e9:d9:79:06:c8:f4:e6:45:6f:86:b1:41: f4:2f:c0:b4:bf:cc:29:2f:b8:7b:25:34:5d:b8:5a:e9:0e:c9: cd:92:a6:44:35:b9:59:9f:36:e0:c7:ed:d6:ce:62:10:e0:58: 85:a6:e0:7b:02:da:ce:f1:22:7f:66:c4:42:7a:c0:3c:53:20: b6:52:f7:00:e3:a0:c5:f6:5e:64:f5:ea:e1:2a:40:75:4e:a0: 9e:21:96:ac:d1:d8:87:cf:2b:b8:7f:c0:6a:cc:12:15:bc:b0: 2e:9f:d5:0a:34:0c:5c:63:08:f9:bd:a1:92:67:22:b3:c6:7b: d4:65:35:b7:a8:a7:0d:f0:a6:92:ba:14:52:9d:14:d5:09:28: 9a:81:5a:c9:2d:2d:1a:2e:6b:a8:10:cd:59:95:82:04:98:ff: 0b:56:7b:bf:93:3b:03:01:cc:cf:e7:20:ee:d9:35:f5:99:92: db:a3:36:2c:74:c1:dd:24:c3:e6:71:2b:74:33:3a:06:36:64: 04:12:43:29:98:7a:88:e1:fa:10:0e:02:d7:52:4a:62:30:05: 29:44:89:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqle7YfzXPOQpB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MGU0Njc2MGItN2U3Ni00ODcxLTg0NGUtNTVkMzg3NzAzNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumFoGikwVS56Id+oWNuFS4Xi9Qh04Zxu03ak IslFu9YNVwD1V+ox/1fFwdOaMPOcIkTc4+ILWbSO9o+rp4T0XR0lHE1ZiN3iTgu6 wbenyCxXQyHrzQP9Ixl6Ui4XItlbnQ3c/tYjT55T8+I6MYP4UvdYSbK3ew7jSV2W NIiDBtpHsHaJwbyfQUX3DDZOwcWbQ0YrbtPIrtt1cjLYk3gn7M37s+QlaxSXMtST l8daQMyMHctUog5FDXi8k2Ji3CyfG4Dqegg0SlYkpa4G1GdeAjUFogQDWmb9PXtw AUp2gqVQvs7hPmfD0J+5K0HoDEJDSX9r39pEyXbpVW4mHglOJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhcFt+uoQSRx01Ab7ioBl/Q+E+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTcyNmYyZDMtMjgyOS0z OTAxLWJlZjgtMDJlNTE1OGJmYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3zcsDezym0MEurIFC0vWOWjfcw3HOOUFvAupVCiz+Du9QUsXCy/QFY zOnZeQbI9OZFb4axQfQvwLS/zCkvuHslNF24WukOyc2SpkQ1uVmfNuDH7dbOYhDg WIWm4HsC2s7xIn9mxEJ6wDxTILZS9wDjoMX2XmT16uEqQHVOoJ4hlqzR2IfPK7h/ wGrMEhW8sC6f1Qo0DFxjCPm9oZJnIrPGe9RlNbeopw3wppK6FFKdFNUJKJqBWskt LRoua6gQzVmVggSY/wtWe7+TOwMBzM/nIO7ZNfWZktujNix0wd0kw+ZxK3QzOgY2 ZAQSQymYeojh+hAOAtdSSmIwBSlEiXQ= -----END CERTIFICATE-----Generated at Tue Oct 21 21:54:25 2025 by rpki-client