$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62c4da9f-846f-3ad7-9e9b-fa6596d5341c.roa File: 62c4da9f-846f-3ad7-9e9b-fa6596d5341c.roa (raw, json) Hash identifier: 2vzgggXjYC0BbsIOVWNnJhW/pBO/MVptpHJwYvuJ6Mk= Subject key identifier: 8A:93:37:6E:1E:66:F5:9C:E2:1B:28:F2:11:1C:C5:E4:09:F8:71:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8A877AFB94B5265E7B180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62c4da9f-846f-3ad7-9e9b-fa6596d5341c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.54.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:a8:77:af:b9:4b:52:65:e7:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5f64d66c-d738-49fc-bbd4-55b60fe8bd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:76:56:71:a8:6d:2b:2c:08:35:08:9e:7b:24: 1e:b4:ac:c1:46:e1:16:f8:c3:6c:77:71:ee:5a:1f: 13:20:2e:a8:11:8f:12:73:48:bc:62:5f:d1:b3:a8: d9:be:f3:3d:89:60:b0:aa:28:ab:02:01:bc:b8:c6: d7:72:db:de:6c:12:2f:d4:c0:fe:65:45:fc:fb:52: 83:f9:f2:b9:0c:8c:29:a5:1e:37:5d:50:a1:22:1e: 04:3f:4b:f6:b4:16:92:47:01:41:91:fc:ce:83:d5: 2a:75:65:21:ab:f8:8b:6e:3c:fe:d9:ca:df:83:07: ab:f6:15:37:b6:ec:71:3c:8d:e8:44:10:32:e4:10: 3c:49:e8:6a:35:e6:d9:19:ca:bf:0f:f6:22:5a:1d: 09:d0:1f:81:cc:b2:a9:4c:02:14:ef:c9:4c:2a:68: 03:e8:6b:ba:34:ce:db:bb:8a:20:19:9f:fa:19:df: 43:b9:c2:df:b8:60:3b:80:6a:a8:54:82:0c:9f:1d: 28:2c:de:57:9e:ca:34:84:67:d9:98:32:2c:27:27: b0:a9:62:9a:76:e8:39:16:f8:14:18:12:a4:cf:7f: ea:56:44:dd:5f:5f:30:62:12:81:a8:e5:07:3c:8e: 89:e6:66:7c:cf:22:f8:5c:1b:bf:33:90:1a:67:63: 10:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:93:37:6E:1E:66:F5:9C:E2:1B:28:F2:11:1C:C5:E4:09:F8:71:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62c4da9f-846f-3ad7-9e9b-fa6596d5341c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:33:9e:fd:cd:20:48:73:63:43:21:da:c7:1b:fb:7b:b1:8f: c0:f8:a0:56:f5:1d:7b:35:a7:98:50:91:64:56:d3:a3:3e:d9: 84:64:f1:5e:3c:d7:d6:82:a9:4f:63:80:7f:73:15:af:92:f2: 4a:b0:11:7b:32:e1:6f:cd:c4:39:52:70:4b:80:a4:d7:c0:e8: f2:1c:f0:c4:ae:69:36:ca:ba:b0:e3:5f:c3:f6:aa:79:d3:ee: bf:53:d8:de:bf:7c:4d:39:48:e9:2a:4b:e1:69:a5:33:e9:76: 1a:17:43:d4:a1:ef:9f:87:b2:05:40:f0:fa:9d:06:f4:4f:b7: ea:a7:a2:67:ff:94:2b:ec:25:99:76:9f:62:e5:9d:e0:fc:a9: 55:4a:a0:02:1a:05:27:07:11:a1:ed:09:07:e0:75:1e:64:a5: f1:02:e3:26:18:98:af:fc:3b:b0:15:f8:da:ef:05:26:30:80: 5b:c7:36:c3:7d:a4:92:ff:96:bd:22:db:95:d5:e5:6d:3e:07: e0:c0:96:81:20:e5:4c:c1:94:42:6e:15:65:af:d4:4d:ad:7d: 20:c3:86:04:ea:db:ed:2a:6f:85:ce:bd:86:72:ea:50:e1:90: e9:ed:b9:a4:c6:9d:79:aa:f0:fa:0c:16:f4:0a:92:70:24:91: 44:da:73:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKh3r7lLUmXnsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NWY2NGQ2NmMtZDczOC00OWZjLWJiZDQtNTViNjBmZThiZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXZWcahtKywINQieeyQetKzBRuEW+MNsd3Hu Wh8TIC6oEY8Sc0i8Yl/Rs6jZvvM9iWCwqiirAgG8uMbXctvebBIv1MD+ZUX8+1KD +fK5DIwppR43XVChIh4EP0v2tBaSRwFBkfzOg9UqdWUhq/iLbjz+2crfgwer9hU3 tuxxPI3oRBAy5BA8SehqNebZGcq/D/YiWh0J0B+BzLKpTAIU78lMKmgD6Gu6NM7b u4ogGZ/6Gd9DucLfuGA7gGqoVIIMnx0oLN5Xnso0hGfZmDIsJyewqWKadug5FvgU GBKkz3/qVkTdX18wYhKBqOUHPI6J5mZ8zyL4XBu/M5AaZ2MQOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqTN24eZvWc4hso8hEcxeQJ+HGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjJjNGRhOWYtODQ2Zi0z YWQ3LTllOWItZmE2NTk2ZDUzNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0znv3NIEhzY0Mh2scb+3uxj8D4oFb1HXs1p5hQkWRW06M+2YRk8V48 19aCqU9jgH9zFa+S8kqwEXsy4W/NxDlScEuApNfA6PIc8MSuaTbKurDjX8P2qnnT 7r9T2N6/fE05SOkqS+FppTPpdhoXQ9Sh75+HsgVA8PqdBvRPt+qnomf/lCvsJZl2 n2LlneD8qVVKoAIaBScHEaHtCQfgdR5kpfEC4yYYmK/8O7AV+NrvBSYwgFvHNsN9 pJL/lr0i25XV5W0+B+DAloEg5UzBlEJuFWWv1E2tfSDDhgTq2+0qb4XOvYZy6lDh kOntuaTGnXmq8PoMFvQKknAkkUTac4I= -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:08 2025 by rpki-client