$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6143829d-03b2-3769-8988-1d7801a2fe2c.roa File: 6143829d-03b2-3769-8988-1d7801a2fe2c.roa (raw, json) Hash identifier: 35Ql57miHTlDUG//ADeT/paDHOkIEM9WqGoR3AQdBUQ= Subject key identifier: 69:14:71:11:2D:88:21:20:2F:B7:15:C3:AA:55:5A:44:38:55:80:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB929CADEDED0CD7C2B7120 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6143829d-03b2-3769-8988-1d7801a2fe2c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33650 IP address blocks: 68.87.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:29:ca:de:de:d0:cd:7c:2b:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=659ac818-0a4d-4ab6-bee6-75465ec8a0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:a7:83:71:61:c2:48:03:2c:b9:50:fd:93: 2b:54:f9:ea:b1:b1:17:7e:4d:7d:aa:1b:09:fa:f4: e0:de:09:06:65:d9:d0:5f:39:7e:12:61:8c:f2:b7: 2b:82:db:97:a9:2c:a3:40:75:6b:33:ac:d6:58:d9: d1:2b:16:24:94:e4:c7:9d:c9:59:e8:d0:0e:e8:c2: f9:22:d7:24:8c:82:b0:1d:bd:82:f6:77:55:7e:e7: be:f3:f2:eb:b9:3c:a2:dc:f1:04:b4:c9:65:b3:32: 9a:64:b5:81:c6:76:ef:78:d9:d5:00:d1:8f:4d:76: 5f:c6:cf:97:7a:65:e3:ce:83:12:63:94:d3:06:bf: 20:83:5b:8e:3b:f8:b8:9e:9b:18:42:89:9c:a4:2a: 22:69:0f:44:f9:fa:8e:70:32:ea:5c:8d:22:6e:0e: 5d:fa:a6:47:58:f0:aa:18:6f:32:4a:19:70:a3:45: b5:f1:f9:dc:70:8b:e3:d0:e6:d0:b3:68:5f:2f:65: ef:87:4e:a2:74:57:b7:f6:d9:aa:d4:d4:55:2e:a8: c9:2c:b5:89:78:40:cf:d3:6f:ec:25:2d:b9:c8:ca: 26:70:be:2e:81:a0:f7:fa:3c:9d:e7:c8:54:9c:d6: a8:bd:d8:81:27:c1:50:66:8f:b4:e8:16:bd:98:da: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:14:71:11:2D:88:21:20:2F:B7:15:C3:AA:55:5A:44:38:55:80:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6143829d-03b2-3769-8988-1d7801a2fe2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:13:5b:12:32:0f:00:57:ff:0e:ed:af:2c:5a:96:64:d6:7c: df:0e:7e:0a:b7:2b:17:43:6d:29:6a:08:fc:a6:9c:aa:89:88: df:d4:10:94:90:e8:d9:8d:53:99:82:72:92:5a:47:62:15:91: 65:21:0c:b0:f0:8d:4d:ab:c2:26:94:1f:9e:2e:93:41:7f:d8: 0c:b0:26:1d:6e:7f:08:1e:a3:bb:9f:a9:dd:f5:1c:82:5b:1e: 0c:65:57:89:86:09:4e:c4:09:14:65:0f:46:84:8b:fb:b9:81: 33:92:cc:f2:12:43:88:f0:66:bc:61:c9:f7:55:8e:a7:7c:7b: 9a:01:9a:72:af:3a:35:71:b7:e4:f3:82:ed:0c:74:54:3e:9b: 5b:5d:59:e8:56:ca:53:11:96:19:47:db:e5:c7:4b:f7:13:27: 54:04:1c:c2:b9:bf:e0:bc:be:9d:eb:f0:ca:23:59:08:d5:2d: 1b:09:55:88:fa:b3:ce:ff:e1:f5:e4:d7:63:76:54:fa:37:14: ae:1e:02:af:e7:e0:99:59:a1:25:8b:41:6b:fb:bb:9a:aa:27: 5b:6f:e6:11:f5:f9:01:bb:b3:21:69:f2:04:0b:30:f4:89:ed: 36:49:df:5e:1d:2c:c5:df:7e:91:cd:4f:ee:53:93:01:09:6f: a2:b8:e8:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uSnK3t7QzXwrcSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjU5YWM4MTgtMGE0ZC00YWI2LWJlZTYtNzU0NjVlYzhhMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifOng3FhwkgDLLlQ/ZMrVPnqsbEXfk19qhsJ +vTg3gkGZdnQXzl+EmGM8rcrgtuXqSyjQHVrM6zWWNnRKxYklOTHnclZ6NAO6ML5 ItckjIKwHb2C9ndVfue+8/LruTyi3PEEtMllszKaZLWBxnbveNnVANGPTXZfxs+X emXjzoMSY5TTBr8gg1uOO/i4npsYQomcpCoiaQ9E+fqOcDLqXI0ibg5d+qZHWPCq GG8yShlwo0W18fnccIvj0ObQs2hfL2Xvh06idFe39tmq1NRVLqjJLLWJeEDP02/s JS25yMomcL4ugaD3+jyd58hUnNaovdiBJ8FQZo+06Ba9mNqwnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkUcREtiCEgL7cVw6pVWkQ4VYDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjE0MzgyOWQtMDNiMi0z NzY5LTg5ODgtMWQ3ODAxYTJmZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcTWxIyDwBX/w7tryxalmTWfN8Ofgq3KxdDbSlqCPymnKqJiN/UEJSQ 6NmNU5mCcpJaR2IVkWUhDLDwjU2rwiaUH54uk0F/2AywJh1ufwgeo7ufqd31HIJb HgxlV4mGCU7ECRRlD0aEi/u5gTOSzPISQ4jwZrxhyfdVjqd8e5oBmnKvOjVxt+Tz gu0MdFQ+m1tdWehWylMRlhlH2+XHS/cTJ1QEHMK5v+C8vp3r8MojWQjVLRsJVYj6 s87/4fXk12N2VPo3FK4eAq/n4JlZoSWLQWv7u5qqJ1tv5hH1+QG7syFp8gQLMPSJ 7TZJ314dLMXffpHNT+5TkwEJb6K46Mo= -----END CERTIFICATE-----Generated at Mon Oct 20 03:55:16 2025 by rpki-client