$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3f8ec1a-7d89-3467-903c-980b076074ff.roa File: f3f8ec1a-7d89-3467-903c-980b076074ff.roa (raw, json) Hash identifier: e8E1psrXN4BiAj9fTck0wSVJ1TG2UORXhwYo1JJcJa8= Subject key identifier: 51:10:8E:E7:F5:2B:1A:DE:E4:D3:7E:20:93:9A:46:82:23:40:C6:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8BCBC14F1A5228679DD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3f8ec1a-7d89-3467-903c-980b076074ff.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.42.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:bc:bc:14:f1:a5:22:86:79:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8d89e6aa-1440-490d-a371-8d9045575782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8f:e1:74:17:c5:7b:23:9e:a5:df:ce:18:a8: 21:43:81:b7:33:85:bf:e2:b0:2f:01:e8:e0:9e:e8: f6:51:4b:d2:2a:fc:43:ec:0e:ea:9f:0c:e9:8e:ee: c3:83:dd:cd:07:6c:d4:d7:80:3c:94:03:ff:83:7b: 14:38:43:c3:55:c6:73:73:63:81:e8:9a:6c:ea:41: df:eb:82:be:58:6e:85:2e:9f:f8:44:6a:8a:97:c9: 2c:23:13:49:d0:fd:6d:2b:ae:19:ab:6e:b1:52:0b: 30:12:3b:90:3f:aa:04:97:63:3a:9d:2c:e6:3f:3c: 23:27:c0:49:09:ea:64:f8:44:d0:b4:76:6e:0f:aa: 05:6d:69:7e:c0:a4:71:c3:78:99:d3:c5:fb:93:6e: 33:52:5a:30:85:44:08:a4:b4:e3:97:03:f3:3c:ab: ca:64:41:92:df:5e:61:98:47:69:30:81:f0:57:e6: ce:d6:ac:90:2f:54:25:a8:8d:e6:6a:05:28:00:8b: 0b:fd:af:b1:ae:47:83:55:94:35:c5:2d:d6:90:03: 60:cb:30:34:c3:f0:3e:d2:cb:31:76:64:be:40:be: 74:f4:1c:ed:73:2e:2f:a7:d8:a7:6d:c4:02:04:1f: 78:ac:69:df:49:1a:df:4d:ae:93:fa:13:d9:2a:6a: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:10:8E:E7:F5:2B:1A:DE:E4:D3:7E:20:93:9A:46:82:23:40:C6:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3f8ec1a-7d89-3467-903c-980b076074ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b9:94:05:90:79:e4:55:c1:5d:ee:82:54:7d:b7:f0:c5:ca: e1:9c:40:67:67:ef:3c:02:3d:3c:61:cc:52:a2:36:47:3f:22: 38:b3:fb:a3:78:8b:71:ff:1a:5c:c0:76:39:4e:62:19:60:7f: 62:85:1c:60:79:16:48:d1:94:32:b1:10:0c:d7:2c:83:fb:bf: 15:9a:70:8e:ed:e5:cc:2a:0e:a8:f8:bb:97:52:ae:3b:bb:94: aa:88:6f:4a:f5:e2:1f:dc:61:67:24:70:ec:a3:f6:3c:29:78: 06:67:ea:82:c9:2b:b9:1b:c5:1e:ea:b3:d5:0a:70:9c:51:71: 99:0d:6a:78:8a:8e:56:98:c8:7d:af:05:08:62:76:49:60:c5: 6b:60:48:35:a0:d8:42:98:33:eb:a3:72:ad:df:e7:2b:c5:0a: cb:b8:c3:79:4c:ac:c1:40:0d:f9:04:18:05:f2:43:85:df:82: d1:f9:65:61:80:c1:61:4d:f3:f9:25:40:02:82:fd:d6:32:0b: ec:7b:31:17:b9:1e:78:37:e9:62:de:67:c5:1a:41:06:99:8d: 51:33:42:f2:b1:89:b9:53:d0:7a:84:91:91:a7:e9:a0:98:02: 94:fd:16:1e:e9:e6:95:a3:07:02:13:7b:54:3a:5a:8a:13:4a: 33:5b:0d:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLy8FPGlIoZ53QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGQ4OWU2YWEtMTQ0MC00OTBkLWEzNzEtOGQ5MDQ1NTc1NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4/hdBfFeyOepd/OGKghQ4G3M4W/4rAvAejg nuj2UUvSKvxD7A7qnwzpju7Dg93NB2zU14A8lAP/g3sUOEPDVcZzc2OB6Jps6kHf 64K+WG6FLp/4RGqKl8ksIxNJ0P1tK64Zq26xUgswEjuQP6oEl2M6nSzmPzwjJ8BJ Cepk+ETQtHZuD6oFbWl+wKRxw3iZ08X7k24zUlowhUQIpLTjlwPzPKvKZEGS315h mEdpMIHwV+bO1qyQL1QlqI3magUoAIsL/a+xrkeDVZQ1xS3WkANgyzA0w/A+0ssx dmS+QL509Bztcy4vp9inbcQCBB94rGnfSRrfTa6T+hPZKmq85QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEQjuf1Kxre5NN+IJOaRoIjQMZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjNmOGVjMWEtN2Q4OS0z NDY3LTkwM2MtOTgwYjA3NjA3NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB25lAWQeeRVwV3uglR9t/DFyuGcQGdn7zwCPTxhzFKiNkc/Ijiz+6N4 i3H/GlzAdjlOYhlgf2KFHGB5FkjRlDKxEAzXLIP7vxWacI7t5cwqDqj4u5dSrju7 lKqIb0r14h/cYWckcOyj9jwpeAZn6oLJK7kbxR7qs9UKcJxRcZkNaniKjlaYyH2v BQhidklgxWtgSDWg2EKYM+ujcq3f5yvFCsu4w3lMrMFADfkEGAXyQ4XfgtH5ZWGA wWFN8/klQAKC/dYyC+x7MRe5Hng36WLeZ8UaQQaZjVEzQvKxiblT0HqEkZGn6aCY ApT9Fh7p5pWjBwITe1Q6WooTSjNbDdE= -----END CERTIFICATE-----Generated at Wed Oct 22 00:27:24 2025 by rpki-client