$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9972b49-e8e3-36b8-a551-f038e430190f.roa File: e9972b49-e8e3-36b8-a551-f038e430190f.roa (raw, json) Hash identifier: 0fH1WGmPalDKb+mGw8/qBy4z1xhcX8MhJkyLIbVrfQg= Subject key identifier: FF:B6:8C:32:0E:5C:27:32:98:4D:DA:BC:BC:40:FA:5A:0E:90:5B:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8BA988990005AC8CFB100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9972b49-e8e3-36b8-a551-f038e430190f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.41.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:ba:98:89:90:00:5a:c8:cf:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=07f7a09a-56bc-4458-be17-c8f9fa6ccae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:ea:7c:7c:19:ee:1a:d8:b5:30:e7:8c:fd: 72:61:27:1e:7d:a0:3e:74:3c:da:2e:bf:da:a5:ab: 72:5a:ad:86:6c:79:8d:6e:09:de:99:d5:d8:37:18: 30:59:d9:91:65:a6:ba:ea:b8:e0:8a:e9:a9:d9:67: 42:75:03:3c:0c:66:d6:33:4f:d4:58:87:b0:74:62: 83:53:62:1d:e5:ed:21:38:34:0c:1d:fd:12:38:c6: bd:2e:39:dd:9e:fb:24:60:88:44:f1:d7:02:6f:e2: 41:ab:1d:34:f0:86:73:f6:a3:32:d3:19:28:61:67: fe:98:23:fe:02:e0:3c:fb:62:a3:0d:1d:28:9c:9e: 83:68:b4:f5:b6:bf:41:b4:5c:c1:30:b5:fc:1d:9e: b3:26:a2:b2:14:c4:bc:1f:ec:1c:82:f2:95:34:97: 83:da:ae:8b:d6:45:28:dd:43:fe:9b:8a:13:65:fd: 54:ae:da:d6:c7:6e:44:47:87:c4:71:3c:66:b4:10: f9:cd:10:58:fa:6c:c7:f2:d5:97:f4:0b:40:9a:2e: c4:77:2e:e8:91:36:f7:fc:34:ed:7e:1d:6e:7b:ee: fb:17:c8:dd:32:9b:6a:8b:96:1a:1a:a2:9d:4d:96: 11:2f:8c:87:7e:0d:fa:8f:a6:ff:fd:a3:16:7b:9e: 45:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B6:8C:32:0E:5C:27:32:98:4D:DA:BC:BC:40:FA:5A:0E:90:5B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9972b49-e8e3-36b8-a551-f038e430190f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:fb:2b:3e:74:04:43:6f:33:89:8f:43:97:f6:1b:d6:40:5c: 67:47:bf:90:72:e5:20:a8:f2:f9:a4:b0:93:69:91:1d:5b:26: 7f:01:9c:4c:e7:4f:a7:14:d8:6f:c6:cc:5c:1a:22:19:61:19: 5e:c0:12:c2:d4:2e:f4:86:19:98:48:f9:c8:65:2e:de:8f:bc: fc:46:98:17:f8:36:a2:22:7c:1e:bc:68:70:9e:22:24:f0:69: 76:00:27:6c:67:6f:18:49:67:aa:de:0d:22:ba:72:6c:9f:eb: 44:f0:de:ae:b5:4e:3a:4c:5f:48:f3:9e:42:73:2a:b8:bb:8a: 39:f6:79:b2:54:d3:21:d1:d2:66:a6:d0:01:76:b2:5f:36:ce: 94:17:c6:ec:43:ce:68:04:ba:b1:f5:00:b1:04:23:76:67:20: 85:da:5f:5e:8c:13:2e:8a:ed:93:8e:64:27:35:10:df:f2:76: 8b:02:ff:29:a6:29:79:e8:d7:03:a9:69:20:8a:c9:2c:5f:2f: 7e:54:04:c5:90:dd:b7:9a:d3:d1:db:a4:4b:d8:06:2f:38:de: d6:18:6a:8b:b6:61:c1:7c:4e:39:42:9e:bd:a5:2b:86:8e:8a: b8:cc:c3:03:f8:75:6b:1f:19:52:82:9f:d4:b0:bf:4e:b6:f0: 70:47:c8:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLqYiZAAWsjPsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDdmN2EwOWEtNTZiYy00NDU4LWJlMTctYzhmOWZhNmNjYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiPqfHwZ7hrYtTDnjP1yYScefaA+dDzaLr/a patyWq2GbHmNbgnemdXYNxgwWdmRZaa66rjgiump2WdCdQM8DGbWM0/UWIewdGKD U2Id5e0hODQMHf0SOMa9LjndnvskYIhE8dcCb+JBqx008IZz9qMy0xkoYWf+mCP+ AuA8+2KjDR0onJ6DaLT1tr9BtFzBMLX8HZ6zJqKyFMS8H+wcgvKVNJeD2q6L1kUo 3UP+m4oTZf1UrtrWx25ER4fEcTxmtBD5zRBY+mzH8tWX9AtAmi7Edy7okTb3/DTt fh1ue+77F8jdMptqi5YaGqKdTZYRL4yHfg36j6b//aMWe55FlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+2jDIOXCcymE3avLxA+loOkFvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTk5NzJiNDktZThlMy0z NmI4LWE1NTEtZjAzOGU0MzAxOTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv7Kz50BENvM4mPQ5f2G9ZAXGdHv5By5SCo8vmksJNpkR1bJn8BnEzn T6cU2G/GzFwaIhlhGV7AEsLULvSGGZhI+chlLt6PvPxGmBf4NqIifB68aHCeIiTw aXYAJ2xnbxhJZ6reDSK6cmyf60Tw3q61TjpMX0jznkJzKri7ijn2ebJU0yHR0mam 0AF2sl82zpQXxuxDzmgEurH1ALEEI3ZnIIXaX16MEy6K7ZOOZCc1EN/ydosC/ymm KXno1wOpaSCKySxfL35UBMWQ3bea09HbpEvYBi843tYYaou2YcF8TjlCnr2lK4aO irjMwwP4dWsfGVKCn9Swv0628HBHyG4= -----END CERTIFICATE-----Generated at Tue Oct 21 19:22:38 2025 by rpki-client