$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe05e287-8b35-3997-9481-5274865f0b2a.roa File: fe05e287-8b35-3997-9481-5274865f0b2a.roa (raw, json) Hash identifier: I7MTMDsSR8GatU7zmdWrMlAj6DLWb+XfyEZlQSpIa7c= Subject key identifier: D5:59:C9:E6:BF:41:AA:DB:1E:F5:07:D0:C6:A7:89:6E:44:BD:60:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C04083323F1873ACAE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe05e287-8b35-3997-9481-5274865f0b2a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.43.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c0:40:83:32:3f:18:73:ac:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=db317b76-8f6d-4efe-82ce-cc75cb99cd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:8a:3c:27:34:cb:39:68:95:23:b9:7d:2c: fd:5e:28:d6:a7:a0:ef:4e:91:53:c2:3a:5d:de:00: cf:12:38:b4:b5:2b:9e:05:15:5a:c8:0e:2d:41:73: 70:ae:b2:25:46:2a:d6:8c:06:e0:db:cb:31:a4:b2: 5d:6c:03:76:a5:ef:c4:3c:60:26:9f:37:68:54:6a: c8:bd:3a:67:5f:55:21:c2:16:01:39:a3:a6:b0:85: ea:54:f4:8d:0d:ab:bf:c1:a6:de:f0:29:75:1d:ed: 48:79:3d:fc:b5:35:2c:5d:d7:96:f7:ce:e7:1f:0d: ed:54:03:05:6f:1c:cc:7a:09:ea:47:3c:42:04:a8: 1e:89:03:7d:89:4e:9f:c0:d9:ff:89:76:e4:42:56: cc:0b:b0:98:ad:b4:b2:f8:85:74:f2:30:b7:e7:80: 0d:f1:eb:db:17:19:ae:29:02:bf:19:9d:3b:c4:a9: 9f:2f:eb:75:9c:a1:96:9c:7e:42:f8:75:ce:61:96: 50:6e:2a:0c:cc:56:78:85:01:ab:f1:92:db:96:40: 98:bf:fb:9f:e2:1c:76:15:d0:46:8f:c3:a2:a5:5b: 54:3c:16:b2:3b:52:91:d7:11:0a:48:51:b0:27:f4: ae:0d:44:54:d3:94:92:f7:3d:f6:59:4a:7f:43:fb: 5b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:59:C9:E6:BF:41:AA:DB:1E:F5:07:D0:C6:A7:89:6E:44:BD:60:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe05e287-8b35-3997-9481-5274865f0b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c6:d7:94:aa:c4:3c:88:b7:24:15:60:74:cc:3c:35:81:e7: 68:86:f1:3b:47:d3:c8:68:21:5d:22:b4:e6:77:d8:0e:ef:63: 95:a0:d0:3f:84:6d:18:45:6e:c0:06:f0:92:7e:7d:0b:27:4e: 4c:4b:f2:2c:7b:20:f8:be:40:6b:6a:e0:c2:a3:10:a7:24:e9: 93:5e:75:bc:d4:6c:c9:bd:e0:2f:fe:a3:b6:02:86:74:c3:d1: 8d:d3:22:fa:5a:4e:de:4d:0c:be:bc:ab:03:a0:2b:e6:d1:64: e7:2e:2b:85:41:79:f8:5a:bf:1d:fc:5c:aa:96:b0:a6:a8:62: a3:09:13:30:e9:ac:a7:ed:40:cc:56:bb:32:0f:06:d5:bd:c0: c8:00:dd:9c:86:59:58:ce:ab:0f:2f:7c:c4:8b:31:ae:1b:7b: 7a:fb:c6:39:b5:cf:e6:7d:c1:0d:86:6b:eb:aa:8c:d2:9f:d1: b1:53:b0:da:fe:3f:dc:c4:10:69:63:11:8c:c7:a4:eb:67:1c: 62:6f:cc:8e:46:07:dd:44:5e:62:28:07:aa:07:59:ce:50:a1: ae:26:35:21:b9:02:f1:36:bf:b1:eb:9f:c8:4b:8f:ec:3f:59: db:37:85:cf:ae:cc:6b:d0:cb:49:3d:86:cc:73:ad:79:9b:40: 82:90:fc:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMBAgzI/GHOsrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGIzMTdiNzYtOGY2ZC00ZWZlLTgyY2UtY2M3NWNiOTljZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzOKPCc0yzlolSO5fSz9XijWp6DvTpFTwjpd 3gDPEji0tSueBRVayA4tQXNwrrIlRirWjAbg28sxpLJdbAN2pe/EPGAmnzdoVGrI vTpnX1UhwhYBOaOmsIXqVPSNDau/wabe8Cl1He1IeT38tTUsXdeW987nHw3tVAMF bxzMegnqRzxCBKgeiQN9iU6fwNn/iXbkQlbMC7CYrbSy+IV08jC354AN8evbFxmu KQK/GZ07xKmfL+t1nKGWnH5C+HXOYZZQbioMzFZ4hQGr8ZLblkCYv/uf4hx2FdBG j8OipVtUPBayO1KR1xEKSFGwJ/SuDURU05SS9z32WUp/Q/tbvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVZyea/QarbHvUH0ManiW5EvWD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmUwNWUyODctOGIzNS0z OTk3LTk0ODEtNTI3NDg2NWYwYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPG15SqxDyItyQVYHTMPDWB52iG8TtH08hoIV0itOZ32A7vY5Wg0D+E bRhFbsAG8JJ+fQsnTkxL8ix7IPi+QGtq4MKjEKck6ZNedbzUbMm94C/+o7YChnTD 0Y3TIvpaTt5NDL68qwOgK+bRZOcuK4VBefhavx38XKqWsKaoYqMJEzDprKftQMxW uzIPBtW9wMgA3ZyGWVjOqw8vfMSLMa4be3r7xjm1z+Z9wQ2Ga+uqjNKf0bFTsNr+ P9zEEGljEYzHpOtnHGJvzI5GB91EXmIoB6oHWc5Qoa4mNSG5AvE2v7Hrn8hLj+w/ Wds3hc+uzGvQy0k9hsxzrXmbQIKQ/OI= -----END CERTIFICATE-----Generated at Tue Oct 21 19:35:44 2025 by rpki-client