$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4def27c-301f-3740-9dcd-1df2352990f8.roa File: f4def27c-301f-3740-9dcd-1df2352990f8.roa (raw, json) Hash identifier: 4U3JbBQpd1hJmoLAEFCsvwBe4OuUo08BqEdwVFjb/Eo= Subject key identifier: BB:10:CE:EE:A5:A8:D7:DE:80:AB:59:62:44:54:3B:0D:EE:F7:6A:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8BDFA46C021661CBC5140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4def27c-301f-3740-9dcd-1df2352990f8.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.42.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:bd:fa:46:c0:21:66:1c:bc:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=bf30d2f1-e2a0-476a-b988-fc0d0b66537c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:55:42:db:bd:a7:b3:4b:59:43:da:1f:17: 83:df:fb:90:1b:39:de:23:35:d3:23:7e:e1:d1:19: e3:b0:fa:8a:b7:9f:a1:e1:95:a6:8e:59:31:99:1f: 11:21:cc:a4:19:74:0d:af:d7:61:b5:10:18:42:aa: 79:20:13:c5:0f:b0:08:5f:c4:2c:46:1c:ee:f0:3d: 5f:7a:33:ea:02:a2:ae:35:97:b0:a9:30:d1:d2:56: fc:e1:7a:85:46:3e:a3:76:38:65:c3:76:52:ca:5d: 23:de:c8:f5:db:8c:a9:a8:32:17:e8:b9:3d:90:40: 1a:04:40:0d:28:25:8e:5e:d3:65:60:8b:75:57:ef: 3f:81:e2:2e:15:ed:be:e9:1b:10:99:4b:d2:8e:e5: 55:7f:f2:8f:b3:a6:06:e6:d0:57:8e:ae:83:bf:60: d0:04:f2:bd:a7:a5:58:5b:3d:f5:1b:d0:b8:27:ed: 25:43:86:81:f4:8a:e9:5c:28:4d:c7:b4:43:8d:fc: 79:6a:16:f5:28:e9:62:ae:7b:8e:d4:17:a9:59:54: 92:3e:03:28:3b:6f:4d:b8:ad:ae:20:76:ed:c3:c2: 65:92:83:6f:1c:b4:e0:15:57:07:d7:73:c3:85:99: b5:64:2f:24:52:a2:74:cf:bb:30:66:e5:f2:0d:02: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:10:CE:EE:A5:A8:D7:DE:80:AB:59:62:44:54:3B:0D:EE:F7:6A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4def27c-301f-3740-9dcd-1df2352990f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5b:68:64:e2:b5:4d:4c:cf:be:0d:60:a7:b4:a3:21:a8:64: 9f:98:e8:df:3d:43:a7:2f:9b:7c:a9:e6:13:1a:4f:e1:06:4a: 6d:32:07:8d:75:d4:18:df:64:2d:4e:f8:76:ca:1a:53:44:71: 10:6c:10:9b:0e:44:fc:5c:66:a1:50:02:15:63:37:d3:d3:18: 21:74:32:71:f6:a1:54:cb:a7:30:c0:c4:11:87:ad:e8:ab:51: 82:f8:32:c1:e9:ee:b7:ee:9d:f3:f2:6f:4a:88:17:24:7b:5a: e4:a2:71:48:5c:cb:31:b8:2a:a0:29:79:a6:7d:bd:1d:10:b4: a9:16:b0:f9:30:d1:43:3d:91:ed:ca:49:d9:61:b0:23:e1:7a: 08:44:ad:de:bd:bc:7f:9c:11:f9:4f:d3:2f:f3:51:d9:67:64: 47:15:f1:5b:40:9a:c0:81:0b:d6:9c:c1:92:0c:e7:50:41:bc: e9:0f:e7:a4:af:f6:c0:1b:ff:f2:4b:56:97:a7:e4:50:46:0c: 83:c5:d2:cc:ba:0a:4b:c1:ca:e9:af:8b:17:a1:f2:be:b6:ac: 2f:fd:ed:18:b2:ef:b4:cc:17:77:8e:1f:15:3c:85:89:f7:25: d7:ad:e2:3f:59:6a:e2:38:fa:a8:3c:c6:99:8e:ed:74:4b:55: 49:58:53:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqL36RsAhZhy8UUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YmYzMGQyZjEtZTJhMC00NzZhLWI5ODgtZmMwZDBiNjY1MzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA1VQtu9p7NLWUPaHxeD3/uQGzneIzXTI37h 0RnjsPqKt5+h4ZWmjlkxmR8RIcykGXQNr9dhtRAYQqp5IBPFD7AIX8QsRhzu8D1f ejPqAqKuNZewqTDR0lb84XqFRj6jdjhlw3ZSyl0j3sj124ypqDIX6Lk9kEAaBEAN KCWOXtNlYIt1V+8/geIuFe2+6RsQmUvSjuVVf/KPs6YG5tBXjq6Dv2DQBPK9p6VY Wz31G9C4J+0lQ4aB9IrpXChNx7RDjfx5ahb1KOlirnuO1BepWVSSPgMoO29NuK2u IHbtw8JlkoNvHLTgFVcH13PDhZm1ZC8kUqJ0z7swZuXyDQKRWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsQzu6lqNfegKtZYkRUOw3u92pGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjRkZWYyN2MtMzAxZi0z NzQwLTlkY2QtMWRmMjM1Mjk5MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJbaGTitU1Mz74NYKe0oyGoZJ+Y6N89Q6cvm3yp5hMaT+EGSm0yB411 1BjfZC1O+HbKGlNEcRBsEJsORPxcZqFQAhVjN9PTGCF0MnH2oVTLpzDAxBGHreir UYL4MsHp7rfunfPyb0qIFyR7WuSicUhcyzG4KqApeaZ9vR0QtKkWsPkw0UM9ke3K SdlhsCPheghErd69vH+cEflP0y/zUdlnZEcV8VtAmsCBC9acwZIM51BBvOkP56Sv 9sAb//JLVpen5FBGDIPF0sy6CkvByumvixeh8r62rC/97Riy77TMF3eOHxU8hYn3 Jdet4j9ZauI4+qg8xpmO7XRLVUlYU9g= -----END CERTIFICATE-----Generated at Tue Oct 21 19:48:37 2025 by rpki-client