$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e1870fc-b438-3571-b625-fee7bcd07e61.roa File: 1e1870fc-b438-3571-b625-fee7bcd07e61.roa (raw, json) Hash identifier: ihfia2Q7svWYmIdTVWVsjLOsq3eLQeqjmzljkJQA4hI= Subject key identifier: D8:52:44:86:8E:8A:B5:91:4A:83:61:28:A2:2C:DE:69:08:E0:A0:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8C68D459991E53F2A8400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e1870fc-b438-3571-b625-fee7bcd07e61.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.49.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:c6:8d:45:99:91:e5:3f:2a:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9c048f33-59ff-43f1-b08b-2bdd9b51da88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cc:15:2f:e1:06:3a:bf:47:4c:a5:c1:78:83: f7:d5:6a:a4:de:c8:10:ba:87:73:2e:0a:30:6c:a5: 47:b3:99:c7:2b:d9:e7:d0:38:5e:6d:82:22:08:cf: d1:e3:1d:86:da:45:21:a2:a6:99:2e:9f:75:37:0c: 90:98:6d:b5:02:f8:d6:95:87:7e:35:e8:8f:96:1d: ad:87:b5:7b:3f:64:4c:1d:00:48:90:9f:a4:73:ba: f2:29:55:45:cf:d5:c2:8d:05:7f:95:89:93:24:ab: 48:f1:94:95:87:8c:0f:8e:5d:7e:fd:da:b1:a3:3d: f1:20:e9:4c:66:ed:1c:03:ff:55:07:47:a2:69:b9: 61:09:1f:24:39:c7:7a:ae:8a:6f:c5:84:d6:d4:3b: 38:4a:fb:56:76:f6:de:bf:aa:19:52:f5:ef:0b:4e: dd:37:b5:82:f8:f6:ea:3e:77:0d:ed:08:72:53:7f: 5b:56:a0:5b:97:e1:96:6b:99:88:69:0a:02:86:2e: cb:f4:7e:58:32:b3:21:07:d7:d8:f8:8d:4c:5f:ac: 02:0f:7d:8f:0a:51:92:04:96:7b:01:fa:59:dd:79: 7f:23:f4:b1:c1:32:ce:c3:a2:a5:dc:64:df:71:d6: b9:ef:b9:c6:b2:07:ac:4e:76:76:88:6b:d3:c1:be: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:52:44:86:8E:8A:B5:91:4A:83:61:28:A2:2C:DE:69:08:E0:A0:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e1870fc-b438-3571-b625-fee7bcd07e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.49.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a2:60:a3:aa:09:eb:b3:56:d7:17:0e:14:18:a3:09:ca:57: 23:4a:0c:dc:2b:13:b6:00:80:0d:7a:b2:9a:95:46:16:9b:70: 85:30:5f:49:f6:81:79:fd:d2:6a:99:80:7e:1d:d3:80:c5:71: 45:4b:e3:40:22:97:71:00:e9:da:4e:c6:a1:88:89:6d:b7:8f: 3a:76:7a:c9:e1:7e:dc:9d:79:04:73:9b:34:32:d2:88:d7:d3: fd:bd:e3:2c:85:dd:8b:ee:63:b3:c5:ee:3a:f8:7c:53:98:9a: 9d:6d:cd:c1:dc:c5:3a:a0:56:e6:dd:5f:bb:57:0c:89:64:04: d2:fa:d8:ab:04:1b:4e:23:e6:55:12:ee:ad:4d:cb:c4:b6:eb: 78:22:52:fe:a8:2b:74:50:a8:30:f5:f2:b1:5c:cb:4e:f7:51: b8:63:bb:aa:ed:a7:24:08:fa:7b:08:bb:99:ba:34:f0:aa:3c: b1:16:9a:a6:8b:d4:f4:f0:e5:8c:e9:59:81:99:30:e2:1b:ea: be:10:0f:64:ea:67:de:dd:1a:53:f5:0b:e0:18:ab:dd:f4:d1: fa:a6:fd:29:93:e2:b0:ee:df:61:c7:4e:a8:70:8c:bf:a6:bc: 02:43:41:8f:c9:31:36:39:ef:cc:a6:8f:d1:13:5b:2c:5b:07: 9e:d5:fc:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqMaNRZmR5T8qhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWMwNDhmMzMtNTlmZi00M2YxLWIwOGItMmJkZDliNTFkYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38wVL+EGOr9HTKXBeIP31Wqk3sgQuodzLgow bKVHs5nHK9nn0DhebYIiCM/R4x2G2kUhoqaZLp91NwyQmG21AvjWlYd+NeiPlh2t h7V7P2RMHQBIkJ+kc7ryKVVFz9XCjQV/lYmTJKtI8ZSVh4wPjl1+/dqxoz3xIOlM Zu0cA/9VB0eiablhCR8kOcd6ropvxYTW1Ds4SvtWdvbev6oZUvXvC07dN7WC+Pbq PncN7QhyU39bVqBbl+GWa5mIaQoChi7L9H5YMrMhB9fY+I1MX6wCD32PClGSBJZ7 AfpZ3Xl/I/SxwTLOw6Kl3GTfcda577nGsgesTnZ2iGvTwb4dmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhSRIaOirWRSoNhKKIs3mkI4KBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWUxODcwZmMtYjQzOC0z NTcxLWI2MjUtZmVlN2JjZDA3ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiiYKOqCeuzVtcXDhQYownKVyNKDNwrE7YAgA16spqVRhabcIUwX0n2 gXn90mqZgH4d04DFcUVL40Ail3EA6dpOxqGIiW23jzp2esnhftydeQRzmzQy0ojX 0/294yyF3YvuY7PF7jr4fFOYmp1tzcHcxTqgVubdX7tXDIlkBNL62KsEG04j5lUS 7q1Ny8S263giUv6oK3RQqDD18rFcy073Ubhju6rtpyQI+nsIu5m6NPCqPLEWmqaL 1PTw5YzpWYGZMOIb6r4QD2TqZ97dGlP1C+AYq9300fqm/SmT4rDu32HHTqhwjL+m vAJDQY/JMTY578ymj9ETWyxbB57V/AI= -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:40 2025 by rpki-client