$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8557519f-18b3-3b8f-8b66-8c3848663510.roa File: 8557519f-18b3-3b8f-8b66-8c3848663510.roa (raw, json) Hash identifier: fsVbTsUuhP8BjdpwP8S41LktMj+7tOZN1M/Cazt1/Y4= Subject key identifier: 02:A7:43:F4:A6:C6:46:D5:20:8B:B7:80:F3:68:B4:1A:9B:9D:29:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB91E9EC522EB473347FE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8557519f-18b3-3b8f-8b66-8c3848663510.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33489 IP address blocks: 68.87.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:1e:9e:c5:22:eb:47:33:47:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=eff749ad-6afc-4885-aa90-d23add51bb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:ae:f2:17:91:ed:35:04:cb:ab:86:d6:c1: 51:38:00:65:34:32:46:22:bf:cc:3a:ab:5c:2b:b8: 53:ee:bf:8e:10:ed:05:7a:63:a0:c6:50:24:ee:38: a9:42:8b:f9:7f:c4:4c:e8:a6:df:69:19:b3:52:e8: da:70:b9:26:92:bf:7f:69:6e:f1:2c:79:8f:b6:94: 1e:ff:50:58:e2:5e:65:cf:ab:73:0d:cf:bf:67:be: 36:2c:d0:e6:ff:ca:54:5e:fb:9d:82:0f:b7:85:65: c9:9d:25:7f:f9:e7:9b:2b:35:07:8f:8f:c1:2e:13: 95:9e:a9:ab:7d:f6:14:80:b4:f9:5c:35:38:a9:2e: 5b:d0:96:c1:d8:95:37:f9:6b:2c:5b:8a:71:18:0d: 65:60:c7:5b:ff:1b:8b:22:e5:e7:ff:1d:fe:23:67: 5a:99:dc:79:70:1a:01:71:78:a2:4b:8f:13:53:11: a8:20:ee:b7:6d:1a:f2:92:2f:e6:e8:a0:8d:ec:71: 36:42:48:ba:52:29:8b:3d:4e:71:51:10:c0:f1:04: b9:5f:d6:e8:27:2c:12:b8:7b:8b:39:5c:b3:56:78: 45:0d:bb:0f:8e:96:ba:de:f7:b2:88:a5:ed:26:9f: a0:5f:31:1a:95:92:4e:5a:5a:bb:4f:3c:72:d1:29: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A7:43:F4:A6:C6:46:D5:20:8B:B7:80:F3:68:B4:1A:9B:9D:29:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8557519f-18b3-3b8f-8b66-8c3848663510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:fd:00:0a:90:b8:d9:3a:a0:bf:6c:1a:6f:39:f6:de:72:b7: 10:72:18:e7:7b:b4:1b:fc:16:6a:6a:dc:5a:fb:c6:e2:0c:25: 23:19:ed:2d:ed:72:e0:ee:63:99:80:7c:11:ea:cc:de:4a:9c: ea:f1:22:6b:05:f5:3b:52:f4:49:bd:6d:b4:9d:42:36:a1:4b: b7:d3:77:fe:d4:96:80:ca:1c:ca:88:ea:b8:12:93:98:76:2d: 00:7f:83:07:f6:53:df:fc:63:c0:b6:76:ea:7e:95:30:e7:a1: e8:5e:53:4c:50:2c:2f:90:90:45:31:a2:ba:45:bb:f7:52:09: 1c:37:c5:59:b2:c0:12:dd:fe:0d:0e:d4:be:be:c9:8d:7b:66: a1:11:7a:a5:05:e1:31:d2:9b:f8:df:8c:77:77:57:dd:f0:a7: 23:90:e1:ae:45:4f:5c:7c:ff:97:fe:98:45:c5:ae:ca:34:08: 59:47:8a:f1:32:6a:8f:20:98:7b:98:57:38:dd:96:68:88:3e: f2:49:3b:e7:73:8a:0b:f7:c9:c3:ae:fe:db:43:03:01:1d:ec: 8e:12:08:08:2d:91:7e:cc:a8:10:f8:ae:80:a3:a9:2f:a0:04: d5:13:22:0f:d6:eb:9d:b0:7d:8f:e5:53:36:c8:c6:41:7b:8c: ce:71:bd:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uR6exSLrRzNH/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZWZmNzQ5YWQtNmFmYy00ODg1LWFhOTAtZDIzYWRkNTFiYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7iu8heR7TUEy6uG1sFROABlNDJGIr/MOqtc K7hT7r+OEO0FemOgxlAk7jipQov5f8RM6KbfaRmzUujacLkmkr9/aW7xLHmPtpQe /1BY4l5lz6tzDc+/Z742LNDm/8pUXvudgg+3hWXJnSV/+eebKzUHj4/BLhOVnqmr ffYUgLT5XDU4qS5b0JbB2JU3+WssW4pxGA1lYMdb/xuLIuXn/x3+I2damdx5cBoB cXiiS48TUxGoIO63bRryki/m6KCN7HE2Qki6UimLPU5xURDA8QS5X9boJywSuHuL OVyzVnhFDbsPjpa63veyiKXtJp+gXzEalZJOWlq7Tzxy0SlAbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKnQ/SmxkbVIIu3gPNotBqbnSkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU1NzUxOWYtMThiMy0z YjhmLThiNjYtOGMzODQ4NjYzNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANz9AAqQuNk6oL9sGm859t5ytxByGOd7tBv8Fmpq3Fr7xuIMJSMZ7S3t cuDuY5mAfBHqzN5KnOrxImsF9TtS9Em9bbSdQjahS7fTd/7UloDKHMqI6rgSk5h2 LQB/gwf2U9/8Y8C2dup+lTDnoeheU0xQLC+QkEUxorpFu/dSCRw3xVmywBLd/g0O 1L6+yY17ZqEReqUF4THSm/jfjHd3V93wpyOQ4a5FT1x8/5f+mEXFrso0CFlHivEy ao8gmHuYVzjdlmiIPvJJO+dzigv3ycOu/ttDAwEd7I4SCAgtkX7MqBD4roCjqS+g BNUTIg/W652wfY/lUzbIxkF7jM5xvUY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:00 2025 by rpki-client