$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16676859-6c45-3241-be40-8328630ade00.roa File: 16676859-6c45-3241-be40-8328630ade00.roa (raw, json) Hash identifier: gcjlaN24ObEHsNEKpMDT/hQIgeapk4JAvBkzFEB+gBM= Subject key identifier: 44:E5:C6:61:1B:C4:15:97:F2:9B:24:A7:BF:6D:D4:E7:34:FD:0C:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB89EE33AC910D0B172F700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16676859-6c45-3241-be40-8328630ade00.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.52.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:9e:e3:3a:c9:10:d0:b1:72:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=82d3e4e5-6ce0-4bf8-a4b9-8b20a3b06242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:20:0f:be:4b:fb:16:8d:b8:91:ff:30:a9: 4a:7d:97:dd:37:99:29:e8:b1:b7:da:c4:14:72:03: d7:25:44:5e:46:1b:cb:cb:f7:10:ff:56:7d:3a:c3: e1:5a:c6:46:ff:be:d1:a1:b9:27:77:d1:9c:33:50: 62:85:93:41:86:d8:31:5e:95:32:2a:a8:ab:11:5d: b0:ea:95:88:1a:cd:c2:8f:6d:30:66:66:a0:fb:ea: d7:80:ee:a9:96:b2:72:23:1c:3a:e0:53:5c:c9:e0: 73:7d:1b:bf:65:e4:0a:b8:87:dd:4f:30:13:97:d4: 48:77:34:4f:3f:a9:c2:85:7f:d7:cd:d7:e2:6c:80: 46:ac:66:86:9a:fb:0d:aa:a4:c4:60:19:30:c5:68: 81:1a:26:ac:dd:02:3f:70:91:69:89:1f:e6:7e:ff: 84:88:26:8f:28:9e:e2:45:e1:d1:bc:db:e6:b1:1b: 2e:07:91:d2:ec:5d:9e:a4:04:78:81:29:62:cc:ff: 2a:0f:1e:68:62:b8:c8:3c:3b:29:22:ef:03:61:6b: d7:2a:df:e3:95:ff:b3:11:58:7e:21:1b:2e:ac:17: 8e:ae:c3:7a:b1:81:56:29:3e:e0:ab:60:e5:59:21: c2:54:64:b9:cd:be:56:68:90:18:81:83:51:7c:1c: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E5:C6:61:1B:C4:15:97:F2:9B:24:A7:BF:6D:D4:E7:34:FD:0C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16676859-6c45-3241-be40-8328630ade00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:1d:e4:f9:7f:16:2c:e4:bc:59:3e:98:84:40:fd:88:d8:9f: 42:6b:7e:b9:86:4c:00:10:cb:12:5f:b0:c7:80:65:f2:87:4f: 5b:95:cf:8d:10:7c:44:6b:b3:0f:c4:fa:5a:a8:85:57:e3:db: b4:9c:13:07:90:b7:ed:ef:5c:97:0c:c1:c7:73:47:82:3d:6d: d9:53:a6:79:b8:35:e8:99:b0:b2:c9:dd:40:36:89:7a:90:be: 02:be:8c:7c:f6:16:f7:fa:0b:be:a5:dd:ac:75:ab:39:ef:06: c9:c3:c2:f4:f4:80:3e:54:43:90:ca:80:83:33:31:04:5a:a8: 21:57:80:3a:64:87:86:e3:f0:37:d1:a9:74:18:53:73:8e:6a: 5f:40:d2:3c:89:64:e2:3a:1d:e0:67:55:e7:2b:23:a2:11:17: ae:f8:ce:84:c6:06:8c:ec:af:c6:b0:10:46:8b:f5:56:75:bd: 3f:8d:b9:17:19:0a:72:6c:c4:68:d1:b1:e6:f8:b7:34:68:95: fc:6d:bb:a5:c0:7b:43:a8:26:05:e8:2d:2b:44:92:b0:b1:02: af:11:04:0b:b8:5c:7a:67:c0:6e:d3:c6:d9:8c:17:3e:db:28: 58:c2:ec:32:fe:04:cf:2b:79:f8:b9:c6:f1:c6:20:5d:1f:15: a4:a9:8c:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uJ7jOskQ0LFy9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODJkM2U0ZTUtNmNlMC00YmY4LWE0YjktOGIyMGEzYjA2MjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYcgD75L+xaNuJH/MKlKfZfdN5kp6LG32sQU cgPXJUReRhvLy/cQ/1Z9OsPhWsZG/77Robknd9GcM1BihZNBhtgxXpUyKqirEV2w 6pWIGs3Cj20wZmag++rXgO6plrJyIxw64FNcyeBzfRu/ZeQKuIfdTzATl9RIdzRP P6nChX/XzdfibIBGrGaGmvsNqqTEYBkwxWiBGias3QI/cJFpiR/mfv+EiCaPKJ7i ReHRvNvmsRsuB5HS7F2epAR4gSlizP8qDx5oYrjIPDspIu8DYWvXKt/jlf+zEVh+ IRsurBeOrsN6sYFWKT7gq2DlWSHCVGS5zb5WaJAYgYNRfBwBnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETlxmEbxBWX8pskp79t1Oc0/Qx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTY2NzY4NTktNmM0NS0z MjQxLWJlNDAtODMyODYzMGFkZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMId5Pl/FizkvFk+mIRA/YjYn0JrfrmGTAAQyxJfsMeAZfKHT1uVz40Q fERrsw/E+lqohVfj27ScEweQt+3vXJcMwcdzR4I9bdlTpnm4NeiZsLLJ3UA2iXqQ vgK+jHz2Fvf6C76l3ax1qznvBsnDwvT0gD5UQ5DKgIMzMQRaqCFXgDpkh4bj8DfR qXQYU3OOal9A0jyJZOI6HeBnVecrI6IRF674zoTGBozsr8awEEaL9VZ1vT+NuRcZ CnJsxGjRseb4tzRolfxtu6XAe0OoJgXoLStEkrCxAq8RBAu4XHpnwG7TxtmMFz7b KFjC7DL+BM8refi5xvHGIF0fFaSpjHY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:21 2025 by rpki-client