$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416c0b3a-bbe3-30e2-ac78-e7a33978d0b5.roa File: 416c0b3a-bbe3-30e2-ac78-e7a33978d0b5.roa (raw, json) Hash identifier: Qq4lMVKLfl3D4jn8oYcGORnGfDRVPlXwdoPZVCZKKic= Subject key identifier: AE:21:81:04:D8:DB:36:3F:1C:17:9B:FF:DD:1A:C4:A6:76:B9:6E:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB89C3B7048EA00CFB9A680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416c0b3a-bbe3-30e2-ac78-e7a33978d0b5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.34.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:9c:3b:70:48:ea:00:cf:b9:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=046e3588-1962-4840-ab1c-10a5241503e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:51:19:7c:18:bb:48:b8:df:1d:1a:d0:f4:5a: c1:02:d9:af:4a:a9:84:c9:26:f3:eb:a6:89:48:55: 72:26:68:2b:e3:d4:fd:18:08:45:76:d8:7f:9e:9b: b7:c2:a4:68:c9:ab:a7:03:fc:eb:53:a3:0e:a8:4c: b6:b6:ce:bc:a9:bc:43:90:1d:8e:0f:bf:36:c9:1a: 2c:fd:91:20:75:3f:c6:a7:5a:9e:75:4d:46:a5:75: c5:9c:55:a1:b2:d2:b3:69:e8:b2:69:0e:19:b6:fa: b6:37:7b:46:7c:27:9d:3d:0b:a0:f3:21:6a:d6:a1: 7f:6c:5a:fa:bc:cc:ab:15:13:96:d1:b6:1b:d9:b5: a1:a4:8d:61:0a:77:8d:06:37:e1:5e:c1:87:c8:fa: 0c:a2:b2:83:82:61:31:31:7d:67:0f:77:d1:cb:8a: ae:d9:6d:96:f1:98:9d:04:45:45:db:c5:46:d0:7d: fc:32:a9:4c:76:bb:b6:67:15:66:a1:cc:5d:75:51: 0f:6d:d2:c3:c5:6e:cd:b1:19:57:9a:ec:32:60:77: 83:a4:7a:59:27:cf:44:ee:a1:37:b0:4c:e0:3a:01: 84:a4:92:91:f2:48:a5:b7:2a:05:6d:4d:da:cd:48: ea:7b:5f:c3:64:2b:d2:0d:66:ba:c6:2d:7d:9c:65: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:21:81:04:D8:DB:36:3F:1C:17:9B:FF:DD:1A:C4:A6:76:B9:6E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416c0b3a-bbe3-30e2-ac78-e7a33978d0b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:39:e4:86:fd:50:1e:48:1c:55:4a:e1:b6:92:ef:28:40:50: ad:40:0e:d7:24:37:3e:eb:34:72:3a:ab:04:86:41:36:b0:8b: 92:6b:ba:55:6f:92:18:66:a0:99:5e:7a:87:f3:2a:be:64:ff: 9b:73:bd:8b:f0:d4:9a:03:ee:44:c1:48:15:c9:89:b4:60:b4: 99:b5:ff:f6:79:87:bc:84:83:c0:73:7d:49:82:0e:0a:b4:86: 6e:9f:92:f0:65:58:1d:4c:fa:a6:01:5f:f1:a4:fb:f3:0b:4d: e8:97:dc:f1:b2:95:69:c5:7a:f3:f8:69:a5:b3:5b:22:79:2c: 7a:51:a2:9e:a7:cc:47:b2:dc:10:1d:19:6f:62:f3:9c:69:72: df:94:1d:be:0a:69:3c:ea:96:f4:6a:7b:03:48:5a:10:83:61: 08:ee:89:e4:fd:ac:d5:e7:b9:e2:47:a5:e7:49:14:14:6c:43: 81:55:e2:2a:1c:c2:31:da:10:8f:84:26:7b:b0:b0:56:46:14: 30:1e:6b:4f:37:47:41:d1:4a:d1:ed:8d:fd:db:a2:1a:80:a3: 90:2a:46:cd:9a:ba:c9:c2:5b:46:b1:83:bb:8f:e0:d3:95:48: ee:f1:3d:b1:07:3f:1e:e2:ee:f6:fa:e1:1a:fb:67:12:95:cb: cb:5a:69:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uJw7cEjqAM+5poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MDQ2ZTM1ODgtMTk2Mi00ODQwLWFiMWMtMTBhNTI0MTUwM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFEZfBi7SLjfHRrQ9FrBAtmvSqmEySbz66aJ SFVyJmgr49T9GAhFdth/npu3wqRoyaunA/zrU6MOqEy2ts68qbxDkB2OD782yRos /ZEgdT/Gp1qedU1GpXXFnFWhstKzaeiyaQ4Ztvq2N3tGfCedPQug8yFq1qF/bFr6 vMyrFROW0bYb2bWhpI1hCneNBjfhXsGHyPoMorKDgmExMX1nD3fRy4qu2W2W8Zid BEVF28VG0H38MqlMdru2ZxVmocxddVEPbdLDxW7NsRlXmuwyYHeDpHpZJ89E7qE3 sEzgOgGEpJKR8kiltyoFbU3azUjqe1/DZCvSDWa6xi19nGWphwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4hgQTY2zY/HBeb/90axKZ2uW5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDE2YzBiM2EtYmJlMy0z MGUyLWFjNzgtZTdhMzM5NzhkMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABI55Ib9UB5IHFVK4baS7yhAUK1ADtckNz7rNHI6qwSGQTawi5JrulVv khhmoJleeofzKr5k/5tzvYvw1JoD7kTBSBXJibRgtJm1//Z5h7yEg8BzfUmCDgq0 hm6fkvBlWB1M+qYBX/Gk+/MLTeiX3PGylWnFevP4aaWzWyJ5LHpRop6nzEey3BAd GW9i85xpct+UHb4KaTzqlvRqewNIWhCDYQjuieT9rNXnueJHpedJFBRsQ4FV4ioc wjHaEI+EJnuwsFZGFDAea083R0HRStHtjf3bohqAo5AqRs2ausnCW0axg7uP4NOV SO7xPbEHPx7i7vb64Rr7ZxKVy8taaVs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:27 2025 by rpki-client