$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7643724c-8756-36c6-b2af-b07603e75770.roa File: 7643724c-8756-36c6-b2af-b07603e75770.roa (raw, json) Hash identifier: zmRrN7oJtHxn53a1Wh5vN356llKLi4pC41KJw4M4xLQ= Subject key identifier: 37:8C:18:81:FD:44:6A:11:35:86:A8:0C:B5:89:19:A9:F4:2F:EB:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB854C979601FA830CAD240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7643724c-8756-36c6-b2af-b07603e75770.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 68.85.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:54:c9:79:60:1f:a8:30:ca:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6110fb43-dfd9-46d4-b8c9-0c948e7480f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:80:53:c3:e9:f5:fb:eb:ce:16:e3:7b:55: c9:9f:20:69:41:c9:f1:f8:6a:31:d4:d8:4c:3e:7d: 3a:6e:20:2f:ac:6b:46:fa:32:7a:41:5c:6f:4f:20: d7:cf:1c:a9:d7:0b:a1:ec:73:b4:a7:91:68:b3:48: 63:96:21:1a:fb:60:ce:14:d4:56:86:37:cf:6e:af: 88:ce:a1:af:91:c9:bf:0b:af:5b:76:6a:59:20:f3: d1:f9:87:7d:4d:14:52:98:9b:06:d8:67:f7:3e:32: 8d:d8:b3:53:7e:78:04:c1:37:06:8d:3f:b1:53:cd: 34:3a:da:79:8f:86:a1:cf:62:38:83:f7:be:af:14: b2:d4:b3:a4:50:74:69:82:e1:02:20:89:6d:a6:43: f6:98:b1:e0:71:b0:39:ad:dd:22:57:b0:52:59:0e: f1:f3:34:03:b4:3d:ba:d4:04:56:ca:85:2b:06:95: f5:fe:ca:f5:c2:03:17:bb:82:cf:3f:2d:64:da:2a: 58:b2:7e:75:dd:c4:64:7b:4d:d2:8a:b7:f8:47:c3: 93:f1:70:fb:ea:ae:22:bb:f0:6f:b0:58:90:6f:15: 76:d7:ff:6c:fa:14:78:f1:4c:13:1a:97:29:7b:8e: 65:ff:a1:be:71:fd:6a:f5:8b:4b:78:2f:79:e7:21: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8C:18:81:FD:44:6A:11:35:86:A8:0C:B5:89:19:A9:F4:2F:EB:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7643724c-8756-36c6-b2af-b07603e75770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:68:af:fd:df:31:55:50:02:f2:91:76:7f:ca:b4:66:5f:93: a9:0e:3d:e0:70:67:49:ad:48:5d:5b:04:f7:58:1f:ad:63:1f: 46:1d:ea:f3:11:41:d0:ec:d2:e7:33:34:e1:d0:4d:3d:06:f2: d5:87:0b:0d:22:39:f5:71:bb:59:30:44:7c:88:ca:a6:43:7a: 84:cf:cc:cd:01:96:aa:36:82:f2:4d:51:a0:8f:f7:21:2f:d7: e9:02:3e:42:09:0a:af:a4:f5:b3:af:e0:45:5d:64:08:ad:0f: 01:26:7b:8c:72:eb:78:f9:e0:76:36:21:8a:7a:e3:f0:dc:3b: 60:03:99:c7:a9:f8:8d:2d:1d:10:86:20:04:49:fc:e3:17:71: 52:c9:28:50:2a:57:00:9d:e3:56:39:c9:95:22:aa:0e:50:d3: 92:4a:c1:7d:16:b0:1a:f2:5c:3d:e0:55:ee:ea:2a:c7:61:0c: 26:27:bd:ae:c4:06:9f:6e:94:ee:38:89:d3:b9:0c:c8:a2:86: 81:15:2a:9d:05:95:4e:4e:a5:a2:59:04:4b:13:1e:29:bb:07: b1:cb:a5:ff:c8:f6:75:f2:3f:20:1b:e8:cc:ec:22:dd:8e:ba: 35:f3:52:90:24:8c:d0:96:7d:88:f2:1b:be:df:ce:31:f2:81: 5e:91:9e:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uFTJeWAfqDDK0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjExMGZiNDMtZGZkOS00NmQ0LWI4YzktMGM5NDhlNzQ4MGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva2AU8Pp9fvrzhbje1XJnyBpQcnx+Gox1NhM Pn06biAvrGtG+jJ6QVxvTyDXzxyp1wuh7HO0p5Fos0hjliEa+2DOFNRWhjfPbq+I zqGvkcm/C69bdmpZIPPR+Yd9TRRSmJsG2Gf3PjKN2LNTfngEwTcGjT+xU800Otp5 j4ahz2I4g/e+rxSy1LOkUHRpguECIIltpkP2mLHgcbA5rd0iV7BSWQ7x8zQDtD26 1ARWyoUrBpX1/sr1wgMXu4LPPy1k2ipYsn513cRke03Sirf4R8OT8XD76q4iu/Bv sFiQbxV21/9s+hR48UwTGpcpe45l/6G+cf1q9YtLeC955yGAyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeMGIH9RGoRNYaoDLWJGan0L+toMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzY0MzcyNGMtODc1Ni0z NmM2LWIyYWYtYjA3NjAzZTc1NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFVDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtor/3fMVVQAvKRdn/KtGZfk6kOPeBwZ0mtSF1bBPdYH61jH0Yd6vMR QdDs0uczNOHQTT0G8tWHCw0iOfVxu1kwRHyIyqZDeoTPzM0Blqo2gvJNUaCP9yEv 1+kCPkIJCq+k9bOv4EVdZAitDwEme4xy63j54HY2IYp64/DcO2ADmcep+I0tHRCG IARJ/OMXcVLJKFAqVwCd41Y5yZUiqg5Q05JKwX0WsBryXD3gVe7qKsdhDCYnva7E Bp9ulO44idO5DMiihoEVKp0FlU5OpaJZBEsTHim7B7HLpf/I9nXyPyAb6MzsIt2O ujXzUpAkjNCWfYjyG77fzjHygV6RnoE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:50:51 2025 by rpki-client