$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f21e5a5-dc57-37e4-94e9-f1a4f98f4e06.roa File: 3f21e5a5-dc57-37e4-94e9-f1a4f98f4e06.roa (raw, json) Hash identifier: AcvG/GUwtsG24UBu6nx/bamjfUJRw+XBK5PUsCqgBHs= Subject key identifier: DE:3E:29:43:BD:BB:EA:17:BA:5B:D0:8B:BA:B7:2D:AF:E7:FF:7F:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8AF6ADCD10BE52EE29000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f21e5a5-dc57-37e4-94e9-f1a4f98f4e06.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.84.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:af:6a:dc:d1:0b:e5:2e:e2:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=cced3957-b9c3-432d-b0d4-fee0fe9da2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:29:93:a9:c9:37:ff:32:ad:ed:66:96:03: 7f:9b:8c:0c:56:30:22:dd:a0:c3:cc:79:20:1c:22: cb:ba:31:27:93:1f:60:0b:8c:fb:14:b1:8e:1e:33: 3b:a1:45:9f:cf:f6:d2:1c:3d:ad:7a:70:7b:4c:92: f0:8f:5c:18:3d:5b:56:ae:92:26:62:5a:81:35:68: 60:a1:d7:72:78:53:6c:fc:31:b0:44:d0:70:75:4e: c6:20:7c:78:84:bc:93:93:19:f7:7e:82:a0:4a:70: ff:b6:5c:78:38:27:0a:65:ef:df:dd:9a:b0:d1:15: be:23:0c:98:55:e3:03:bb:2f:df:11:cc:60:66:77: a5:de:dd:67:01:c2:81:21:c3:68:0b:0c:72:c2:71: bd:36:51:95:95:c9:a1:d2:8d:23:5f:df:25:48:be: fd:44:56:cc:5e:3e:b3:f0:5f:6d:f3:f6:01:72:b6: b7:51:00:27:14:c5:98:4b:d4:dc:55:0e:3e:3f:be: 3c:4b:a2:95:a3:2e:54:02:1d:8d:49:f8:a5:25:d2: 21:8a:90:be:9e:bc:f1:ee:21:63:86:a6:fa:fe:5a: f8:25:2f:b1:c5:77:ae:9c:d4:f1:e5:1c:ba:13:79: cf:4a:42:25:26:41:2f:79:8e:42:ba:2c:be:5a:59: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3E:29:43:BD:BB:EA:17:BA:5B:D0:8B:BA:B7:2D:AF:E7:FF:7F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f21e5a5-dc57-37e4-94e9-f1a4f98f4e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:81:c4:3b:02:f9:c1:1e:d4:2a:cc:92:df:10:3c:a3:c4:45: 28:e0:f4:0e:09:41:aa:09:e4:aa:dd:16:67:15:21:7f:05:40: b2:60:12:87:5b:b5:e9:c1:da:df:8b:da:c3:c7:61:c8:19:b5: eb:33:05:a9:af:c8:84:91:23:6b:8d:fa:e0:cf:b3:dc:41:91: 4d:d4:c1:d4:3f:5e:7e:18:a3:b8:10:8a:f7:d1:a9:01:98:26: 5f:82:a2:14:ec:6d:6c:ef:fd:22:0e:67:9b:31:73:98:8d:e2: af:ce:41:5a:cf:72:15:2a:d6:7e:bd:5c:1f:5b:ef:01:f7:5c: db:d2:a2:81:3c:37:c4:f8:ec:69:4b:70:fe:77:72:54:5e:e8: 43:98:9c:4d:f3:01:c0:26:55:6a:3f:18:24:7e:7c:be:46:85: da:ef:ce:a2:14:d6:53:0b:3c:44:55:f2:c9:fe:bd:18:e2:6e: 31:35:69:14:9a:5f:9d:2f:48:83:37:72:06:8a:d6:71:f3:0d: 91:90:95:71:ac:59:35:e4:c1:68:92:01:62:f5:2a:d2:ac:92: 38:fe:85:f5:c4:40:d5:e0:61:24:e1:de:5c:da:21:0a:4d:f6: 1f:1b:5e:45:3e:d6:cf:23:34:ea:8f:89:09:ef:2a:9d:56:d0: 93:c4:34:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uK9q3NEL5S7ikAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Y2NlZDM5NTctYjljMy00MzJkLWIwZDQtZmVlMGZlOWRhMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiMpk6nJN/8yre1mlgN/m4wMVjAi3aDDzHkg HCLLujEnkx9gC4z7FLGOHjM7oUWfz/bSHD2tenB7TJLwj1wYPVtWrpImYlqBNWhg oddyeFNs/DGwRNBwdU7GIHx4hLyTkxn3foKgSnD/tlx4OCcKZe/f3Zqw0RW+IwyY VeMDuy/fEcxgZnel3t1nAcKBIcNoCwxywnG9NlGVlcmh0o0jX98lSL79RFbMXj6z 8F9t8/YBcra3UQAnFMWYS9TcVQ4+P748S6KVoy5UAh2NSfilJdIhipC+nrzx7iFj hqb6/lr4JS+xxXeunNTx5Ry6E3nPSkIlJkEveY5Cuiy+Wln6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4+KUO9u+oXulvQi7q3La/n/3+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2YyMWU1YTUtZGM1Ny0z N2U0LTk0ZTktZjFhNGY5OGY0ZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFReMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANKBxDsC+cEe1CrMkt8QPKPERSjg9A4JQaoJ5KrdFmcVIX8FQLJgEodb tenB2t+L2sPHYcgZteszBamvyISRI2uN+uDPs9xBkU3UwdQ/Xn4Yo7gQivfRqQGY Jl+CohTsbWzv/SIOZ5sxc5iN4q/OQVrPchUq1n69XB9b7wH3XNvSooE8N8T47GlL cP53clRe6EOYnE3zAcAmVWo/GCR+fL5GhdrvzqIU1lMLPERV8sn+vRjibjE1aRSa X50vSIM3cgaK1nHzDZGQlXGsWTXkwWiSAWL1KtKskjj+hfXEQNXgYSTh3lzaIQpN 9h8bXkU+1s8jNOqPiQnvKp1W0JPENA8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:29:05 2025 by rpki-client