$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab5c470-deee-3070-b6d4-585ec108f03f.roa File: fab5c470-deee-3070-b6d4-585ec108f03f.roa (raw, json) Hash identifier: BdbNcGZVwCp2rsdR4WupxR32ic+6z6g467/bnZOCr4w= Subject key identifier: C7:42:6F:2D:37:E1:28:D3:25:E7:F9:09:84:26:00:D4:16:42:18:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C0D6221D7B68A0B57D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab5c470-deee-3070-b6d4-585ec108f03f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.43.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c0:d6:22:1d:7b:68:a0:b5:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b8ff74c6-9510-4e6e-b015-b3d4958b058b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:80:77:d8:e6:71:ed:29:75:a4:8f:5f:ae:1a: f0:d9:de:d8:f6:45:9e:7f:5d:19:6c:53:8b:96:14: 8f:bf:de:10:41:17:f2:7e:35:ea:d6:e8:06:73:ae: 24:c9:67:fa:9b:9d:6a:07:08:3a:21:df:d5:bd:d2: 32:99:0d:a5:1d:1e:68:f7:1d:58:11:f9:c0:be:c2: 6e:32:e6:a4:1a:3a:62:48:27:dc:bf:e5:85:8b:7c: 67:57:3a:ea:3e:9e:ee:7e:6c:bd:51:b8:3d:89:6a: 3d:5c:ae:ab:55:09:b4:e7:22:0d:45:56:b1:fc:df: 29:3c:e2:a9:ea:c7:35:32:62:94:1b:4a:d8:5f:98: b7:c3:89:c4:f0:ac:7a:9c:57:d9:df:62:6c:ac:6f: 08:f4:91:c5:35:c9:31:73:c2:15:a6:06:9d:23:ff: 8e:c5:03:46:3c:78:70:e6:7d:c9:be:37:28:0a:30: e8:6a:45:9e:65:66:51:6f:7a:10:3b:f2:59:09:64: 16:7c:65:02:82:b1:de:39:35:4f:65:b2:65:ad:bf: 6f:d5:1b:77:ab:ad:64:30:19:7e:50:4b:1b:9c:cd: db:49:f7:54:4f:b9:d6:bb:34:e5:54:a3:27:36:3f: ac:80:1a:4e:8c:56:d5:e3:8b:2d:78:f8:b5:9e:77: f9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:42:6F:2D:37:E1:28:D3:25:E7:F9:09:84:26:00:D4:16:42:18:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab5c470-deee-3070-b6d4-585ec108f03f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:18:d9:04:37:30:f9:60:a6:3c:c1:28:f4:4d:2d:13:fc:f0: a5:b8:9c:9f:4f:20:6d:34:66:ea:c4:03:9b:11:e7:5d:b0:92: c9:aa:e1:8b:eb:a2:94:ca:79:5e:21:01:2f:18:bb:35:9b:e6: 36:7f:59:a8:20:d7:9a:97:f0:37:a7:44:4f:a4:b9:7c:f9:0e: ef:58:26:4d:77:82:e7:d9:8c:3c:e4:73:87:e3:d9:da:02:ca: 81:8f:90:55:cb:8c:e0:d5:a0:8c:8f:12:3c:f9:b9:35:d0:d8: cb:15:68:2e:d1:05:8c:5e:39:61:69:75:af:89:fa:c9:c8:3a: 6c:d7:bd:41:20:06:cd:e4:13:4d:22:50:03:cc:42:f7:0f:41: 44:66:43:d1:29:4c:fa:0a:a4:a6:fe:1e:07:1c:7e:bb:0a:bb: ce:79:a9:b0:49:95:45:94:26:8d:8f:ef:47:eb:81:a7:a3:d0: 46:18:67:7e:38:fa:ae:22:cf:d4:fc:b7:c6:93:f1:33:1a:59: 00:5d:93:67:42:7c:19:3d:d7:24:9c:1d:89:d0:9c:03:1a:df: 80:89:5f:fa:4c:f3:4e:7f:31:d1:35:ee:e6:ef:a2:95:56:e8: ff:eb:86:5a:72:a0:b9:91:93:c8:56:0e:fc:b2:32:96:de:fc: b6:43:5b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMDWIh17aKC1fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjhmZjc0YzYtOTUxMC00ZTZlLWIwMTUtYjNkNDk1OGIwNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoB32OZx7Sl1pI9frhrw2d7Y9kWef10ZbFOL lhSPv94QQRfyfjXq1ugGc64kyWf6m51qBwg6Id/VvdIymQ2lHR5o9x1YEfnAvsJu MuakGjpiSCfcv+WFi3xnVzrqPp7ufmy9Ubg9iWo9XK6rVQm05yINRVax/N8pPOKp 6sc1MmKUG0rYX5i3w4nE8Kx6nFfZ32JsrG8I9JHFNckxc8IVpgadI/+OxQNGPHhw 5n3JvjcoCjDoakWeZWZRb3oQO/JZCWQWfGUCgrHeOTVPZbJlrb9v1Rt3q61kMBl+ UEsbnM3bSfdUT7nWuzTlVKMnNj+sgBpOjFbV44stePi1nnf5kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdCby034SjTJef5CYQmANQWQhjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFiNWM0NzAtZGVlZS0z MDcwLWI2ZDQtNTg1ZWMxMDhmMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgY2QQ3MPlgpjzBKPRNLRP88KW4nJ9PIG00ZurEA5sR512wksmq4Yvr opTKeV4hAS8YuzWb5jZ/Wagg15qX8DenRE+kuXz5Du9YJk13gufZjDzkc4fj2doC yoGPkFXLjODVoIyPEjz5uTXQ2MsVaC7RBYxeOWFpda+J+snIOmzXvUEgBs3kE00i UAPMQvcPQURmQ9EpTPoKpKb+HgccfrsKu855qbBJlUWUJo2P70frgaej0EYYZ344 +q4iz9T8t8aT8TMaWQBdk2dCfBk91yScHYnQnAMa34CJX/pM805/MdE17ubvopVW 6P/rhlpyoLmRk8hWDvyyMpbe/LZDW+g= -----END CERTIFICATE-----Generated at Wed Oct 22 00:23:59 2025 by rpki-client