$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a23f122-73f7-3707-980f-7a4c79c94842.roa File: 3a23f122-73f7-3707-980f-7a4c79c94842.roa (raw, json) Hash identifier: ho9yv4FyghHGcxZwfK79XnYfOnOUkipmtqFDIHee1Bo= Subject key identifier: 42:7F:AC:64:9E:F1:2E:49:E0:7F:10:56:C7:E7:B3:42:B5:5D:9C:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8A8F9C3C5F373641D7DF0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a23f122-73f7-3707-980f-7a4c79c94842.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.54.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:a8:f9:c3:c5:f3:73:64:1d:7d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8b7f8021-5cde-4fc4-ad07-7971e043503d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:27:93:58:dd:59:9f:b6:63:7f:71:e9:91:65: 10:c4:0b:ac:e6:c6:86:c9:40:cc:18:74:ec:e0:91: ce:f7:13:48:52:a7:39:64:66:d8:8d:9c:f9:34:a6: 51:8b:ac:ab:d5:66:b6:18:cf:f1:7b:c2:2b:dc:c7: dd:ab:87:08:dd:cf:fe:71:6a:33:37:af:a1:38:39: f9:a3:ba:fe:f6:14:f8:66:f9:1b:d5:01:10:93:68: 6d:5a:3a:37:45:7b:61:bc:e0:72:8d:cd:68:01:0d: 8d:ab:1e:b8:83:e5:82:14:ff:68:a7:e9:7c:66:77: 09:47:8c:2e:9a:94:26:bb:b0:05:32:f1:67:d3:cf: 5a:30:a4:4d:b7:b3:c7:01:e5:8c:a9:e6:f4:de:9a: 67:e5:0d:85:e3:81:79:54:33:da:bb:39:cb:48:c0: e3:ee:54:bb:3e:4f:fe:01:51:70:07:91:e9:51:b3: c7:a7:c5:96:a3:f1:f1:d7:b2:74:d1:ca:e6:de:0a: 2b:51:53:bb:14:f1:35:5c:c2:1b:c4:4b:e0:ab:3f: c5:16:dc:47:0d:dd:b8:46:47:05:aa:67:0b:9a:be: 9b:9b:ad:53:9b:74:03:68:32:cc:ec:19:1e:7a:13: 31:be:02:d4:fa:e0:cc:a7:a3:bb:3c:50:e6:aa:cd: 02:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:AC:64:9E:F1:2E:49:E0:7F:10:56:C7:E7:B3:42:B5:5D:9C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a23f122-73f7-3707-980f-7a4c79c94842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0c:0a:3d:5c:6b:be:70:b9:7d:cc:9c:28:61:79:b4:ab:a1: 6a:27:c7:bc:53:05:ad:6d:a9:08:24:e1:b0:5a:fc:fb:e1:14: 3e:af:9b:b1:36:4e:8e:dc:c0:c0:ed:d1:c2:41:3f:67:17:df: 42:a5:63:ae:80:df:97:ac:a2:e4:6f:39:c0:f5:cc:a9:ba:09: a9:8a:05:39:b9:83:bc:26:cf:24:d1:99:42:c1:f9:50:6a:6b: 03:5a:4b:ff:f8:6f:4e:20:03:d1:c8:0f:5b:57:67:79:01:ea: a4:0f:52:53:b9:f8:58:19:ed:ee:00:44:62:1a:a6:7f:3b:5c: 4e:d5:99:e1:31:7d:5b:1b:44:37:3d:07:9f:8f:b1:7b:7b:fd: a2:d5:d8:d5:ed:00:09:c3:ec:01:fd:d1:5c:27:17:c4:18:cf: 2b:ca:fe:35:a2:c8:a1:cb:d9:c7:33:5c:7e:80:46:dc:20:bb: ed:0e:49:5a:5c:ba:3b:6e:0d:e1:a7:6a:0d:f9:d9:37:64:e5: bf:56:86:f4:93:92:ba:f0:85:34:ab:08:7b:de:70:7c:2a:18: 3e:0b:32:a5:d7:5e:64:6e:bf:06:cc:d3:90:8e:fd:d9:92:4b: 64:96:5a:b3:a3:f4:9e:0d:02:f2:b1:3c:a7:7f:76:1b:75:ad: fe:fe:dc:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKj5w8Xzc2QdffAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OGI3ZjgwMjEtNWNkZS00ZmM0LWFkMDctNzk3MWUwNDM1MDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CeTWN1Zn7Zjf3HpkWUQxAus5saGyUDMGHTs 4JHO9xNIUqc5ZGbYjZz5NKZRi6yr1Wa2GM/xe8Ir3Mfdq4cI3c/+cWozN6+hODn5 o7r+9hT4Zvkb1QEQk2htWjo3RXthvOByjc1oAQ2Nqx64g+WCFP9op+l8ZncJR4wu mpQmu7AFMvFn089aMKRNt7PHAeWMqeb03ppn5Q2F44F5VDPauznLSMDj7lS7Pk/+ AVFwB5HpUbPHp8WWo/Hx17J00crm3gorUVO7FPE1XMIbxEvgqz/FFtxHDd24RkcF qmcLmr6bm61Tm3QDaDLM7BkeehMxvgLU+uDMp6O7PFDmqs0CyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ/rGSe8S5J4H8QVsfns0K1XZxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2EyM2YxMjItNzNmNy0z NzA3LTk4MGYtN2E0Yzc5Yzk0ODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDbEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAMCj1ca75wuX3MnChhebSroWonx7xTBa1tqQgk4bBa/PvhFD6vm7E2 To7cwMDt0cJBP2cX30KlY66A35esouRvOcD1zKm6CamKBTm5g7wmzyTRmULB+VBq awNaS//4b04gA9HID1tXZ3kB6qQPUlO5+FgZ7e4ARGIapn87XE7VmeExfVsbRDc9 B5+PsXt7/aLV2NXtAAnD7AH90VwnF8QYzyvK/jWiyKHL2cczXH6ARtwgu+0OSVpc ujtuDeGnag352Tdk5b9WhvSTkrrwhTSrCHvecHwqGD4LMqXXXmRuvwbM05CO/dmS S2SWWrOj9J4NAvKxPKd/dht1rf7+3MU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:05:48 2025 by rpki-client