$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2df5519e-c704-371c-8849-a1be5bf7ffb8.roa File: 2df5519e-c704-371c-8849-a1be5bf7ffb8.roa (raw, json) Hash identifier: CGoxKU0PCkFz7BdVdyZ1EUw7Z+Sj0i2FEjVB40/NY0g= Subject key identifier: F0:6A:59:2D:81:03:CE:91:9B:82:C6:3F:25:E8:6D:8F:14:93:58:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB90FFDE6628E196E6D3150 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2df5519e-c704-371c-8849-a1be5bf7ffb8.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 21508 IP address blocks: 68.86.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:0f:fd:e6:62:8e:19:6e:6d:31:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=58e76ec7-76e4-48d9-9f6b-a27a3ee48966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:31:6b:52:eb:8c:ce:3a:f7:5f:56:30:5f:77: 6f:38:dd:74:3a:ae:b1:f5:c9:8e:35:f2:3e:2c:7e: 9a:c3:f9:e8:a7:45:62:ad:50:51:2c:68:07:3f:b4: 54:2f:9e:ef:a4:fb:8c:2e:2f:31:7a:fb:d1:df:de: 0c:db:0b:b5:2c:ee:71:63:86:5d:85:e5:57:06:c8: f7:a6:77:11:aa:b9:91:a2:18:84:0b:4c:c2:af:fa: 45:6c:1f:55:15:14:53:59:41:ea:a9:74:e9:9a:ec: 64:15:db:11:6e:7f:be:1c:f9:d0:c5:f9:a7:02:1d: ef:a8:21:54:7a:1e:11:b7:b4:c2:b3:e7:a4:c3:7e: 26:7b:95:d8:67:50:6e:cd:e2:67:87:89:c5:2b:61: d7:24:d0:1e:4a:f7:c9:95:18:29:09:44:c6:20:ec: 99:84:2f:3f:4b:4d:26:8f:0a:5a:aa:37:06:ed:6a: 18:e7:76:c8:3d:b6:cd:c1:17:ae:e5:b7:b8:e5:e0: 91:69:3a:67:0a:d2:93:df:48:28:85:3e:57:a7:84: 37:28:a7:5c:15:49:1a:1f:e1:89:94:fc:6d:d1:d8: bb:aa:92:44:03:55:69:bb:fc:2d:00:b1:22:c2:17: e1:a0:fd:88:7e:d6:18:30:fc:52:7d:42:ec:95:ad: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6A:59:2D:81:03:CE:91:9B:82:C6:3F:25:E8:6D:8F:14:93:58:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2df5519e-c704-371c-8849-a1be5bf7ffb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:91:23:66:5e:14:03:d1:13:05:c9:8e:6f:19:20:cc:a1:1d: 63:3c:8c:a1:00:26:b5:19:be:11:2b:b9:a1:11:a6:f3:2b:6f: 81:c4:ab:3d:86:f0:4e:11:98:a0:e7:36:ed:4e:1c:a2:11:70: a4:17:e0:27:17:8e:18:23:34:13:33:e5:2a:32:8e:5d:7a:3c: 13:99:d9:3e:c5:4a:4e:76:34:47:15:52:c3:12:a0:1b:fe:95: eb:9c:10:3a:20:d0:80:11:db:ec:22:57:67:1b:8f:c1:23:50: a7:be:47:f6:71:4f:fa:3d:f0:d0:09:85:f9:7c:98:fe:b3:2a: ba:6c:ed:58:f1:f6:27:46:c8:ef:99:04:c1:1b:c2:e2:a6:cd: e8:d3:50:e9:15:ec:bc:94:7e:8b:76:5f:f7:05:97:60:c7:de: d4:f4:81:01:e2:37:d6:c6:c2:09:1c:28:8f:b0:c7:09:95:3e: b4:35:0f:d5:bd:97:a2:ed:b1:86:6b:95:fb:a0:80:ab:78:85: 36:98:9f:d9:44:10:18:09:f2:a7:8a:49:e2:e6:d6:a3:c8:75: 13:8d:93:5f:25:4a:fd:e7:65:19:7d:48:de:e3:6a:32:85:42: b9:f5:dc:3a:9c:94:6e:8e:4b:05:20:48:22:31:b0:3b:3c:4d: ac:b1:14:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uQ/95mKOGW5tMVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NThlNzZlYzctNzZlNC00OGQ5LTlmNmItYTI3YTNlZTQ4OTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzFrUuuMzjr3X1YwX3dvON10Oq6x9cmONfI+ LH6aw/nop0VirVBRLGgHP7RUL57vpPuMLi8xevvR394M2wu1LO5xY4ZdheVXBsj3 pncRqrmRohiEC0zCr/pFbB9VFRRTWUHqqXTpmuxkFdsRbn++HPnQxfmnAh3vqCFU eh4Rt7TCs+ekw34me5XYZ1BuzeJnh4nFK2HXJNAeSvfJlRgpCUTGIOyZhC8/S00m jwpaqjcG7WoY53bIPbbNwReu5be45eCRaTpnCtKT30gohT5Xp4Q3KKdcFUkaH+GJ lPxt0di7qpJEA1Vpu/wtALEiwhfhoP2IftYYMPxSfULsla0WsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBqWS2BA86Rm4LGPyXobY8Uk1h7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRmNTUxOWUtYzcwNC0z NzFjLTg4NDktYTFiZTViZjdmZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGORI2ZeFAPREwXJjm8ZIMyhHWM8jKEAJrUZvhEruaERpvMrb4HEqz2G 8E4RmKDnNu1OHKIRcKQX4CcXjhgjNBMz5Soyjl16PBOZ2T7FSk52NEcVUsMSoBv+ leucEDog0IAR2+wiV2cbj8EjUKe+R/ZxT/o98NAJhfl8mP6zKrps7Vjx9idGyO+Z BMEbwuKmzejTUOkV7LyUfot2X/cFl2DH3tT0gQHiN9bGwgkcKI+wxwmVPrQ1D9W9 l6LtsYZrlfuggKt4hTaYn9lEEBgJ8qeKSeLm1qPIdRONk18lSv3nZRl9SN7jajKF Qrn13DqclG6OSwUgSCIxsDs8TayxFBQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:54 2025 by rpki-client