$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4274c422-37b1-368a-b987-5ce4c259663c.roa File: 4274c422-37b1-368a-b987-5ce4c259663c.roa (raw, json) Hash identifier: toOZEO09eCibbGhNuqyfZTmHss/ERCE3aB2ZcoGQqq0= Subject key identifier: FC:9A:45:44:97:6B:7A:E2:67:FE:0D:84:D9:EC:9A:45:58:7D:39:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB715B8F083B17803A61880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4274c422-37b1-368a-b987-5ce4c259663c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.53.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:15:b8:f0:83:b1:78:03:a6:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=29e56e3a-e28b-4d1b-add7-e7b44fae7cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e2:44:1b:28:cb:fd:b6:cb:e3:87:aa:8c:94: 8b:6a:89:5e:f2:e0:c6:3d:39:9e:16:5b:36:2f:51: eb:ff:82:13:bb:ba:84:7d:c4:ef:75:a1:d0:5a:21: 0e:4a:f8:c7:0d:aa:4b:e5:e1:71:64:ff:42:6a:24: f2:32:3c:21:f0:b0:0e:ec:ca:75:f9:6b:3f:95:69: 54:15:cf:94:1d:14:f2:4f:7a:5d:8d:ec:25:c4:37: 95:e4:05:f7:b9:d5:02:63:27:98:1e:18:80:8b:d7: b0:4e:86:03:b5:b4:cd:4f:56:2e:06:65:ea:37:c3: f2:a7:eb:f3:69:00:23:0c:97:b0:e6:77:b0:7e:cb: 17:0e:df:82:80:ad:87:62:87:1f:79:58:22:7e:d7: 15:09:cb:7a:ae:66:09:33:46:3d:30:cf:43:ae:d7: 43:1a:2c:d5:5d:e6:2c:d2:19:04:bb:f5:10:42:88: df:69:b6:68:e8:61:ad:ae:4f:1b:2e:0e:d1:a6:3a: 59:32:e1:a9:69:5e:71:7b:b5:ae:e8:51:42:62:0b: 50:33:53:0c:10:a7:ca:dc:46:d2:eb:64:31:9a:51: d0:61:79:9b:f7:c8:b2:3e:c7:95:f2:99:36:3a:75: c1:3c:ef:8e:48:b8:78:22:88:be:f2:a3:fe:f8:b6: 89:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9A:45:44:97:6B:7A:E2:67:FE:0D:84:D9:EC:9A:45:58:7D:39:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4274c422-37b1-368a-b987-5ce4c259663c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:42:d2:96:76:df:9f:c6:ca:1a:6c:71:f9:b5:33:49:cd:9d: 63:5f:86:16:91:51:58:25:80:a4:02:af:98:0e:43:16:0d:5d: b6:e6:ae:5c:f1:a7:2a:fe:ed:49:5f:30:89:4d:d6:ea:87:b3: 40:bb:5a:80:05:1f:4b:9c:08:e9:ab:80:6b:39:27:b5:9b:89: b8:c5:e0:99:89:6b:04:15:a3:9a:b4:3d:1e:57:d0:bf:a1:2f: a7:69:64:c6:49:aa:1a:ef:c1:f3:66:80:83:0a:ec:09:64:68: 39:86:81:dc:04:9b:31:cb:92:f4:03:0a:2d:98:11:e9:1e:e8: 88:8d:ca:f5:39:88:39:95:d8:f8:79:92:51:a4:03:7d:a8:58: 77:22:cc:3e:f9:8b:20:9a:7a:9a:8f:b1:78:51:fc:0e:bc:a1: 48:f2:90:35:b7:22:2b:a6:4d:7b:33:b0:db:7d:8c:4a:27:09: d2:25:ba:24:cc:63:a4:6c:c3:98:17:3c:fe:36:f2:99:62:73: 8f:35:de:3d:86:0b:ab:ed:ed:4f:8e:36:1d:28:ab:a4:b7:29: 3b:10:29:e8:24:e8:3f:a7:cf:37:4b:fa:e3:14:c1:63:35:9a: c5:2c:55:b9:04:a4:a8:26:71:cf:e7:31:be:6e:b0:d9:0c:e3: ef:ad:9b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9txW48IOxeAOmGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MjllNTZlM2EtZTI4Yi00ZDFiLWFkZDctZTdiNDRmYWU3Y2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeJEGyjL/bbL44eqjJSLaole8uDGPTmeFls2 L1Hr/4ITu7qEfcTvdaHQWiEOSvjHDapL5eFxZP9CaiTyMjwh8LAO7Mp1+Ws/lWlU Fc+UHRTyT3pdjewlxDeV5AX3udUCYyeYHhiAi9ewToYDtbTNT1YuBmXqN8Pyp+vz aQAjDJew5newfssXDt+CgK2HYocfeVgiftcVCct6rmYJM0Y9MM9DrtdDGizVXeYs 0hkEu/UQQojfabZo6GGtrk8bLg7RpjpZMuGpaV5xe7Wu6FFCYgtQM1MMEKfK3EbS 62QxmlHQYXmb98iyPseV8pk2OnXBPO+OSLh4Ioi+8qP++LaJAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyaRUSXa3riZ/4NhNnsmkVYfTmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI3NGM0MjItMzdiMS0z NjhhLWI5ODctNWNlNGMyNTk2NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9C0pZ235/Gyhpscfm1M0nNnWNfhhaRUVglgKQCr5gOQxYNXbbmrlzx pyr+7UlfMIlN1uqHs0C7WoAFH0ucCOmrgGs5J7WbibjF4JmJawQVo5q0PR5X0L+h L6dpZMZJqhrvwfNmgIMK7AlkaDmGgdwEmzHLkvQDCi2YEeke6IiNyvU5iDmV2Ph5 klGkA32oWHcizD75iyCaepqPsXhR/A68oUjykDW3IiumTXszsNt9jEonCdIluiTM Y6Rsw5gXPP428plic4813j2GC6vt7U+ONh0oq6S3KTsQKegk6D+nzzdL+uMUwWM1 msUsVbkEpKgmcc/nMb5usNkM4++tm9Y= -----END CERTIFICATE-----Generated at Mon Oct 20 04:20:07 2025 by rpki-client