$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6ed39b0-8ab1-3b42-aeb9-1c3527d45955.roa File: f6ed39b0-8ab1-3b42-aeb9-1c3527d45955.roa (raw, json) Hash identifier: JpeU19CzCE5u9jb6R09wMaxQm47ymSju+kbqS8yP8zA= Subject key identifier: 21:A3:53:8E:07:33:4D:6D:3B:F5:38:2D:D8:CB:E9:43:D2:05:F4:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA7039E43FEB06A6FF6E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6ed39b0-8ab1-3b42-aeb9-1c3527d45955.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.59.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:70:39:e4:3f:eb:06:a6:ff:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8b249ce4-b18c-4729-8cdc-988c6c6a157b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:85:43:46:38:81:b8:10:8f:85:72:e7:96:61: 14:ae:0f:29:56:1f:df:73:43:04:c4:f3:c3:cc:45: a1:8b:8c:ad:b0:07:2a:f7:67:6a:6a:6a:c2:9d:4f: 39:f2:12:30:c9:e8:a6:85:3d:91:de:03:37:c9:7d: 03:27:f7:bf:4f:4e:69:50:92:cc:c4:51:e7:d8:01: 6d:6b:ce:f4:8a:72:21:1c:fe:3a:ef:8c:88:7f:d6: 1d:c0:fb:0d:6a:87:f9:d7:9c:aa:98:5b:89:dd:8e: f6:b5:a8:92:f8:ae:00:cb:c8:3b:e2:06:ad:dc:14: dd:3b:7b:ef:3e:47:c4:a4:7b:74:17:d5:c9:36:57: ef:4b:47:af:91:ac:25:6a:80:b5:7d:74:83:8d:8f: 6b:67:e8:31:ad:4a:b0:9c:3c:a8:8e:97:e0:7f:92: d1:7c:1d:9d:f1:41:3d:75:85:97:1f:01:c7:12:f1: ed:a9:42:77:c4:f9:0b:44:a3:23:a6:41:b2:1f:ef: 21:4d:e9:34:5b:17:c8:81:8d:26:d2:9c:5a:0d:ac: bd:06:2b:fa:a2:d4:d2:b3:81:5b:40:80:92:6e:3d: 96:dc:b5:f5:c1:c3:a4:d2:d4:42:1c:1f:58:d1:f3: 61:a5:d6:9e:5b:a9:53:55:6f:2d:9b:69:33:b4:70: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A3:53:8E:07:33:4D:6D:3B:F5:38:2D:D8:CB:E9:43:D2:05:F4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6ed39b0-8ab1-3b42-aeb9-1c3527d45955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ea:c6:f7:49:93:1d:99:38:02:d4:20:e8:c8:61:e8:1c:a6: 62:cb:d1:ef:fb:35:4a:34:72:16:a6:35:7a:1f:ac:90:2b:34: e5:40:4c:cb:93:22:8b:87:7b:f9:25:7c:b2:91:57:2b:10:2a: c3:c0:3c:13:7c:b9:1f:3a:e4:52:4e:6d:d5:a3:17:7d:83:9f: 72:fc:51:b4:35:12:3f:6b:6f:76:3c:33:b1:e6:8d:65:f9:a7: 43:b4:fa:37:b6:95:16:13:ad:b5:ce:80:2d:2e:0e:e6:23:0b: 3e:b0:bf:3b:e1:64:65:ab:c9:97:fb:49:58:51:1f:e5:c3:6d: 3c:97:a2:95:d8:b2:a3:83:b2:72:21:9a:1d:af:ec:80:18:b4: 53:e9:9b:e5:51:c5:06:a0:3d:26:89:c5:d3:32:04:03:38:bb: 81:91:17:9a:cf:4d:3a:42:b3:e7:65:29:e8:8c:74:36:55:6f: 01:1e:10:3f:97:32:9f:d3:68:e1:a5:11:5c:75:a7:0f:c0:42: 58:32:30:7d:d3:e8:bc:a9:f3:ff:b3:ba:7d:33:99:62:04:d5: 8f:1c:e7:60:8a:d6:cc:5a:4c:ff:f4:b6:4f:ae:b2:a2:5d:34: 44:55:9b:36:7f:35:89:c0:e0:af:11:29:ba:e9:6d:3b:60:73: 27:6a:29:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqnA55D/rBqb/bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGIyNDljZTQtYjE4Yy00NzI5LThjZGMtOTg4YzZjNmExNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4VDRjiBuBCPhXLnlmEUrg8pVh/fc0MExPPD zEWhi4ytsAcq92dqamrCnU858hIwyeimhT2R3gM3yX0DJ/e/T05pUJLMxFHn2AFt a870inIhHP4674yIf9YdwPsNaof515yqmFuJ3Y72taiS+K4Ay8g74gat3BTdO3vv PkfEpHt0F9XJNlfvS0evkawlaoC1fXSDjY9rZ+gxrUqwnDyojpfgf5LRfB2d8UE9 dYWXHwHHEvHtqUJ3xPkLRKMjpkGyH+8hTek0WxfIgY0m0pxaDay9Biv6otTSs4Fb QICSbj2W3LX1wcOk0tRCHB9Y0fNhpdaeW6lTVW8tm2kztHDW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGjU44HM01tO/U4LdjL6UPSBfRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjZlZDM5YjAtOGFiMS0z YjQyLWFlYjktMWMzNTI3ZDQ1OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnqxvdJkx2ZOALUIOjIYegcpmLL0e/7NUo0chamNXofrJArNOVATMuT IouHe/klfLKRVysQKsPAPBN8uR865FJObdWjF32Dn3L8UbQ1Ej9rb3Y8M7HmjWX5 p0O0+je2lRYTrbXOgC0uDuYjCz6wvzvhZGWryZf7SVhRH+XDbTyXopXYsqODsnIh mh2v7IAYtFPpm+VRxQagPSaJxdMyBAM4u4GRF5rPTTpCs+dlKeiMdDZVbwEeED+X Mp/TaOGlEVx1pw/AQlgyMH3T6Lyp8/+zun0zmWIE1Y8c52CK1sxaTP/0tk+usqJd NERVmzZ/NYnA4K8RKbrpbTtgcydqKQY= -----END CERTIFICATE-----Generated at Tue Oct 21 19:14:53 2025 by rpki-client