$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59b855e1-ab27-3e8b-bada-1aa09f7a1c86.roa File: 59b855e1-ab27-3e8b-bada-1aa09f7a1c86.roa (raw, json) Hash identifier: fme2lWv9nBDrv4inbkKGxBJ44S5Yj9BVtjpYfR7ADVA= Subject key identifier: B4:0C:FD:58:9B:57:B8:44:00:96:C2:C7:F0:4F:AA:21:03:11:34:06 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8AEC7B23FBA0852726A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59b855e1-ab27-3e8b-bada-1aa09f7a1c86.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.63.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:ae:c7:b2:3f:ba:08:52:72:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6a73bb3e-a248-4771-af85-e32a4d29386a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:f6:4c:0b:15:e7:15:ea:f8:e8:48:92:9c: f6:a2:6b:d0:68:b6:4e:dd:21:a3:1e:0a:6c:7c:06: 11:08:ed:2e:ae:e7:3c:0e:66:a2:d2:e2:eb:42:69: ed:b1:0f:c1:14:d7:37:a7:5b:56:eb:c1:fa:0e:18: 1f:10:d8:48:05:95:c7:66:4a:5d:19:3e:e7:8b:bc: 36:19:13:fa:09:ef:13:d0:cc:59:3c:db:f0:bf:62: c8:46:b1:41:ac:1c:d5:e9:60:50:94:89:5d:19:61: 10:d1:6f:ae:f6:aa:25:bc:40:1c:ae:b3:34:79:ce: db:17:1d:18:d2:f1:de:0c:7a:f4:f5:46:4a:d8:f0: 89:b5:57:76:e8:de:6b:14:af:c0:1c:06:f3:bd:9b: 15:ec:23:76:3f:b3:66:ff:bc:0b:88:66:3b:19:59: f6:fe:bd:83:40:07:e6:38:b3:72:1f:6d:13:1f:20: 6f:4e:c6:35:ef:38:5a:85:ee:ae:69:e7:3b:ea:23: 4a:74:ea:db:f3:03:7c:5b:9e:bc:97:8b:38:b7:93: 12:bc:96:ca:74:d9:80:0d:a3:dd:d6:d9:49:8f:c4: 1d:8f:c4:d2:4d:17:b4:ce:b5:b9:93:45:2b:79:25: 27:86:dc:7b:34:1d:dc:db:4e:f9:3e:3a:dc:11:87: 46:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0C:FD:58:9B:57:B8:44:00:96:C2:C7:F0:4F:AA:21:03:11:34:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59b855e1-ab27-3e8b-bada-1aa09f7a1c86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.63.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c6:db:b2:4c:a3:d8:f6:4c:88:69:20:84:39:3c:0d:e7:37: b3:81:ba:15:f4:0d:6c:40:72:6a:19:4a:3a:8c:5b:47:9b:f8: 5e:91:b8:1e:92:df:c7:05:72:91:4e:7f:6a:f6:6b:93:90:0a: 49:80:77:3f:21:99:ea:f2:d5:5e:fb:76:36:8d:f1:6b:8d:c3: 19:44:62:92:b8:12:d2:20:bd:2e:09:1e:70:83:c9:27:9b:37: 76:7d:b3:d1:68:a2:db:82:5d:a8:0c:c6:77:91:d0:94:02:36: 1b:75:c4:66:d4:6b:94:e3:a0:af:17:28:05:b1:d6:b5:55:0b: ce:91:12:e3:fb:1f:87:4a:15:ed:30:d2:ca:06:7a:12:df:9b: 14:91:b5:9a:d5:40:4b:ad:60:12:e7:47:da:b2:d9:c9:8a:35: 61:c2:62:e2:43:7c:84:ab:2e:4e:11:2e:85:46:a9:1f:55:11: d1:35:9c:08:0f:e7:cb:2c:13:51:15:77:44:09:80:3b:a3:93: df:b9:d3:42:7b:59:ca:bc:1c:de:f6:f5:2a:3e:da:56:cf:45: a2:7b:69:2c:7b:13:14:26:65:af:24:1a:78:7c:30:60:5c:48: aa:67:e2:1a:8f:ed:6c:95:a1:6d:f4:81:2f:40:91:61:a9:31: 6f:c9:bb:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uK7Hsj+6CFJyagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NmE3M2JiM2UtYTI0OC00NzcxLWFmODUtZTMyYTRkMjkzODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsP2TAsV5xXq+OhIkpz2omvQaLZO3SGjHgps fAYRCO0uruc8Dmai0uLrQmntsQ/BFNc3p1tW68H6DhgfENhIBZXHZkpdGT7ni7w2 GRP6Ce8T0MxZPNvwv2LIRrFBrBzV6WBQlIldGWEQ0W+u9qolvEAcrrM0ec7bFx0Y 0vHeDHr09UZK2PCJtVd26N5rFK/AHAbzvZsV7CN2P7Nm/7wLiGY7GVn2/r2DQAfm OLNyH20THyBvTsY17zhahe6uaec76iNKdOrb8wN8W568l4s4t5MSvJbKdNmADaPd 1tlJj8Qdj8TSTRe0zrW5k0UreSUnhtx7NB3c2075PjrcEYdGoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQM/VibV7hEAJbCx/BPqiEDETQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTliODU1ZTEtYWIyNy0z ZThiLWJhZGEtMWFhMDlmN2ExYzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRD+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfG27JMo9j2TIhpIIQ5PA3nN7OBuhX0DWxAcmoZSjqMW0eb+F6RuB6S 38cFcpFOf2r2a5OQCkmAdz8hmery1V77djaN8WuNwxlEYpK4EtIgvS4JHnCDySeb N3Z9s9FootuCXagMxneR0JQCNht1xGbUa5TjoK8XKAWx1rVVC86REuP7H4dKFe0w 0soGehLfmxSRtZrVQEutYBLnR9qy2cmKNWHCYuJDfISrLk4RLoVGqR9VEdE1nAgP 58ssE1EVd0QJgDujk9+500J7Wcq8HN729So+2lbPRaJ7aSx7ExQmZa8kGnh8MGBc SKpn4hqP7WyVoW30gS9AkWGpMW/Ju2U= -----END CERTIFICATE-----Generated at Mon Oct 20 03:23:03 2025 by rpki-client