$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c17daa9-1e77-3548-b9f4-6cd30d3831da.roa File: 6c17daa9-1e77-3548-b9f4-6cd30d3831da.roa (raw, json) Hash identifier: sew9pVislXnCg6SErzUfrCPe9vaT7zGdBxvyOiXSpDw= Subject key identifier: 7D:93:F6:5C:29:D2:27:8E:C4:48:71:5D:AC:8D:E6:8B:8E:53:94:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB70B48EA558EB0F3B73D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c17daa9-1e77-3548-b9f4-6cd30d3831da.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.32.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:0b:48:ea:55:8e:b0:f3:b7:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=601fd2e0-d491-482c-8fef-0078595e64d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f8:48:ac:92:e8:48:59:32:cf:d1:9e:5c:83: 51:1d:de:83:cc:ff:21:8b:a8:6f:07:94:8c:59:b8: 24:92:a8:c8:59:47:67:75:98:70:04:95:a7:4e:f4: 0b:72:cc:98:d3:1c:c4:8f:b5:3a:9d:ae:29:ce:e5: 55:48:67:ee:f1:1f:18:14:2a:0b:a0:dd:ca:e3:86: 8a:15:2e:ae:46:0d:57:6b:70:5d:e0:52:4f:c6:72: c0:a9:72:4b:fc:81:a5:9d:78:b6:a0:56:26:b6:3c: 0a:f1:3e:51:ff:c7:32:3e:51:b2:92:0a:31:e9:0f: 0d:f1:6d:f3:10:d9:58:d1:d0:86:9b:6b:41:e5:04: 5a:f4:e1:94:e5:bf:35:27:91:5b:ee:23:6e:f3:78: 4e:4d:68:64:e0:4a:10:b8:76:9d:d8:10:2a:17:a2: f4:73:a1:c4:cb:5c:8b:00:60:58:12:2f:81:95:4e: 6f:fd:c8:35:33:f9:20:45:30:18:c6:19:a3:f6:11: 92:fd:0e:e9:3c:d6:10:5b:6d:6c:63:4e:5b:07:0f: 96:5b:ed:ce:4e:56:c0:4e:bf:79:ab:36:63:9c:5f: c4:c6:60:34:97:a3:76:9f:d7:ec:48:bf:5e:0c:f3: a9:0a:1b:f1:77:e3:89:82:f6:87:9c:6c:dd:df:cf: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:93:F6:5C:29:D2:27:8E:C4:48:71:5D:AC:8D:E6:8B:8E:53:94:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c17daa9-1e77-3548-b9f4-6cd30d3831da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:2e:5e:ce:f0:61:6a:5b:92:33:03:e7:65:7b:a1:3c:d5:b2: 5a:e1:dc:db:ec:55:b1:49:fc:ea:10:4b:48:09:76:21:43:17: 34:cc:70:a8:39:e0:e0:f6:6e:e8:24:56:ea:3d:b0:09:30:1d: 39:bc:c4:64:26:18:2e:80:95:7b:2f:c4:45:ff:82:5a:01:4a: 7a:23:de:16:d7:d5:67:3c:1b:4a:83:e4:ee:e1:ec:77:e0:ab: a3:75:a3:23:50:95:d9:ee:23:c9:0e:af:ea:64:a7:23:c4:a6: 8c:1f:fb:31:87:4d:2f:48:da:3a:4c:6a:52:db:81:c5:32:54: 5c:62:42:50:89:ac:1e:8a:b6:8c:ef:d7:46:ce:16:65:d2:5c: 17:c6:75:19:89:40:bf:af:0f:f6:9a:c3:5c:ee:d6:24:a1:42: 1b:39:35:b5:96:bf:b2:d3:ea:84:d3:c8:a9:41:8c:62:41:2f: 3b:f2:24:c3:cd:60:c9:d2:4f:cb:18:49:bf:37:dd:93:2a:42: 50:20:fe:bd:b5:b2:2f:a3:14:38:df:1d:ac:94:60:73:bc:ad: 7f:63:49:14:f0:5d:08:cb:77:f5:57:22:50:62:13:13:c3:09: 03:c7:45:ed:8e:1b:b7:9c:00:fa:9e:c3:50:b3:b8:39:59:a0: 53:dd:77:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twtI6lWOsPO3PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjAxZmQyZTAtZDQ5MS00ODJjLThmZWYtMDA3ODU5NWU2NGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPhIrJLoSFkyz9GeXINRHd6DzP8hi6hvB5SM WbgkkqjIWUdndZhwBJWnTvQLcsyY0xzEj7U6na4pzuVVSGfu8R8YFCoLoN3K44aK FS6uRg1Xa3Bd4FJPxnLAqXJL/IGlnXi2oFYmtjwK8T5R/8cyPlGykgox6Q8N8W3z ENlY0dCGm2tB5QRa9OGU5b81J5Fb7iNu83hOTWhk4EoQuHad2BAqF6L0c6HEy1yL AGBYEi+BlU5v/cg1M/kgRTAYxhmj9hGS/Q7pPNYQW21sY05bBw+WW+3OTlbATr95 qzZjnF/ExmA0l6N2n9fsSL9eDPOpChvxd+OJgvaHnGzd388BZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2T9lwp0ieOxEhxXayN5ouOU5RDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmMxN2RhYTktMWU3Ny0z NTQ4LWI5ZjQtNmNkMzBkMzgzMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCBtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0uXs7wYWpbkjMD52V7oTzVslrh3NvsVbFJ/OoQS0gJdiFDFzTMcKg5 4OD2bugkVuo9sAkwHTm8xGQmGC6AlXsvxEX/gloBSnoj3hbX1Wc8G0qD5O7h7Hfg q6N1oyNQldnuI8kOr+pkpyPEpowf+zGHTS9I2jpMalLbgcUyVFxiQlCJrB6Ktozv 10bOFmXSXBfGdRmJQL+vD/aaw1zu1iShQhs5NbWWv7LT6oTTyKlBjGJBLzvyJMPN YMnST8sYSb833ZMqQlAg/r21si+jFDjfHayUYHO8rX9jSRTwXQjLd/VXIlBiExPD CQPHRe2OG7ecAPqew1CzuDlZoFPdd4s= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:31 2025 by rpki-client