$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13b0d8a6-d3f4-34ce-b2ea-f28a803a08b3.roa File: 13b0d8a6-d3f4-34ce-b2ea-f28a803a08b3.roa (raw, json) Hash identifier: 03WGsC7XBrT94N2M0j1wm9Yk3l6Pof11QsZJ1qogNCM= Subject key identifier: F0:01:01:2E:BD:60:E0:D4:22:4C:8C:4D:AC:8A:BB:44:80:A9:20:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA57C86B68C2346F2AFB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13b0d8a6-d3f4-34ce-b2ea-f28a803a08b3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.37.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:57:c8:6b:68:c2:34:6f:2a:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5a3ba352-8536-470b-a3bf-3840e0bf03e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:18:47:ef:cd:d4:69:e9:71:77:43:34:f1: 83:47:d7:97:ab:2e:1f:1d:ab:e4:53:81:18:95:3b: b5:a5:1a:3a:a6:f8:cc:13:75:62:79:ac:5a:f6:5b: 84:93:96:9b:a5:75:a3:74:df:d4:4d:9f:4e:1d:18: 50:cf:be:d9:17:46:aa:be:1a:ad:15:43:e0:35:1f: 98:14:eb:19:d4:38:23:28:75:d1:c4:e9:ea:b9:2d: 52:3a:3a:96:47:d0:42:a2:4a:40:d2:c2:9e:fb:11: c1:c3:ad:85:da:e2:96:b3:28:64:33:7d:25:27:cd: 81:03:0f:41:12:dc:05:a3:ff:af:b1:87:ad:8e:9f: 19:6c:a2:22:64:a3:5c:89:67:fc:9e:0c:f0:03:ca: af:f5:50:f9:46:b8:15:e8:90:36:88:08:81:43:63: 42:97:76:5d:7a:df:26:8d:44:31:31:dd:40:68:81: a1:40:50:c7:3a:14:70:18:50:32:3a:72:45:73:aa: 00:85:22:cb:e1:37:f9:24:11:1e:a6:50:a7:e6:00: 75:eb:21:5d:eb:d2:0a:91:46:71:d9:02:49:cf:0f: 33:43:ca:cb:71:e7:c5:6f:28:5d:09:19:79:e5:85: b6:9c:da:0a:80:5f:31:fa:d8:16:5c:06:e2:c6:00: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:01:01:2E:BD:60:E0:D4:22:4C:8C:4D:AC:8A:BB:44:80:A9:20:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13b0d8a6-d3f4-34ce-b2ea-f28a803a08b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:e9:60:46:02:3c:55:b7:54:fc:1c:71:e5:a4:c5:fa:89:e6: 14:3f:89:fa:c9:17:d1:ee:0e:f5:c5:9a:2d:41:6f:e8:c1:55: 93:58:2b:e7:e1:fd:6d:e3:34:04:e4:f2:4b:57:f7:5f:c7:a4: a1:4f:dc:88:d3:20:78:65:c3:ab:c6:a4:7d:4e:49:bc:8a:06: 4a:b1:48:74:dc:11:f5:89:b1:f9:07:e6:63:c6:f2:b9:8a:6e: f1:59:8e:55:55:e5:e1:d0:b3:79:04:0f:dd:1e:d5:06:a1:b2: 25:09:3a:9d:36:d8:c4:2b:2d:e2:cc:c1:e1:cc:c0:40:d7:fa: 72:1b:4b:25:32:22:5f:8f:fe:e0:6b:05:50:02:35:15:a4:e8: 33:5b:34:93:25:4a:f9:f3:5b:1a:bf:3e:06:00:69:b3:51:f9: 6d:dd:0b:11:2d:cf:94:b8:11:da:9d:a8:a7:82:fa:fa:36:5c: 4b:60:e6:03:4c:d9:50:19:54:a7:91:0f:af:ba:8e:5c:83:71: 76:ec:7c:4e:2c:d0:4f:2d:93:1d:62:bf:14:53:45:a2:ba:61: a4:b0:9b:e1:f0:58:86:8c:a7:42:29:f7:03:95:27:f7:05:71: 97:86:0f:25:ed:3b:39:28:ee:a8:f0:33:50:ca:14:0f:9b:1f: b8:31:3c:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlfIa2jCNG8q+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NWEzYmEzNTItODUzNi00NzBiLWEzYmYtMzg0MGUwYmYwM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4AYR+/N1GnpcXdDNPGDR9eXqy4fHavkU4EY lTu1pRo6pvjME3Vieaxa9luEk5abpXWjdN/UTZ9OHRhQz77ZF0aqvhqtFUPgNR+Y FOsZ1DgjKHXRxOnquS1SOjqWR9BCokpA0sKe+xHBw62F2uKWsyhkM30lJ82BAw9B EtwFo/+vsYetjp8ZbKIiZKNciWf8ngzwA8qv9VD5RrgV6JA2iAiBQ2NCl3Zdet8m jUQxMd1AaIGhQFDHOhRwGFAyOnJFc6oAhSLL4Tf5JBEeplCn5gB16yFd69IKkUZx 2QJJzw8zQ8rLcefFbyhdCRl55YW2nNoKgF8x+tgWXAbixgDMXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPABAS69YODUIkyMTayKu0SAqSBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTNiMGQ4YTYtZDNmNC0z NGNlLWIyZWEtZjI4YTgwM2EwOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCX6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMzpYEYCPFW3VPwcceWkxfqJ5hQ/ifrJF9HuDvXFmi1Bb+jBVZNYK+fh /W3jNATk8ktX91/HpKFP3IjTIHhlw6vGpH1OSbyKBkqxSHTcEfWJsfkH5mPG8rmK bvFZjlVV5eHQs3kED90e1QahsiUJOp022MQrLeLMweHMwEDX+nIbSyUyIl+P/uBr BVACNRWk6DNbNJMlSvnzWxq/PgYAabNR+W3dCxEtz5S4EdqdqKeC+vo2XEtg5gNM 2VAZVKeRD6+6jlyDcXbsfE4s0E8tkx1ivxRTRaK6YaSwm+HwWIaMp0Ip9wOVJ/cF cZeGDyXtOzko7qjwM1DKFA+bH7gxPEo= -----END CERTIFICATE-----Generated at Mon Oct 20 20:42:51 2025 by rpki-client