$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e2cc044-7cf5-307c-b7b9-ebc33f1618a6.roa File: 0e2cc044-7cf5-307c-b7b9-ebc33f1618a6.roa (raw, json) Hash identifier: IVJWlgSwDxZNySw1Dlhn7MemrXCQYxB19WvKKyCtzHk= Subject key identifier: 70:61:79:46:E5:E1:E4:5B:F0:21:CA:35:D3:23:7A:4C:61:FF:8B:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8A74C78CBB806D313DB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e2cc044-7cf5-307c-b7b9-ebc33f1618a6.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.53.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:a7:4c:78:cb:b8:06:d3:13:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=b2384867-4e58-443d-b7ff-ff57da81d7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:49:3a:6d:82:56:48:16:ef:a1:d8:c5:e4: 6a:81:17:ba:38:4a:40:d4:53:2c:93:bf:99:fb:cf: a2:5c:fc:7d:15:1f:2e:c3:3f:50:52:00:31:4a:30: 5e:47:b3:03:0a:b7:a8:a9:2c:e0:81:89:70:5b:8f: cc:50:48:44:6a:60:20:54:46:72:08:a2:ff:eb:43: df:11:e2:6e:de:d5:9a:a4:26:5d:f6:2c:b4:79:75: 2a:5b:fb:ba:ab:ce:b0:a2:f8:54:d1:ac:e8:f0:a7: d1:e6:5c:c8:ce:26:bb:0e:d3:3b:7c:5a:13:ea:37: 40:2d:28:17:c4:7e:91:0a:2c:7e:26:b9:50:20:a9: 7b:1c:1c:b1:0b:03:d0:61:a2:47:61:5a:c7:e7:ae: 7b:85:16:68:0d:11:10:08:dd:ab:4c:d3:e8:93:43: d3:45:8c:71:de:02:cd:1d:53:d4:1c:49:3e:6f:b0: 88:66:8b:c3:48:58:8c:9e:8e:09:a0:54:12:6c:48: 2b:76:99:8d:a4:48:89:49:0a:43:b6:db:5e:5d:07: 43:11:2b:d9:a1:75:78:c3:8f:50:94:ca:07:f4:29: ad:eb:a4:42:92:ba:38:96:cd:d6:36:df:fb:c4:cc: 2d:6c:9a:d5:90:18:7d:33:ec:92:59:60:03:f2:12: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:61:79:46:E5:E1:E4:5B:F0:21:CA:35:D3:23:7A:4C:61:FF:8B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e2cc044-7cf5-307c-b7b9-ebc33f1618a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b9:a2:b6:43:d5:ee:8f:aa:4a:a6:72:92:1b:d6:b0:81:52: ad:96:ce:d7:f2:d3:24:7d:d6:f6:a6:f6:cb:36:f4:bb:78:b5: b5:39:7e:57:01:ca:78:46:4d:ed:30:90:d3:89:eb:78:06:5c: a4:6e:33:b0:34:67:66:fd:ae:4f:d4:88:ec:0c:66:54:83:44: 93:05:0a:39:49:41:02:dc:23:4d:24:ff:d7:d2:b2:d9:d1:80: 75:2c:1f:0d:c4:ff:3e:5d:1f:d2:a6:14:f8:70:d9:ac:7e:ed: 93:fb:b1:ac:34:54:95:a3:3e:7f:f9:10:6e:71:7c:9b:d4:71: 86:dc:22:3b:3d:cc:a8:2a:35:2f:a4:54:c1:38:e1:72:25:8d: 22:73:fd:23:ab:99:3f:3b:ba:b4:f0:85:20:5d:ef:a0:69:80: 84:78:93:d0:63:a4:54:a5:f4:11:1a:42:d7:bc:8e:03:48:b2: 73:f0:82:42:db:58:51:15:5e:dd:db:6d:5e:ed:eb:f4:8d:30: d6:32:9e:db:42:ee:78:5f:26:09:5b:0f:ae:87:be:ee:dc:63: 41:b2:85:78:d5:17:c1:9b:8d:0a:21:dd:6c:cb:c0:4a:9f:9c: 88:80:68:17:70:9e:39:f7:90:21:8b:7b:3c:a7:f7:1b:dc:de: a6:ef:f9:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKdMeMu4BtMT24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YjIzODQ4NjctNGU1OC00NDNkLWI3ZmYtZmY1N2RhODFkN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLdJOm2CVkgW76HYxeRqgRe6OEpA1FMsk7+Z +8+iXPx9FR8uwz9QUgAxSjBeR7MDCreoqSzggYlwW4/MUEhEamAgVEZyCKL/60Pf EeJu3tWapCZd9iy0eXUqW/u6q86wovhU0azo8KfR5lzIzia7DtM7fFoT6jdALSgX xH6RCix+JrlQIKl7HByxCwPQYaJHYVrH5657hRZoDREQCN2rTNPok0PTRYxx3gLN HVPUHEk+b7CIZovDSFiMno4JoFQSbEgrdpmNpEiJSQpDttteXQdDESvZoXV4w49Q lMoH9Cmt66RCkro4ls3WNt/7xMwtbJrVkBh9M+ySWWAD8hJG7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBheUbl4eRb8CHKNdMjekxh/4uHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGUyY2MwNDQtN2NmNS0z MDdjLWI3YjktZWJjMzNmMTYxOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy5orZD1e6PqkqmcpIb1rCBUq2Wztfy0yR91vam9ss29Lt4tbU5flcB ynhGTe0wkNOJ63gGXKRuM7A0Z2b9rk/UiOwMZlSDRJMFCjlJQQLcI00k/9fSstnR gHUsHw3E/z5dH9KmFPhw2ax+7ZP7saw0VJWjPn/5EG5xfJvUcYbcIjs9zKgqNS+k VME44XIljSJz/SOrmT87urTwhSBd76BpgIR4k9BjpFSl9BEaQte8jgNIsnPwgkLb WFEVXt3bbV7t6/SNMNYynttC7nhfJglbD66Hvu7cY0GyhXjVF8GbjQoh3WzLwEqf nIiAaBdwnjn3kCGLezyn9xvc3qbv+dQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:42 2025 by rpki-client