$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58e88639-b184-3402-880c-f09a9fdb9ee5.roa File: 58e88639-b184-3402-880c-f09a9fdb9ee5.roa (raw, json) Hash identifier: uXXuK8Hj5J1ZnqbRseEt23HHtiTYlNM9bDeqbARaiZE= Subject key identifier: 29:5D:D2:1B:D6:C4:83:CF:94:E8:50:FD:64:11:D4:DF:EC:89:E8:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB712ACDF654C2B50EC1700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58e88639-b184-3402-880c-f09a9fdb9ee5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.52.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:12:ac:df:65:4c:2b:50:ec:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=9edb93b4-a975-42b0-8068-f7a2dfe05c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:b4:04:f6:ca:e4:15:37:54:58:2e:d4:69: fc:fd:ac:62:40:55:b1:bf:21:30:26:da:de:27:18: 25:b0:15:aa:81:36:5d:58:89:fb:c3:eb:9f:0c:76: 8d:4a:eb:ca:f0:cc:e2:dd:eb:be:d1:c4:3f:66:5f: cb:b1:e1:f3:50:f7:e9:65:12:4e:11:31:5c:52:04: 0e:b9:d0:0e:68:da:0b:d5:b0:06:a9:86:00:88:fe: db:8b:ef:e7:21:e0:03:a0:d5:0d:cb:07:40:dd:ab: 81:ef:1a:07:af:87:9b:8b:2b:d3:01:7c:56:f7:88: 4c:59:8f:c6:85:aa:4f:e7:0d:58:e8:5a:74:4f:17: e9:35:ed:d1:a1:a3:8f:8e:d4:2b:51:e3:f0:2c:03: c1:95:6e:74:fa:3a:a8:83:9c:a6:d2:42:f6:4f:23: 09:e1:d0:1a:af:eb:2c:76:04:60:b8:80:b3:7e:fb: bf:b7:ae:7a:03:1e:f2:49:2e:a0:ea:19:c4:90:19: 43:77:2f:fe:4c:d8:46:6d:3d:4b:b3:69:3f:f4:da: 12:be:08:99:bb:72:20:77:ae:95:92:d0:86:7f:3c: 8f:3e:73:58:50:5d:8e:cf:ab:14:e1:d9:62:79:82: c6:60:66:8a:a5:1b:c7:89:53:0f:80:94:60:87:13: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5D:D2:1B:D6:C4:83:CF:94:E8:50:FD:64:11:D4:DF:EC:89:E8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58e88639-b184-3402-880c-f09a9fdb9ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c5:79:c4:4b:0d:5a:45:ea:43:ce:d3:ad:00:80:d9:96:e6: b0:41:e1:30:8f:cb:2f:b8:5a:5c:3a:d9:c0:14:8f:61:7d:34: 8a:9d:1e:4a:cb:b5:50:22:a4:15:fa:50:8b:d8:21:1b:e1:d1: 7a:08:2e:d2:80:84:9e:05:30:be:3c:77:8f:25:a3:5d:b3:d7: 75:c8:3c:35:d8:59:cc:12:4a:4c:61:28:e8:dd:1d:fb:21:d1: 04:90:11:f8:6a:7d:f7:b8:f7:3d:f9:7f:2c:e7:af:88:de:ee: 6a:28:3c:d3:4d:31:ae:c1:d1:1a:87:70:94:dc:df:fb:51:78: d4:64:0a:fd:8e:21:22:43:bf:c5:79:97:53:d2:65:03:51:7c: 4d:5f:f1:12:e3:55:5d:d6:6a:46:c0:7c:12:11:e5:66:13:48: b9:38:8a:47:47:3d:55:b7:1b:0c:1a:e3:d1:6f:a3:8c:2e:f7: de:91:4c:c8:d2:a0:b2:03:47:ac:8d:54:c7:95:b9:3c:ad:74: 88:cf:8e:f2:4a:10:00:93:15:9c:48:f5:ff:6e:62:36:11:9e: 74:b5:35:47:12:1c:41:e4:42:98:1f:45:86:51:1f:43:c3:2d: 41:3b:c8:a6:b0:a3:3c:e6:62:7a:39:05:b7:bb:98:6a:a5:93: e6:c0:ac:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9txKs32VMK1DsFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OWVkYjkzYjQtYTk3NS00MmIwLTgwNjgtZjdhMmRmZTA1Yzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM60BPbK5BU3VFgu1Gn8/axiQFWxvyEwJtre JxglsBWqgTZdWIn7w+ufDHaNSuvK8Mzi3eu+0cQ/Zl/LseHzUPfpZRJOETFcUgQO udAOaNoL1bAGqYYAiP7bi+/nIeADoNUNywdA3auB7xoHr4ebiyvTAXxW94hMWY/G hapP5w1Y6Fp0TxfpNe3RoaOPjtQrUePwLAPBlW50+jqog5ym0kL2TyMJ4dAar+ss dgRguICzfvu/t656Ax7ySS6g6hnEkBlDdy/+TNhGbT1Ls2k/9NoSvgiZu3Igd66V ktCGfzyPPnNYUF2Oz6sU4dlieYLGYGaKpRvHiVMPgJRghxNutQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCld0hvWxIPPlOhQ/WQR1N/siei8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNThlODg2MzktYjE4NC0z NDAyLTg4MGMtZjA5YTlmZGI5ZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvFecRLDVpF6kPO060AgNmW5rBB4TCPyy+4Wlw62cAUj2F9NIqdHkrL tVAipBX6UIvYIRvh0XoILtKAhJ4FML48d48lo12z13XIPDXYWcwSSkxhKOjdHfsh 0QSQEfhqffe49z35fyznr4je7mooPNNNMa7B0RqHcJTc3/tReNRkCv2OISJDv8V5 l1PSZQNRfE1f8RLjVV3WakbAfBIR5WYTSLk4ikdHPVW3Gwwa49Fvo4wu996RTMjS oLIDR6yNVMeVuTytdIjPjvJKEACTFZxI9f9uYjYRnnS1NUcSHEHkQpgfRYZRH0PD LUE7yKawozzmYno5Bbe7mGqlk+bArGA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:17:14 2025 by rpki-client