$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e4d8a2-51a0-3481-90c2-03844d9fca8c.roa File: 33e4d8a2-51a0-3481-90c2-03844d9fca8c.roa (raw, json) Hash identifier: Ffb75lPbFMG0tu4w6NJw5WZaKGjlOamzmsOQgyEkSK8= Subject key identifier: F3:BA:8E:08:36:40:4E:4E:84:32:8C:A5:38:2F:43:44:2C:41:96:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8A54F6BFF1FB60F44B500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e4d8a2-51a0-3481-90c2-03844d9fca8c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.53.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:a5:4f:6b:ff:1f:b6:0f:44:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=f31b66dd-a7f8-4637-9df7-bda7f35e5acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:46:8e:25:f0:18:50:92:56:41:b9:65:28:be: ab:9b:25:67:43:e2:05:73:62:3c:1b:12:c5:ad:07: 05:c1:42:1f:99:59:c0:fb:98:eb:04:33:eb:ee:e1: fa:69:67:8c:f9:99:3d:5a:67:eb:65:6f:d4:94:3a: 78:34:9d:c5:f1:c6:91:12:e9:26:72:8d:ea:11:bc: 0e:d1:66:dc:f4:6e:04:40:44:91:93:f1:c4:9f:18: e0:60:1d:ff:9b:5e:a4:bf:4f:e9:70:dd:07:91:ea: 86:2f:53:a4:e7:d4:e2:08:30:cf:aa:2a:3f:3e:41: 9e:d6:7d:40:bb:05:60:fa:b9:1e:ab:bc:7e:9e:1e: 0e:7e:5c:8b:16:e8:3a:d5:3e:18:a7:a6:91:93:88: 26:c3:8a:ba:a4:34:b8:7b:74:98:d9:70:71:1b:d5: e9:f9:ab:62:df:24:5a:0b:31:66:10:c9:92:0e:1f: 88:5e:5b:64:68:53:99:bc:11:e9:e4:8a:5b:42:89: e3:e8:32:f1:94:67:c7:c9:25:f5:87:75:06:48:d6: 3a:2a:64:de:68:25:23:5c:99:97:0d:08:ef:46:8d: f0:a3:c7:f3:17:21:72:2a:a9:17:ef:88:36:60:88: 94:57:a7:3a:13:b4:47:59:25:8e:5f:92:fb:e3:c5: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BA:8E:08:36:40:4E:4E:84:32:8C:A5:38:2F:43:44:2C:41:96:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e4d8a2-51a0-3481-90c2-03844d9fca8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ea:57:9c:f8:00:83:0c:29:05:13:4d:45:76:39:76:ef:49: 34:5f:d5:1d:7d:c2:12:23:17:f1:32:1f:dc:1e:e2:f7:0d:09: 4b:ef:fa:9e:27:d2:eb:25:fc:ce:25:58:83:e1:40:8f:34:c7: b2:44:f6:7f:a7:d8:53:62:b6:64:7b:33:34:c4:fb:c7:f4:4f: 3b:4c:3d:5a:89:50:56:64:5e:ce:a3:83:00:6d:ae:c1:f5:0a: 06:1c:83:84:f6:ce:f0:77:31:e8:36:ad:21:7d:5b:7e:24:3d: 99:51:9c:77:f7:df:e0:65:a1:76:b8:2b:b1:d7:53:98:d3:a3: 9f:7a:35:ea:7f:75:80:af:2f:43:fc:51:97:7c:44:16:29:8f: 9b:d6:7d:1f:9c:44:07:f9:79:f0:97:4f:e3:84:53:c7:11:4c: c8:51:d1:74:ec:bc:c5:96:e2:e7:87:29:a3:f1:6c:b5:53:f5: 8f:95:f6:0a:9f:c3:8c:b9:a0:d0:2a:9a:a6:3d:52:c6:c2:9e: 66:ec:b9:54:7b:d9:58:e0:9c:8d:ae:4c:c4:aa:41:70:20:90: af:f4:f9:e8:7e:65:13:f2:d4:3a:c3:af:4c:6f:7f:b6:b5:e9: eb:13:d5:ee:f1:2f:d8:96:4c:85:7a:d9:5c:de:ad:e2:ed:fe: 7d:c9:43:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKVPa/8ftg9EtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZjMxYjY2ZGQtYTdmOC00NjM3LTlkZjctYmRhN2YzNWU1YWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUaOJfAYUJJWQbllKL6rmyVnQ+IFc2I8GxLF rQcFwUIfmVnA+5jrBDPr7uH6aWeM+Zk9WmfrZW/UlDp4NJ3F8caREukmco3qEbwO 0Wbc9G4EQESRk/HEnxjgYB3/m16kv0/pcN0HkeqGL1Ok59TiCDDPqio/PkGe1n1A uwVg+rkeq7x+nh4OflyLFug61T4Yp6aRk4gmw4q6pDS4e3SY2XBxG9Xp+ati3yRa CzFmEMmSDh+IXltkaFOZvBHp5IpbQonj6DLxlGfHySX1h3UGSNY6KmTeaCUjXJmX DQjvRo3wo8fzFyFyKqkX74g2YIiUV6c6E7RHWSWOX5L748WX9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO6jgg2QE5OhDKMpTgvQ0QsQZZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNlNGQ4YTItNTFhMC0z NDgxLTkwYzItMDM4NDRkOWZjYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDVpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvqV5z4AIMMKQUTTUV2OXbvSTRf1R19whIjF/EyH9we4vcNCUvv+p4n 0usl/M4lWIPhQI80x7JE9n+n2FNitmR7MzTE+8f0TztMPVqJUFZkXs6jgwBtrsH1 CgYcg4T2zvB3Meg2rSF9W34kPZlRnHf33+BloXa4K7HXU5jTo596Nep/dYCvL0P8 UZd8RBYpj5vWfR+cRAf5efCXT+OEU8cRTMhR0XTsvMWW4ueHKaPxbLVT9Y+V9gqf w4y5oNAqmqY9UsbCnmbsuVR72VjgnI2uTMSqQXAgkK/0+eh+ZRPy1DrDr0xvf7a1 6esT1e7xL9iWTIV62VzereLt/n3JQ6A= -----END CERTIFICATE-----Generated at Mon Oct 20 03:12:03 2025 by rpki-client