$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b959ffd-bf96-361f-a050-850b2227da3b.roa File: 6b959ffd-bf96-361f-a050-850b2227da3b.roa (raw, json) Hash identifier: 1ebkpNTuUcLXa8FDIshOz1RqIPuroUuRfzO9HBipgRk= Subject key identifier: 27:A0:1C:1A:AC:66:F0:51:FA:C2:4A:6A:C7:18:02:BD:50:2E:72:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8A6C11DDF2B9751763380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b959ffd-bf96-361f-a050-850b2227da3b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.53.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:a6:c1:1d:df:2b:97:51:76:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=563d19de-991a-4c98-adaf-d8b39eb0ec86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:25:a7:d6:49:c6:69:f1:10:ef:f6:c2:d3:90: fc:59:0d:2f:dc:e0:3e:15:d0:e3:16:60:b9:ad:f0: e2:61:3f:c2:d2:65:fb:29:e6:4e:9e:51:0a:60:a6: a3:30:5b:82:8a:68:c5:24:ae:a4:7f:39:c4:7e:48: 05:8d:79:cc:9b:9a:7b:4a:74:84:39:ec:b2:b2:48: 9c:f3:74:90:34:3f:4c:1c:71:34:72:49:f1:2a:bb: 70:a9:94:db:a9:0a:17:50:5e:82:4b:38:d5:bd:a4: b0:37:05:1e:8e:20:6b:d2:1a:af:49:28:dd:bb:31: f5:c3:79:ba:76:9a:5a:de:f0:85:d0:de:e1:20:81: 2b:05:24:9f:cb:a8:b1:ca:40:cc:d1:a5:ad:e5:21: 1b:91:51:0d:04:c8:b9:b9:cb:6a:31:66:45:7a:cf: ce:a0:fe:cc:48:5f:dd:31:47:48:29:08:e6:1b:79: 5b:54:04:c7:e7:90:04:e3:68:08:db:17:bf:53:1f: e0:03:74:fb:d1:64:3b:f1:bc:b0:d8:57:9b:cc:26: ed:b4:e0:d4:5c:5a:6f:ee:9d:7b:6c:e5:52:a9:1a: 10:b0:0f:d0:50:a6:0b:42:9c:dc:cd:00:33:d6:48: f6:38:b7:9f:64:fb:25:b0:86:66:d7:0e:9c:5d:22: 41:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A0:1C:1A:AC:66:F0:51:FA:C2:4A:6A:C7:18:02:BD:50:2E:72:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b959ffd-bf96-361f-a050-850b2227da3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:0d:6f:13:80:ee:a6:64:39:b3:9e:45:b0:91:df:35:f1:c8: 45:08:a1:35:5c:c8:d8:1a:32:5e:93:e7:99:94:50:c3:93:f9: f3:0b:fa:4e:7b:86:5b:6b:3f:6a:b8:a4:43:e2:af:15:ee:71: c2:18:7c:ad:fe:51:ba:ab:01:4f:11:27:83:7a:72:a4:b1:77: e0:3e:a3:a7:e8:73:12:0a:33:45:15:e3:df:3f:ac:18:4c:7d: 47:07:1f:43:ab:54:da:c8:37:c8:44:6c:5b:4a:f0:7d:e1:34: 2d:42:38:7b:90:a9:bd:ec:bb:c5:75:1a:99:b9:1f:5b:4f:17: 8c:56:1e:7a:db:e2:ea:86:a5:42:56:85:20:36:4f:40:a5:c6: 23:e0:9c:5e:ec:71:25:a9:11:44:a6:20:5a:1e:8b:87:e9:72: bf:26:5a:94:d6:c9:70:a4:5e:24:61:67:a6:da:11:4d:d2:18: 85:df:ad:11:0c:e1:52:99:2c:8e:d0:ad:78:e3:57:23:8e:a2: 5b:c2:37:50:af:c0:e1:b9:d8:7e:7e:2a:6c:e3:fc:8d:70:a1: 09:3f:d3:4a:4d:ac:bc:9d:7c:00:37:c0:7a:90:81:7c:48:8f: 3d:8a:40:85:c1:57:d1:1b:7e:6c:51:12:d3:29:01:d8:72:e7: a7:9d:f5:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKbBHd8rl1F2M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NTYzZDE5ZGUtOTkxYS00Yzk4LWFkYWYtZDhiMzllYjBlYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyWn1knGafEQ7/bC05D8WQ0v3OA+FdDjFmC5 rfDiYT/C0mX7KeZOnlEKYKajMFuCimjFJK6kfznEfkgFjXnMm5p7SnSEOeyyskic 83SQND9MHHE0cknxKrtwqZTbqQoXUF6CSzjVvaSwNwUejiBr0hqvSSjduzH1w3m6 dppa3vCF0N7hIIErBSSfy6ixykDM0aWt5SEbkVENBMi5uctqMWZFes/OoP7MSF/d MUdIKQjmG3lbVATH55AE42gI2xe/Ux/gA3T70WQ78byw2FebzCbttODUXFpv7p17 bOVSqRoQsA/QUKYLQpzczQAz1kj2OLefZPslsIZm1w6cXSJBMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCegHBqsZvBR+sJKascYAr1QLnLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmI5NTlmZmQtYmY5Ni0z NjFmLWEwNTAtODUwYjIyMjdkYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDWiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYNbxOA7qZkObOeRbCR3zXxyEUIoTVcyNgaMl6T55mUUMOT+fML+k57 hltrP2q4pEPirxXuccIYfK3+UbqrAU8RJ4N6cqSxd+A+o6focxIKM0UV498/rBhM fUcHH0OrVNrIN8hEbFtK8H3hNC1COHuQqb3su8V1Gpm5H1tPF4xWHnrb4uqGpUJW hSA2T0ClxiPgnF7scSWpEUSmIFoei4fpcr8mWpTWyXCkXiRhZ6baEU3SGIXfrREM 4VKZLI7QrXjjVyOOolvCN1CvwOG52H5+Kmzj/I1woQk/00pNrLydfAA3wHqQgXxI jz2KQIXBV9EbfmxREtMpAdhy56ed9ZI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:33:28 2025 by rpki-client