$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49759768-c777-30c1-99c6-730d88fa1fc4.roa File: 49759768-c777-30c1-99c6-730d88fa1fc4.roa (raw, json) Hash identifier: ayM9ZpbUMRkXK9ahM1NcBCaJIl7UzUz5VYNp88XcfDU= Subject key identifier: 99:49:AF:EA:3C:DC:4C:89:25:8D:63:4B:FD:B0:E5:EA:80:70:CA:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8B1F2956DC8C470FAFD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49759768-c777-30c1-99c6-730d88fa1fc4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.36.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:b1:f2:95:6d:c8:c4:70:fa:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a2170d43-9f97-4f69-a66f-ba7da1bb2958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:fa:74:d8:8f:28:c6:ba:1d:24:2e:f7:e5: d8:36:28:3e:2e:7b:80:a3:f7:62:67:9a:7c:7b:a4: ca:7c:06:6f:20:1d:5c:d5:f6:d1:f5:c8:a5:24:91: a3:35:de:8c:72:44:68:d1:09:b9:f6:77:fb:13:19: 1e:c6:cd:fa:7b:28:22:e7:38:35:0a:14:2e:b5:84: 72:e6:4b:60:01:8d:a6:ec:3e:e5:0d:13:ca:58:ed: bd:b8:4f:a0:c4:c7:2b:f6:55:bb:27:35:26:43:bc: e5:4e:2b:d3:d0:69:ed:f3:02:b4:4b:a8:44:8e:c5: ae:b4:4f:57:b8:c3:4c:00:da:18:7f:68:7e:47:73: 7a:e2:f5:66:1c:6d:7f:be:d0:b8:0d:98:8d:cb:0b: 8f:5c:06:ef:e8:3e:a4:76:4e:1a:92:47:23:bf:9c: 67:9d:56:d2:e2:53:4b:89:f6:46:cc:c4:c8:1f:98: a2:76:bd:a2:6f:fe:a8:f9:c9:0c:5e:16:1c:a9:50: 34:ad:ab:cc:a9:da:33:c8:3b:b1:cb:59:65:26:29: 17:0b:d9:64:5d:af:43:6f:39:ae:3c:81:e2:18:04: 75:5a:25:72:ba:f5:76:5f:cf:eb:da:5e:c3:fb:0e: 66:02:b2:6e:4e:e2:35:55:1f:fe:4e:24:e1:15:f1: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:49:AF:EA:3C:DC:4C:89:25:8D:63:4B:FD:B0:E5:EA:80:70:CA:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49759768-c777-30c1-99c6-730d88fa1fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:39:f8:91:8b:2d:08:ee:bd:67:9e:34:de:a7:72:bc:e9:f5: 10:c6:be:73:6f:1b:cd:29:8c:7b:c6:de:0b:d7:e7:9b:0b:ec: b9:ce:0d:8e:61:7d:40:5b:48:39:72:51:49:b0:40:68:f0:dc: dc:21:64:73:87:d0:4f:8d:6a:ca:be:05:87:88:0f:1c:b8:ab: 82:75:5e:36:12:9b:64:75:27:83:99:b8:5a:e6:9f:66:7c:27: 0f:b4:18:12:54:29:73:6f:6a:5b:7a:15:36:66:f1:88:55:5a: c0:b7:8f:5e:9e:a5:e9:7b:80:2c:69:a0:4b:ac:75:b9:16:3c: 1c:6b:7e:17:13:34:d5:03:9a:24:f9:ab:cd:8a:6f:7f:72:a5: d1:b1:53:14:01:de:c9:4e:78:8e:e2:1b:22:9a:1c:9c:66:0e: a2:9a:7b:1e:d6:4b:8e:7f:9a:f0:e1:56:a8:ef:ce:da:34:20: f1:4f:78:70:1d:58:3f:92:5f:ba:ec:c3:d9:c6:cd:23:36:53: 10:0f:83:a9:4b:b0:6a:e6:6c:60:06:93:61:e7:84:5b:1f:65: a4:d3:2e:1e:7a:b6:ee:a2:7a:08:27:26:fe:3d:0b:65:78:b6: ec:07:24:46:5f:8b:31:d4:3f:4d:f8:f3:cf:a1:c1:8a:0e:dd: 9e:ef:2b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqLHylW3IxHD6/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTIxNzBkNDMtOWY5Ny00ZjY5LWE2NmYtYmE3ZGExYmIyOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymH6dNiPKMa6HSQu9+XYNig+LnuAo/diZ5p8 e6TKfAZvIB1c1fbR9cilJJGjNd6MckRo0Qm59nf7Exkexs36eygi5zg1ChQutYRy 5ktgAY2m7D7lDRPKWO29uE+gxMcr9lW7JzUmQ7zlTivT0Gnt8wK0S6hEjsWutE9X uMNMANoYf2h+R3N64vVmHG1/vtC4DZiNywuPXAbv6D6kdk4akkcjv5xnnVbS4lNL ifZGzMTIH5iidr2ib/6o+ckMXhYcqVA0ravMqdozyDuxy1llJikXC9lkXa9Dbzmu PIHiGAR1WiVyuvV2X8/r2l7D+w5mArJuTuI1VR/+TiThFfGRHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlJr+o83EyJJY1jS/2w5eqAcMriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDk3NTk3NjgtYzc3Ny0z MGMxLTk5YzYtNzMwZDg4ZmExZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA5+JGLLQjuvWeeNN6ncrzp9RDGvnNvG80pjHvG3gvX55sL7LnODY5h fUBbSDlyUUmwQGjw3NwhZHOH0E+Nasq+BYeIDxy4q4J1XjYSm2R1J4OZuFrmn2Z8 Jw+0GBJUKXNvalt6FTZm8YhVWsC3j16epel7gCxpoEusdbkWPBxrfhcTNNUDmiT5 q82Kb39ypdGxUxQB3slOeI7iGyKaHJxmDqKaex7WS45/mvDhVqjvzto0IPFPeHAd WD+SX7rsw9nGzSM2UxAPg6lLsGrmbGAGk2HnhFsfZaTTLh56tu6ieggnJv49C2V4 tuwHJEZfizHUP03488+hwYoO3Z7vK5g= -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:40 2025 by rpki-client