$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28616b6c-12db-328b-bc03-4d536c67f930.roa File: 28616b6c-12db-328b-bc03-4d536c67f930.roa (raw, json) Hash identifier: HkwbKwChaCXMD9PoWq/xEBT3azXFkAohnVbYZDxil48= Subject key identifier: 9B:A1:77:8E:80:D4:74:0C:1B:F0:6F:5B:01:2A:85:8A:2B:65:D8:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A995F807DFF39FF1F73A90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28616b6c-12db-328b-bc03-4d536c67f930.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 174.168.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:95:f8:07:df:f3:9f:f1:f7:3a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1224aea0-013e-4989-a6c9-2427b4881f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:79:ed:30:8e:28:da:ff:b2:19:ab:14:6f:bd: 83:71:b9:ad:58:cc:f6:31:a3:81:08:ae:59:53:3e: 83:d1:b1:25:06:1e:a8:c4:d7:9a:f5:44:fd:e0:bd: 72:c8:76:c2:9a:c4:c6:6a:00:b9:2a:f2:ff:92:07: 8f:86:92:f7:3d:85:eb:b1:fb:1d:42:fc:94:a0:67: 2c:84:f4:f2:b7:01:e9:20:3d:52:38:2c:48:e6:d9: 5f:2f:c2:be:5e:c8:d3:28:ce:81:9f:b2:cc:75:10: f3:ae:45:02:69:4a:60:48:a1:b7:22:18:86:00:5b: 95:95:47:cd:79:c8:99:21:57:86:14:4c:11:f0:53: d5:be:15:8b:2b:bc:ee:58:88:9b:ae:7a:d8:43:89: 8a:1c:70:aa:df:0e:fb:d2:91:94:f9:33:f2:85:f6: da:20:7d:dd:65:db:70:4d:1a:c1:fe:65:91:d5:14: 73:ef:84:dd:7b:95:fa:be:d1:da:82:a2:90:97:29: 22:e9:8e:e8:f8:1a:d8:b5:8b:8a:12:db:5c:4a:2a: 94:ca:6d:94:4f:c8:bc:e6:90:7d:9d:b9:7c:3b:a1: 85:ff:4a:3f:b9:d9:5a:a0:9d:6a:7a:7f:dd:cb:22: d7:45:71:76:02:7e:aa:d6:4e:b5:8b:eb:c2:23:e4: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A1:77:8E:80:D4:74:0C:1B:F0:6F:5B:01:2A:85:8A:2B:65:D8:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28616b6c-12db-328b-bc03-4d536c67f930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:89:99:02:22:8d:d7:48:6f:50:bd:1b:cd:b0:50:1b:6a:18: e5:3b:f2:e4:3c:b0:7f:8b:ae:1d:42:19:9f:90:a4:19:ee:4a: 89:7f:21:ca:2d:2a:b7:c9:d9:b0:71:ff:32:32:ef:9c:82:31: 7a:3b:83:de:40:22:65:01:75:c1:af:99:5a:9b:e1:d0:16:a2: 88:55:6c:0d:48:23:1d:07:5d:ff:a7:57:34:62:79:74:1e:5a: 5a:1b:db:2e:1a:d2:fe:c8:30:05:2a:80:35:b9:59:30:2d:96: d4:55:91:e6:2f:c2:ca:f6:fb:90:7c:f7:e7:dc:27:f3:da:cb: ff:3b:90:f3:0b:05:11:d6:a0:9c:09:a2:19:e8:83:da:df:a9: fe:55:16:cb:4f:3b:29:07:95:f8:7d:6f:b6:f7:aa:f3:39:44: 3a:cc:73:30:9e:bb:84:5c:22:97:8c:3f:b7:f3:55:4b:76:6a: 63:3b:ad:00:e1:30:a4:0b:fb:bb:01:00:9d:9f:6c:bc:65:bf: 3a:37:1f:0a:cf:4c:a4:e4:07:79:70:b2:16:00:10:cc:b0:08: 61:ef:99:85:3a:4c:f7:9c:ee:2a:21:62:c6:3d:78:e1:d2:fb: 71:c6:ba:97:b5:4f:9e:30:27:71:2a:7b:61:9e:34:2c:86:bf: 5f:61:31:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqZX4B9/zn/H3OpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTIyNGFlYTAtMDEzZS00OTg5LWE2YzktMjQyN2I0ODgxZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHntMI4o2v+yGasUb72DcbmtWMz2MaOBCK5Z Uz6D0bElBh6oxNea9UT94L1yyHbCmsTGagC5KvL/kgePhpL3PYXrsfsdQvyUoGcs hPTytwHpID1SOCxI5tlfL8K+XsjTKM6Bn7LMdRDzrkUCaUpgSKG3IhiGAFuVlUfN eciZIVeGFEwR8FPVvhWLK7zuWIibrnrYQ4mKHHCq3w770pGU+TPyhfbaIH3dZdtw TRrB/mWR1RRz74Tde5X6vtHagqKQlyki6Y7o+BrYtYuKEttcSiqUym2UT8i85pB9 nbl8O6GF/0o/udlaoJ1qen/dyyLXRXF2An6q1k61i+vCI+QtSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuhd46A1HQMG/BvWwEqhYorZdjsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg2MTZiNmMtMTJkYi0z MjhiLWJjMDMtNGQ1MzZjNjdmOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqhEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyJmQIijddIb1C9G82wUBtqGOU78uQ8sH+Lrh1CGZ+QpBnuSol/Icot KrfJ2bBx/zIy75yCMXo7g95AImUBdcGvmVqb4dAWoohVbA1IIx0HXf+nVzRieXQe Wlob2y4a0v7IMAUqgDW5WTAtltRVkeYvwsr2+5B89+fcJ/Pay/87kPMLBRHWoJwJ ohnog9rfqf5VFstPOykHlfh9b7b3qvM5RDrMczCeu4RcIpeMP7fzVUt2amM7rQDh MKQL+7sBAJ2fbLxlvzo3HwrPTKTkB3lwshYAEMywCGHvmYU6TPec7iohYsY9eOHS +3HGupe1T54wJ3Eqe2GeNCyGv19hMZk= -----END CERTIFICATE-----Generated at Mon Oct 20 17:36:18 2025 by rpki-client