$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f565052-6fb7-344c-a078-74109cb6e7b0.roa File: 3f565052-6fb7-344c-a078-74109cb6e7b0.roa (raw, json) Hash identifier: JFyGIrqSz6hfE1nlCMKVTtJrQJL7yX8XfZ8jIvJr5xE= Subject key identifier: 06:D9:E5:E3:F6:9E:73:DC:99:13:6E:E1:7E:E7:1E:F3:8B:A7:90:A0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7945E5B34F6CCD55096C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f565052-6fb7-344c-a078-74109cb6e7b0.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33650 IP address blocks: 68.86.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:94:5e:5b:34:f6:cc:d5:50:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=3fa2fcc2-8c39-4222-a24a-d3466dbc31ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:d9:a1:9b:6a:f6:85:ff:51:3d:6a:e3:7f: 16:e8:a6:88:e2:a0:f0:80:d1:7c:7e:40:46:b4:4c: 9a:2e:29:17:86:cc:4d:52:8a:f0:82:95:4b:92:d0: 46:90:c7:bd:da:bf:dc:c5:3e:d0:2a:2d:d2:91:29: bf:26:a4:b4:4e:a6:d6:28:ab:81:61:d4:a7:f4:26: cb:e9:04:f1:b3:42:b5:cb:03:61:80:5a:31:89:1a: 9d:32:44:15:31:81:0d:fb:5d:24:c1:8f:de:2f:a0: b3:be:9b:82:44:c3:f0:57:67:e9:f3:6e:63:ac:16: 59:d8:65:ac:78:76:b0:c5:78:25:70:97:1f:e3:42: 43:f3:7e:94:40:a6:c6:f3:4d:bc:d4:a6:63:64:95: 78:67:ae:4a:86:f7:2c:11:be:b5:26:f0:41:f3:fa: e1:00:93:0e:ee:45:5f:b5:17:06:0e:86:cc:d4:6c: 80:87:d7:4e:b2:a0:f9:47:a5:a3:20:8a:d1:a4:ff: e2:8a:b5:12:ad:d7:f5:1c:f2:39:25:56:03:9d:fa: e9:da:56:da:5a:49:16:cb:a7:42:7d:d3:6b:c9:c4: 50:a7:1e:c7:0f:09:95:32:42:6e:f3:9a:4a:fb:6e: 1a:6e:85:4f:3d:2b:db:ea:2c:64:6d:90:f7:30:78: 73:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D9:E5:E3:F6:9E:73:DC:99:13:6E:E1:7E:E7:1E:F3:8B:A7:90:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f565052-6fb7-344c-a078-74109cb6e7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d4:f3:d6:d0:7e:4e:de:9f:9b:e4:d9:4d:e8:78:48:c0:96: 8e:6e:82:a1:3f:79:78:a2:bc:c3:0a:58:ab:18:b3:ad:f0:ce: 92:47:a9:fd:59:cc:62:0c:bf:31:e9:ea:84:86:6e:21:4a:27: af:78:44:7f:e6:54:c8:1d:42:2a:c0:59:fc:81:22:9e:41:b9: d7:91:31:02:2a:10:09:d6:b1:ee:a1:40:b2:81:f4:c3:99:7a: 5b:41:a6:c2:23:e6:d1:f9:6a:66:3c:50:f4:40:93:56:42:01: f4:f3:94:28:87:0f:30:bb:87:93:3d:9e:18:f1:ed:fc:83:bf: bf:4b:86:b4:d6:d0:31:98:38:5e:f5:94:73:ef:14:70:e8:80: 07:b5:07:87:4a:93:5a:2a:bb:b7:da:06:96:64:7f:da:fc:e7: 10:99:cf:7e:b0:d8:36:2e:cf:38:fc:39:d4:4d:27:2f:a6:7e: a3:7d:43:74:38:4b:57:89:86:50:6e:a6:b4:05:7e:5b:68:75: 14:7a:4b:c6:96:41:82:82:4b:53:4f:66:33:e6:0d:e4:9d:ab: 86:44:a4:39:d4:c1:f4:f8:db:30:df:df:03:9a:65:c2:01:13: 18:ac:a3:06:9d:97:31:dc:7c:86:04:38:a9:52:27:24:21:7a: 12:2b:2c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t5ReWzT2zNVQlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk M2ZhMmZjYzItOGMzOS00MjIyLWEyNGEtZDM0NjZkYmMzMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LrZoZtq9oX/UT1q438W6KaI4qDwgNF8fkBG tEyaLikXhsxNUorwgpVLktBGkMe92r/cxT7QKi3SkSm/JqS0TqbWKKuBYdSn9CbL 6QTxs0K1ywNhgFoxiRqdMkQVMYEN+10kwY/eL6CzvpuCRMPwV2fp825jrBZZ2GWs eHawxXglcJcf40JD836UQKbG80281KZjZJV4Z65KhvcsEb61JvBB8/rhAJMO7kVf tRcGDobM1GyAh9dOsqD5R6WjIIrRpP/iirUSrdf1HPI5JVYDnfrp2lbaWkkWy6dC fdNrycRQpx7HDwmVMkJu85pK+24aboVPPSvb6ixkbZD3MHhz8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbZ5eP2nnPcmRNu4X7nHvOLp5CgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y1NjUwNTItNmZiNy0z NDRjLWEwNzgtNzQxMDljYjZlN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFaxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrU89bQfk7en5vk2U3oeEjAlo5ugqE/eXiivMMKWKsYs63wzpJHqf1Z zGIMvzHp6oSGbiFKJ694RH/mVMgdQirAWfyBIp5BudeRMQIqEAnWse6hQLKB9MOZ eltBpsIj5tH5amY8UPRAk1ZCAfTzlCiHDzC7h5M9nhjx7fyDv79LhrTW0DGYOF71 lHPvFHDogAe1B4dKk1oqu7faBpZkf9r85xCZz36w2DYuzzj8OdRNJy+mfqN9Q3Q4 S1eJhlBuprQFfltodRR6S8aWQYKCS1NPZjPmDeSdq4ZEpDnUwfT42zDf3wOaZcIB ExisowadlzHcfIYEOKlSJyQhehIrLPQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:17 2025 by rpki-client