$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12677f14-6e2c-3546-b2e7-36863e2d2f69.roa File: 12677f14-6e2c-3546-b2e7-36863e2d2f69.roa (raw, json) Hash identifier: 33aXM8iSV6ABfIJrByhZlTh/OVP8GhRnkbiGxtCTvsE= Subject key identifier: 58:32:D8:D5:E7:2A:95:43:E9:3D:6E:D7:36:5A:2A:13:5B:51:64:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB908A1949615BF4A045140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12677f14-6e2c-3546-b2e7-36863e2d2f69.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 20214 IP address blocks: 68.86.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:08:a1:94:96:15:bf:4a:04:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=40823324-956d-40b0-99d6-dd83b86d02d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:f3:60:85:ab:4d:e8:0c:f9:3a:a1:82:ff: ec:08:ae:aa:f7:a6:d7:83:af:0a:5b:3a:52:ea:b2: 00:3b:28:d4:73:a3:21:a8:96:d3:3c:26:37:53:34: 8f:0e:60:ff:cf:aa:71:bf:b0:4f:31:59:97:7b:9c: a0:b5:7f:23:88:76:e5:cf:34:69:5a:48:66:6f:57: 3d:41:b0:09:2d:c4:d1:b7:cf:ee:eb:b6:4d:8f:f4: 56:19:6d:67:03:d2:bb:30:56:73:78:cf:26:4a:3c: b5:0c:20:f2:1d:5e:c0:a7:df:5a:fe:4e:2e:4a:72: 75:a0:a9:08:75:ed:79:9c:5b:6a:95:10:bc:c9:19: c3:93:03:7c:cd:2e:39:0d:7c:a1:f1:18:c5:d0:00: 8c:9c:1a:f1:b1:cd:ad:d8:27:3a:c1:93:d7:2c:7e: 99:3e:85:9c:7e:d4:b9:b3:45:c5:0b:92:52:15:7e: dc:30:32:02:00:2e:d3:03:bb:10:e2:0c:11:65:8f: 36:fa:d1:15:88:a8:38:2f:14:f8:14:61:c2:e6:b1: e9:89:e5:6f:90:e3:d6:5a:22:04:71:c0:48:04:6f: 74:8e:16:d4:3e:1f:a8:8c:6c:d7:28:a9:8d:77:c2: 23:af:3f:bf:24:03:d0:12:db:ac:73:cb:a9:30:34: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:32:D8:D5:E7:2A:95:43:E9:3D:6E:D7:36:5A:2A:13:5B:51:64:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12677f14-6e2c-3546-b2e7-36863e2d2f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:fb:f3:97:b0:d7:80:02:bd:9e:8c:37:d7:0e:4e:80:c8:01: 7f:d6:a1:4d:9e:a1:41:cb:33:ec:fa:62:ff:a7:6f:b2:fa:07: 9f:50:36:f4:1a:e4:b7:10:9b:5b:1e:0c:4d:1b:27:8b:56:7c: 4a:95:0d:a1:17:08:ba:10:3b:5b:e9:cd:02:49:c5:c4:5a:b7: f6:7d:53:12:bf:38:82:92:d0:0c:82:b2:99:e2:b6:c4:c7:aa: f5:2b:da:a8:fe:a4:b0:2d:e0:39:29:a3:74:bc:21:ba:49:4c: 9b:72:24:00:d3:02:6b:8c:fd:fc:2c:4c:97:f0:af:95:82:ff: 1e:5c:d8:a9:d3:04:7f:da:c6:78:bc:bc:a4:ef:94:5d:11:28: e5:a8:e1:77:34:ba:40:99:28:aa:5d:85:7a:fb:92:e2:d4:51: 77:d2:92:79:fd:fe:48:2e:ac:0a:79:8e:61:f7:43:cb:f3:37: 96:a2:54:31:0e:d2:26:9a:c1:86:35:1f:5b:ff:48:92:21:49: 2a:e9:36:05:61:07:23:f8:30:1e:6c:db:99:10:f9:8d:cb:9e: 50:06:79:5d:9f:1b:05:d8:6a:84:16:5d:98:a9:b9:f9:32:4f: f2:9e:94:d7:e2:5b:65:bf:0d:66:95:c2:0b:f3:1a:51:13:bc: 1c:0f:d2:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uQihlJYVv0oEUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NDA4MjMzMjQtOTU2ZC00MGIwLTk5ZDYtZGQ4M2I4NmQwMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeDzYIWrTegM+Tqhgv/sCK6q96bXg68KWzpS 6rIAOyjUc6MhqJbTPCY3UzSPDmD/z6pxv7BPMVmXe5ygtX8jiHblzzRpWkhmb1c9 QbAJLcTRt8/u67ZNj/RWGW1nA9K7MFZzeM8mSjy1DCDyHV7Ap99a/k4uSnJ1oKkI de15nFtqlRC8yRnDkwN8zS45DXyh8RjF0ACMnBrxsc2t2Cc6wZPXLH6ZPoWcftS5 s0XFC5JSFX7cMDICAC7TA7sQ4gwRZY82+tEViKg4LxT4FGHC5rHpieVvkOPWWiIE ccBIBG90jhbUPh+ojGzXKKmNd8Ijrz+/JAPQEtusc8upMDSjOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgy2NXnKpVD6T1u1zZaKhNbUWTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTI2NzdmMTQtNmUyYy0z NTQ2LWIyZTctMzY4NjNlMmQyZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn785ew14ACvZ6MN9cOToDIAX/WoU2eoUHLM+z6Yv+nb7L6B59QNvQa 5LcQm1seDE0bJ4tWfEqVDaEXCLoQO1vpzQJJxcRat/Z9UxK/OIKS0AyCspnitsTH qvUr2qj+pLAt4Dkpo3S8IbpJTJtyJADTAmuM/fwsTJfwr5WC/x5c2KnTBH/axni8 vKTvlF0RKOWo4Xc0ukCZKKpdhXr7kuLUUXfSknn9/kgurAp5jmH3Q8vzN5aiVDEO 0iaawYY1H1v/SJIhSSrpNgVhByP4MB5s25kQ+Y3LnlAGeV2fGwXYaoQWXZipufky T/KelNfiW2W/DWaVwgvzGlETvBwP0sE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:35:47 2025 by rpki-client