$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35ba631f-ac34-3cac-a3de-c20de25d5399.roa File: 35ba631f-ac34-3cac-a3de-c20de25d5399.roa (raw, json) Hash identifier: FqyjlhFWpEuO1hG2dlEfi4Ks+eOsiH2G90dkJqATkj4= Subject key identifier: A7:5C:44:67:1A:F4:5C:06:9C:4F:7A:EB:B1:52:AD:DA:0C:1A:D8:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7FDB4A335E5E4F074FB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35ba631f-ac34-3cac-a3de-c20de25d5399.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 68.47.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:fd:b4:a3:35:e5:e4:f0:74:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=b2c7b44c-45c6-445c-86b1-624249ec902f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:f7:57:d9:73:6e:cf:d4:ad:aa:bc:56:9c: 4f:31:63:aa:a6:cf:08:fe:35:94:f1:a8:e0:7b:e5: 1b:49:44:b9:2c:75:75:dd:5e:19:c7:16:d2:a4:59: 60:0a:1c:6e:02:3e:08:8f:63:f2:a9:6e:54:d9:3d: 06:b8:1f:a4:a8:f0:49:3b:80:ac:c5:fa:cc:f6:19: dd:18:cf:37:67:02:92:2f:7f:79:fe:38:b2:67:19: 61:54:e9:cc:7b:37:f7:e3:99:52:bb:99:2e:96:d6: 2a:b9:2b:15:a6:1a:e5:e8:ca:94:db:be:e4:59:43: ff:1c:16:77:72:17:22:11:e5:29:5a:bc:e3:de:f5: 24:58:dd:63:9c:e6:a3:9e:b6:56:c4:48:e3:59:d5: e2:d3:2a:e9:0a:ef:be:2c:41:48:0b:08:b9:ba:59: 34:1a:46:fb:81:1c:17:70:27:84:bd:66:a0:ef:fd: d9:cc:4c:32:60:a8:8b:9a:ee:04:e4:f6:18:5c:f5: ba:da:18:e2:0e:cf:3c:30:af:11:38:a2:f2:62:36: 0d:bd:cf:cf:a9:e2:dc:0e:37:ba:05:90:a8:c9:fa: 0a:f3:67:c1:cf:cb:09:ec:0c:1c:d8:e8:72:2c:47: f8:17:3c:9b:e2:d4:ee:9f:f0:e2:70:d0:3c:f0:a8: 62:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5C:44:67:1A:F4:5C:06:9C:4F:7A:EB:B1:52:AD:DA:0C:1A:D8:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35ba631f-ac34-3cac-a3de-c20de25d5399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ed:84:c4:e9:e1:63:ac:1f:1c:ef:8b:4f:16:17:51:1c:70: 80:d3:d4:bd:7f:34:d0:d6:02:c0:3c:8a:7c:b7:42:bc:a7:94: 11:5b:9f:31:e0:d9:5b:e8:58:5b:9c:b6:27:0a:11:2e:e8:6d: 9f:f2:72:76:82:5e:18:fb:ec:1b:28:3a:aa:a4:ba:8d:7b:51: 00:b0:f0:62:49:91:4f:41:16:11:2d:bb:e4:26:3e:bb:89:6d: 5a:ed:5e:b0:53:6b:27:31:5f:62:09:41:f0:84:f8:86:ba:c7: 05:d4:cf:79:b9:5f:b4:6b:33:1c:be:ac:10:aa:04:54:29:19: 8a:ee:4f:69:21:20:e8:b7:f8:1f:8b:1d:68:23:2f:33:6c:fc: 74:ad:66:8e:86:fa:4d:64:b3:c5:05:e4:43:9b:c4:58:c8:78: 52:b2:cd:e8:75:d5:8e:28:d6:62:e6:6b:27:3d:ae:fd:e1:1c: d3:d9:a4:36:84:03:40:2a:0a:36:2c:05:fc:38:b9:b7:60:d0: 3e:1e:be:a1:69:91:7e:13:39:2a:92:d6:6f:03:49:70:8d:cf: 72:d2:73:ac:77:f3:38:ff:09:c2:13:8b:15:dd:4e:79:aa:b9: 1b:df:78:0f:70:95:93:5d:c6:bb:19:23:10:44:81:7c:78:36: 1a:d0:6d:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t/20ozXl5PB0+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YjJjN2I0NGMtNDVjNi00NDVjLTg2YjEtNjI0MjQ5ZWM5MDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhz3V9lzbs/Uraq8VpxPMWOqps8I/jWU8ajg e+UbSUS5LHV13V4ZxxbSpFlgChxuAj4Ij2PyqW5U2T0GuB+kqPBJO4CsxfrM9hnd GM83ZwKSL395/jiyZxlhVOnMezf345lSu5kultYquSsVphrl6MqU277kWUP/HBZ3 chciEeUpWrzj3vUkWN1jnOajnrZWxEjjWdXi0yrpCu++LEFICwi5ulk0Gkb7gRwX cCeEvWag7/3ZzEwyYKiLmu4E5PYYXPW62hjiDs88MK8ROKLyYjYNvc/PqeLcDje6 BZCoyfoK82fBz8sJ7Awc2OhyLEf4Fzyb4tTun/DicNA88KhigwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdcRGca9FwGnE9667FSrdoMGtgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzViYTYzMWYtYWMzNC0z Y2FjLWEzZGUtYzIwZGUyNWQ1Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPthMTp4WOsHxzvi08WF1EccIDT1L1/NNDWAsA8iny3QrynlBFbnzHg 2VvoWFucticKES7obZ/ycnaCXhj77BsoOqqkuo17UQCw8GJJkU9BFhEtu+QmPruJ bVrtXrBTaycxX2IJQfCE+Ia6xwXUz3m5X7RrMxy+rBCqBFQpGYruT2khIOi3+B+L HWgjLzNs/HStZo6G+k1ks8UF5EObxFjIeFKyzeh11Y4o1mLmayc9rv3hHNPZpDaE A0AqCjYsBfw4ubdg0D4evqFpkX4TOSqS1m8DSXCNz3LSc6x38zj/CcITixXdTnmq uRvfeA9wlZNdxrsZIxBEgXx4NhrQbeU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:31:41 2025 by rpki-client