$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439877e3-68e5-35b6-a65a-5b597f1669f2.roa File: 439877e3-68e5-35b6-a65a-5b597f1669f2.roa (raw, json) Hash identifier: yWLbuBZZqQkgvKPT9ogFT2S16PTZBnJsYyXE014sHj4= Subject key identifier: D8:70:6F:03:20:A3:EC:C4:8F:62:A4:35:50:12:08:64:62:1D:B3:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB996718695E4C98DB8C5C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439877e3-68e5-35b6-a65a-5b597f1669f2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 68.46.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:96:71:86:95:e4:c9:8d:b8:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=824e143c-303c-451a-89b6-fb64edb06726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d1:e1:2f:69:44:77:96:b9:f6:e0:c4:eb:fa: c4:41:42:86:dd:55:7e:af:d4:18:50:1d:1d:74:b4: 00:b0:bf:fd:80:90:e9:16:0f:07:83:b0:0b:4c:87: 8c:8f:82:bd:21:1a:17:bc:85:d8:18:63:c4:76:ab: 86:93:16:c0:e6:88:e9:04:e2:8d:5e:7d:5f:c1:e0: 2d:94:fb:ac:8f:00:61:55:31:9d:89:19:d1:a7:d3: d4:6c:28:39:46:07:89:7a:22:f1:d6:36:9f:4e:f3: 6a:31:75:05:61:08:d7:b5:79:9f:27:a8:c8:df:5f: de:63:eb:12:31:26:a4:0f:69:8a:f6:16:05:d2:1e: 78:e6:b7:8c:fd:4e:27:2e:2c:39:8e:1d:f0:fb:8e: 3c:28:c5:8c:21:84:8c:f0:a9:d7:da:1e:25:07:fa: 49:57:49:1f:39:f1:78:f4:32:9e:45:20:6f:22:e0: 5b:e7:36:e5:07:47:c9:30:ab:a9:fe:67:93:50:33: a0:d6:90:c7:f6:9b:58:e8:25:af:9a:48:88:d2:2f: 90:53:2c:ea:08:45:8e:51:76:52:ca:4b:ab:73:94: d9:4c:74:85:6c:66:ec:c8:23:69:2c:89:e7:33:04: e4:7c:27:e4:ba:b6:f4:ba:35:1e:3b:53:97:1e:3f: a7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:70:6F:03:20:A3:EC:C4:8F:62:A4:35:50:12:08:64:62:1D:B3:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/439877e3-68e5-35b6-a65a-5b597f1669f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.46.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:49:f0:1a:cc:a8:ce:e3:83:cd:0e:f0:ec:02:bd:90:fb:31: 68:09:cc:71:b0:ce:d8:c2:f8:bc:05:a3:25:3d:5c:2c:a2:df: d8:39:e9:22:3b:fc:5a:ae:28:6e:70:e3:e1:02:b4:41:af:1d: 33:6b:b5:01:16:4d:e2:a0:2f:af:32:8a:d5:7d:30:18:55:10: 23:6a:89:71:9e:92:db:e4:9b:11:01:5f:9b:dc:02:a1:a4:02: 30:d0:20:04:67:14:93:98:0a:8a:f0:10:f3:88:df:1a:a4:76: c8:d1:67:75:2d:82:5f:43:84:c3:39:9b:b4:99:a4:89:d2:3a: 59:6d:40:10:5a:68:59:de:a6:51:c1:69:36:8f:2e:4b:95:fb: e0:48:f4:2e:52:9c:55:f7:a1:17:92:93:5e:df:a5:a6:78:1e: bf:cd:dc:58:5c:1b:5e:fd:5f:3d:d0:6b:6e:80:3d:4f:f8:df: 99:b8:58:1a:94:22:23:fd:3e:82:ea:09:79:2e:d0:2b:61:72: 57:d1:d9:57:da:8c:a0:ed:24:6a:48:69:8b:0b:fb:e0:a2:29: 8a:01:91:af:d8:f8:e1:7f:43:e4:bf:d5:90:d0:11:ac:eb:b9: ff:f0:64:29:8f:f0:a7:00:8c:c1:93:31:7a:08:8a:1e:bb:34: a0:60:6e:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uZZxhpXkyY24xcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODI0ZTE0M2MtMzAzYy00NTFhLTg5YjYtZmI2NGVkYjA2NzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdHhL2lEd5a59uDE6/rEQUKG3VV+r9QYUB0d dLQAsL/9gJDpFg8Hg7ALTIeMj4K9IRoXvIXYGGPEdquGkxbA5ojpBOKNXn1fweAt lPusjwBhVTGdiRnRp9PUbCg5RgeJeiLx1jafTvNqMXUFYQjXtXmfJ6jI31/eY+sS MSakD2mK9hYF0h545reM/U4nLiw5jh3w+448KMWMIYSM8KnX2h4lB/pJV0kfOfF4 9DKeRSBvIuBb5zblB0fJMKup/meTUDOg1pDH9ptY6CWvmkiI0i+QUyzqCEWOUXZS ykurc5TZTHSFbGbsyCNpLInnMwTkfCfkurb0ujUeO1OXHj+nvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhwbwMgo+zEj2KkNVASCGRiHbMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM5ODc3ZTMtNjhlNS0z NWI2LWE2NWEtNWI1OTdmMTY2OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9J8BrMqM7jg80O8OwCvZD7MWgJzHGwztjC+LwFoyU9XCyi39g56SI7 /FquKG5w4+ECtEGvHTNrtQEWTeKgL68yitV9MBhVECNqiXGektvkmxEBX5vcAqGk AjDQIARnFJOYCorwEPOI3xqkdsjRZ3Utgl9DhMM5m7SZpInSOlltQBBaaFneplHB aTaPLkuV++BI9C5SnFX3oReSk17fpaZ4Hr/N3FhcG179Xz3Qa26APU/435m4WBqU IiP9PoLqCXku0CthclfR2VfajKDtJGpIaYsL++CiKYoBka/Y+OF/Q+S/1ZDQEazr uf/wZCmP8KcAjMGTMXoIih67NKBgblI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:22 2025 by rpki-client