$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ac12ae6-2ceb-35ba-bf29-d754884efb97.roa File: 1ac12ae6-2ceb-35ba-bf29-d754884efb97.roa (raw, json) Hash identifier: ye2fzP1+laPxMw+TUcxYwDXdK/GCMHnN5VzaUSXB5rA= Subject key identifier: 11:2B:71:D5:37:E6:14:B3:F4:D0:A3:4C:2C:24:47:EE:DC:0D:5A:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7C4687ADA7B6AEC4BE800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ac12ae6-2ceb-35ba-bf29-d754884efb97.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33668 IP address blocks: 68.42.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:c4:68:7a:da:7b:6a:ec:4b:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=e9200a92-ee26-4e88-84f2-aea26e632bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0c:43:38:84:a7:5b:ff:eb:27:92:8f:71:25: 0e:8e:5d:8f:44:ee:4d:4e:02:ce:fe:4b:44:b1:b6: 67:90:4f:af:88:8b:e1:e3:9e:3a:b1:8d:fc:27:3f: e7:a7:f6:6e:f6:fe:14:10:21:81:48:73:0c:b5:d3: 12:ab:ff:cb:b6:0b:75:a4:11:6e:96:83:62:52:6e: 97:e2:d0:be:19:5f:2b:ec:39:27:0b:62:5e:22:b3: 58:4c:3f:29:8a:27:c2:68:1c:b3:fb:14:14:42:71: 3a:84:85:f0:f9:62:f1:92:90:bd:10:05:74:d4:c6: 01:99:0a:72:91:45:5f:86:14:48:99:bc:7f:56:1f: 8c:ac:cc:f8:6c:10:ab:d6:72:56:bb:bf:5f:39:5a: 3e:4b:90:f3:24:91:43:ac:76:8a:d2:7c:2e:53:9e: 19:b9:32:c8:9a:94:e5:e4:08:e5:73:c3:71:76:34: 84:75:93:09:40:16:97:e1:ed:28:f5:cc:e6:4e:39: 38:e8:0c:a4:c3:24:53:b7:a4:e4:81:71:ab:b6:bd: e9:ee:66:3a:69:1a:24:ca:62:3f:80:cf:eb:af:ea: 3c:fb:4a:8c:92:da:12:d0:04:75:e7:a6:01:72:18: 1c:92:34:1f:32:4f:60:b3:56:24:7e:c6:ab:60:58: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2B:71:D5:37:E6:14:B3:F4:D0:A3:4C:2C:24:47:EE:DC:0D:5A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ac12ae6-2ceb-35ba-bf29-d754884efb97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:14:0f:7b:ff:13:74:c9:cf:6a:5f:d5:ae:a6:81:6c:cb:6f: b4:06:8c:eb:3d:35:18:46:24:be:40:59:d2:76:20:10:cb:d7: 04:a8:81:96:04:7f:2a:15:d8:81:7d:77:de:e2:f6:c1:2c:b0: 44:db:2e:31:df:9d:b7:17:d7:81:f0:26:94:09:2e:19:25:2c: cc:6e:38:95:33:43:cc:88:d4:0d:c7:b2:50:41:41:71:c3:29: 31:2b:a9:2e:71:4a:b2:1a:36:3f:6d:7b:85:1f:08:f1:44:ef: ea:e2:65:6b:72:11:c7:b6:54:ee:c8:37:71:57:8c:bb:9f:23: e4:b3:3b:d4:52:94:6c:6d:ee:66:b9:12:de:2d:5f:7b:b3:07: 6e:87:af:d3:53:eb:ce:b3:41:41:26:01:8c:b3:ce:de:18:27: 42:b1:4f:6b:c1:dc:1a:1e:fa:d7:1c:5e:58:63:8d:bc:11:b9: c6:31:8f:60:a7:89:dc:7e:8b:d3:93:9a:e0:52:45:d2:ba:61: 8a:76:4a:40:3a:7f:4f:ec:b6:e1:d1:0c:1e:95:56:d2:5c:3a: 80:8e:d4:2e:2b:ff:a0:17:a6:80:2b:cc:58:16:2d:93:62:57: 26:11:2f:5f:5e:b3:78:56:4a:23:f1:92:7d:6d:98:ba:83:9b: df:95:50:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t8Roetp7auxL6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZTkyMDBhOTItZWUyNi00ZTg4LTg0ZjItYWVhMjZlNjMyYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwxDOISnW//rJ5KPcSUOjl2PRO5NTgLO/ktE sbZnkE+viIvh4546sY38Jz/np/Zu9v4UECGBSHMMtdMSq//Ltgt1pBFuloNiUm6X 4tC+GV8r7DknC2JeIrNYTD8piifCaByz+xQUQnE6hIXw+WLxkpC9EAV01MYBmQpy kUVfhhRImbx/Vh+MrMz4bBCr1nJWu79fOVo+S5DzJJFDrHaK0nwuU54ZuTLImpTl 5Ajlc8NxdjSEdZMJQBaX4e0o9czmTjk46AykwyRTt6TkgXGrtr3p7mY6aRokymI/ gM/rr+o8+0qMktoS0AR156YBchgckjQfMk9gs1YkfsarYFjbjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBErcdU35hSz9NCjTCwkR+7cDVrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFjMTJhZTYtMmNlYi0z NWJhLWJmMjktZDc1NDg4NGVmYjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRCqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0UD3v/E3TJz2pf1a6mgWzLb7QGjOs9NRhGJL5AWdJ2IBDL1wSogZYE fyoV2IF9d97i9sEssETbLjHfnbcX14HwJpQJLhklLMxuOJUzQ8yI1A3HslBBQXHD KTErqS5xSrIaNj9te4UfCPFE7+riZWtyEce2VO7IN3FXjLufI+SzO9RSlGxt7ma5 Et4tX3uzB26Hr9NT686zQUEmAYyzzt4YJ0KxT2vB3Boe+tccXlhjjbwRucYxj2Cn idx+i9OTmuBSRdK6YYp2SkA6f0/stuHRDB6VVtJcOoCO1C4r/6AXpoArzFgWLZNi VyYRL19es3hWSiPxkn1tmLqDm9+VUIo= -----END CERTIFICATE-----Generated at Mon Oct 20 03:33:11 2025 by rpki-client