$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5c2e669-46e2-3473-a4b9-7617ca79e860.roa File: f5c2e669-46e2-3473-a4b9-7617ca79e860.roa (raw, json) Hash identifier: Z+2Iq1oInZ/Y2nmBLtj97qxtKNbmDDKcf4iV1BBo+Dw= Subject key identifier: 56:49:18:19:AD:43:C3:57:34:49:81:4B:5E:BB:61:2B:1E:3A:83:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA6AC565CDA906A8CA99B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5c2e669-46e2-3473-a4b9-7617ca79e860.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.55.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:6a:c5:65:cd:a9:06:a8:ca:99:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=32a22803-e196-48af-b418-39aa09b2f356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:ed:1e:6f:9a:52:36:c0:b9:48:9b:e1:9e: ca:ba:0c:7c:93:1e:b4:06:c2:3f:36:db:fc:dd:24: 41:23:8f:34:96:2d:55:43:2d:a5:ad:a7:3f:62:a4: 89:cc:c7:34:78:3e:0d:27:c5:b5:64:bd:10:3f:1e: 23:66:c9:05:84:4c:79:53:82:26:7c:e5:2d:cc:cc: a8:d0:bf:ad:21:c1:a3:19:a1:40:0f:dd:e6:ed:0b: b6:1e:0f:0e:45:67:f5:20:6e:dd:c7:c7:de:11:ab: a6:5d:44:a4:52:c1:0f:d2:76:fd:2a:95:2a:cc:56: 81:90:6d:46:ed:ea:b4:04:1f:8f:5b:27:44:13:70: 2c:f9:32:88:a7:08:ad:df:12:a5:a3:c8:31:00:f9: 27:e8:9a:66:aa:02:09:af:7e:4d:c8:34:8d:8c:be: b5:87:12:0b:b8:71:1d:a8:10:0a:1a:7f:90:c4:c4: fd:f4:b7:ca:30:45:23:1f:f3:12:39:c1:2e:d2:f9: 4b:10:00:34:9f:e4:3a:32:41:de:4a:43:65:e1:8a: 6a:53:b2:9f:c6:7b:f8:f7:56:a1:0e:d0:4b:bc:79: 49:de:12:ac:f2:19:53:b6:5c:a8:6e:cc:6b:55:ab: c9:46:d8:e8:46:b6:c1:29:27:09:76:03:8d:b2:93: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:49:18:19:AD:43:C3:57:34:49:81:4B:5E:BB:61:2B:1E:3A:83:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5c2e669-46e2-3473-a4b9-7617ca79e860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.55.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b8:e1:f0:ab:4a:9b:7e:c4:4c:33:50:4b:d1:39:da:6f:6e: 95:7c:e1:1c:fa:1c:ea:e5:12:47:a6:33:0e:53:58:2c:d2:ee: a3:0a:d0:3e:32:07:e4:5d:d2:7b:2b:10:36:57:d2:7f:0d:be: 89:b5:94:06:6e:dc:14:59:de:af:33:41:ae:72:8a:cd:be:0c: 1c:ae:e9:70:e3:66:32:65:a6:5f:bd:9c:99:21:ac:9a:7c:74: 4e:75:c7:c0:45:c4:6a:13:fc:15:e6:b0:bf:60:af:c7:f8:c6: b3:5e:ec:c6:f9:55:f3:db:58:f9:32:2b:7e:ed:d3:2d:eb:c2: 26:ae:4c:d0:81:c4:4f:4b:42:d9:6a:e6:00:99:5e:34:75:3c: f6:8d:5e:ef:41:e3:b5:4b:a7:24:05:ea:02:d2:3d:c7:ef:06: 1f:34:b6:e2:03:e8:41:71:07:32:0b:e1:b7:1d:a9:7e:4a:fa: f1:ea:8b:e6:a5:e0:31:31:02:47:09:ec:44:ae:2f:e4:2b:61: 1a:65:57:10:37:74:01:98:fe:e2:52:91:a2:07:b6:1c:c7:cb: c8:95:15:2b:df:66:01:fb:68:fa:7c:0b:f6:e4:02:f8:78:eb: 82:cd:b9:0f:bf:28:b7:d7:3b:83:20:d3:8a:73:fe:8d:20:fb: 6f:6b:78:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqmrFZc2pBqjKmbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MzJhMjI4MDMtZTE5Ni00OGFmLWI0MTgtMzlhYTA5YjJmMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ7tHm+aUjbAuUib4Z7Kugx8kx60BsI/Ntv8 3SRBI480li1VQy2lrac/YqSJzMc0eD4NJ8W1ZL0QPx4jZskFhEx5U4ImfOUtzMyo 0L+tIcGjGaFAD93m7Qu2Hg8ORWf1IG7dx8feEaumXUSkUsEP0nb9KpUqzFaBkG1G 7eq0BB+PWydEE3As+TKIpwit3xKlo8gxAPkn6JpmqgIJr35NyDSNjL61hxILuHEd qBAKGn+QxMT99LfKMEUjH/MSOcEu0vlLEAA0n+Q6MkHeSkNl4YpqU7Kfxnv491ah DtBLvHlJ3hKs8hlTtlyobsxrVavJRtjoRrbBKScJdgONspOHmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZJGBmtQ8NXNEmBS167YSseOoM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjVjMmU2NjktNDZlMi0z NDczLWE0YjktNzYxN2NhNzllODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG44fCrSpt+xEwzUEvROdpvbpV84Rz6HOrlEkemMw5TWCzS7qMK0D4y B+Rd0nsrEDZX0n8Nvom1lAZu3BRZ3q8zQa5yis2+DByu6XDjZjJlpl+9nJkhrJp8 dE51x8BFxGoT/BXmsL9gr8f4xrNe7Mb5VfPbWPkyK37t0y3rwiauTNCBxE9LQtlq 5gCZXjR1PPaNXu9B47VLpyQF6gLSPcfvBh80tuID6EFxBzIL4bcdqX5K+vHqi+al 4DExAkcJ7ESuL+QrYRplVxA3dAGY/uJSkaIHthzHy8iVFSvfZgH7aPp8C/bkAvh4 64LNuQ+/KLfXO4Mg04pz/o0g+29reGk= -----END CERTIFICATE-----Generated at Wed Oct 22 00:44:19 2025 by rpki-client