$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32d62562-2850-3bb7-9bc5-39b2a194ca36.roa File: 32d62562-2850-3bb7-9bc5-39b2a194ca36.roa (raw, json) Hash identifier: W7ngc+lzwdeMUH6rnn7exlE/1NkvaWL1O9p8NnALBV0= Subject key identifier: D3:92:29:3C:BF:70:40:94:A1:00:11:34:D7:A1:F5:27:B5:2B:97:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB99426FD59E15F8BACA1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32d62562-2850-3bb7-9bc5-39b2a194ca36.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 68.46.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:94:26:fd:59:e1:5f:8b:ac:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5d2a4e8f-1015-4a34-923d-2a2110c5d3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:f7:0e:7b:33:b5:0e:e1:2a:da:2e:6e:82: a0:d8:94:4e:b8:59:e2:10:f2:30:5d:ff:27:10:2a: 91:8f:3f:d8:3a:39:bc:0c:8f:12:96:d3:66:12:4b: d3:5c:4b:b3:37:1c:c5:34:92:37:31:c8:f0:e6:8b: 25:9a:d9:a9:16:39:5f:ba:59:1d:3a:ec:48:90:b1: f8:7c:4c:8b:c4:82:56:63:3e:98:69:3e:b3:b9:b7: 18:08:bf:e0:c8:8a:b0:cc:9c:3d:0a:11:29:10:f7: 7c:f4:cb:99:1d:b7:be:38:9e:25:ca:ce:18:74:ed: d1:93:37:71:a6:58:8f:99:20:18:d4:ae:11:81:0f: ef:fc:56:04:76:58:96:53:99:f9:05:c8:62:bd:52: 4b:47:34:51:8a:81:61:13:cd:e0:12:69:c0:bd:20: 77:c8:9a:a7:72:57:e3:a8:bc:a5:b6:c5:3c:72:c7: 90:8c:0c:11:4c:30:d4:a3:3d:66:14:53:82:2c:1b: 97:2e:92:1d:4c:fc:e4:24:21:79:14:e6:5d:ba:87: e0:33:3b:20:4a:ed:1d:60:63:b0:e7:7a:45:a5:2d: f0:7f:4b:ba:08:c5:42:0c:15:71:3a:48:e6:7a:42: 32:a5:90:62:e9:fa:4a:39:1d:09:e1:e8:5b:a2:73: 6d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:92:29:3C:BF:70:40:94:A1:00:11:34:D7:A1:F5:27:B5:2B:97:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32d62562-2850-3bb7-9bc5-39b2a194ca36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.46.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:a5:87:c0:12:26:ef:06:1e:23:fa:eb:84:9b:a5:e2:1c:8c: 0f:b7:7d:71:89:f8:65:c2:63:6f:ca:b4:db:f5:44:32:28:ac: 63:0b:50:bf:86:48:51:31:70:ce:89:e9:f8:67:f6:a0:e5:6b: 24:d3:f2:0d:9b:0f:5d:67:ef:67:22:7b:0e:99:52:78:de:3e: 87:bf:70:ce:80:d5:23:85:a2:26:c0:18:cd:81:bf:df:ba:d8: 76:b5:b6:69:60:7d:82:ad:a4:7a:98:db:12:c8:7a:6d:b6:d5: fc:4f:92:5a:7b:6a:f1:62:c5:4b:14:83:68:2f:09:44:2f:62: e9:40:d5:72:65:fc:90:70:70:58:88:c4:34:d5:0c:df:99:bd: 51:27:6c:03:45:dd:cb:8a:73:01:eb:da:c1:53:d9:76:ac:40: 16:05:d9:e6:01:13:e3:1c:90:fe:59:fa:22:31:83:49:60:ba: b0:23:4e:79:ee:aa:73:5b:b3:29:79:08:d9:64:52:90:91:b6: 33:b7:f9:8b:2e:2b:28:ed:15:42:a1:1f:cc:ea:d9:62:25:bc: 2e:d1:ff:49:aa:16:66:57:c9:34:3f:ca:ab:1b:98:b3:11:e2: 43:b4:96:4d:6e:f5:dd:07:c6:2a:a7:d5:99:1e:4d:b0:e5:81: bb:e0:d6:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uZQm/VnhX4usocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NWQyYTRlOGYtMTAxNS00YTM0LTkyM2QtMmEyMTEwYzVkM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo/3DnsztQ7hKtouboKg2JROuFniEPIwXf8n ECqRjz/YOjm8DI8SltNmEkvTXEuzNxzFNJI3Mcjw5oslmtmpFjlfulkdOuxIkLH4 fEyLxIJWYz6YaT6zubcYCL/gyIqwzJw9ChEpEPd89MuZHbe+OJ4lys4YdO3Rkzdx pliPmSAY1K4RgQ/v/FYEdliWU5n5BchivVJLRzRRioFhE83gEmnAvSB3yJqnclfj qLyltsU8cseQjAwRTDDUoz1mFFOCLBuXLpIdTPzkJCF5FOZduofgMzsgSu0dYGOw 53pFpS3wf0u6CMVCDBVxOkjmekIypZBi6fpKOR0J4ehbonNtaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOSKTy/cECUoQARNNeh9Se1K5fpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJkNjI1NjItMjg1MC0z YmI3LTliYzUtMzliMmExOTRjYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRC4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKlh8ASJu8GHiP664SbpeIcjA+3fXGJ+GXCY2/KtNv1RDIorGMLUL+G SFExcM6J6fhn9qDlayTT8g2bD11n72ciew6ZUnjePoe/cM6A1SOFoibAGM2Bv9+6 2Ha1tmlgfYKtpHqY2xLIem221fxPklp7avFixUsUg2gvCUQvYulA1XJl/JBwcFiI xDTVDN+ZvVEnbANF3cuKcwHr2sFT2XasQBYF2eYBE+MckP5Z+iIxg0lgurAjTnnu qnNbsyl5CNlkUpCRtjO3+YsuKyjtFUKhH8zq2WIlvC7R/0mqFmZXyTQ/yqsbmLMR 4kO0lk1u9d0Hxiqn1ZkeTbDlgbvg1gI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:19 2025 by rpki-client