$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/864da683-f5ca-3cbb-a9f7-098d6ebd3cde.roa File: 864da683-f5ca-3cbb-a9f7-098d6ebd3cde.roa (raw, json) Hash identifier: kGw/67hBZx18Ni7pTOd0VAFCbMjgqCX+WU+bK8l9vlg= Subject key identifier: EB:40:1F:B4:B9:01:C4:CA:62:5E:BC:B7:91:6D:9C:6E:75:5F:7C:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB91EC28D5A2054D427E580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/864da683-f5ca-3cbb-a9f7-098d6ebd3cde.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33489 IP address blocks: 69.136.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:1e:c2:8d:5a:20:54:d4:27:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=3e0b88fb-901e-48b1-b2fd-8b529e5d83c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:50:ec:ce:89:5f:ab:28:5f:e0:5c:ce:08: 91:a6:7f:46:eb:fc:b9:75:dc:c5:6b:58:66:d2:d7: 3f:c9:39:19:8d:2b:cb:83:e7:fb:b4:e5:ba:c4:d8: 23:9c:c3:c8:c0:79:55:c2:38:28:32:a4:06:fb:77: a7:89:92:07:ae:88:4d:01:95:10:9c:b0:9c:bf:d5: 9e:7f:01:d6:14:0b:fe:3d:07:24:c4:44:89:42:f6: 20:74:2f:e8:8a:d0:5c:17:af:c6:77:00:94:44:14: 81:a4:95:bd:c2:54:b1:57:84:ac:3d:e0:83:14:02: 19:51:66:81:df:0a:2d:39:40:41:0b:1c:f1:34:ed: 02:95:6b:ae:11:78:4a:1d:5d:09:09:58:fa:e3:ce: dd:bc:e2:4d:cb:55:52:62:a8:10:a2:8d:11:bf:3d: 06:e4:9a:92:86:71:f4:5c:50:98:1c:d9:e8:a1:af: 98:30:b9:ba:91:6b:40:27:42:ae:a4:45:d6:de:22: ec:b0:3a:5b:f8:6e:3a:66:16:61:f5:cf:84:06:02: 96:e4:07:4a:be:4e:30:97:f1:7a:0b:0d:83:90:50: e3:05:16:16:0b:29:1f:99:2b:47:8e:e5:69:ad:fc: 67:a6:24:a8:ed:38:ab:fa:b4:13:a1:af:8c:00:c1: ef:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:40:1F:B4:B9:01:C4:CA:62:5E:BC:B7:91:6D:9C:6E:75:5F:7C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/864da683-f5ca-3cbb-a9f7-098d6ebd3cde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.136.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:1f:5c:0b:9e:ef:f4:f7:19:4a:ef:30:e0:3a:82:eb:f4:08: f4:0f:d5:93:db:fe:9a:e3:5b:44:da:58:fb:5b:8a:be:77:9e: f4:07:13:78:87:55:83:52:3e:cc:7b:bb:6c:10:c4:4b:4d:bc: 7a:7a:da:bd:92:4a:2c:8c:51:26:53:98:7f:1c:6f:0b:10:ba: 1e:8e:55:87:51:1a:d4:1c:1d:e9:e7:d5:98:54:7a:bd:2f:2d: 8c:44:df:bf:36:5b:3f:f9:c1:18:c2:86:19:80:72:31:2b:d5: 6b:d5:d3:0c:3d:a1:c4:e6:1c:88:08:f7:13:a6:58:25:4b:28: a4:fa:0b:53:a7:ea:06:f3:21:0b:b2:9f:59:85:41:f2:50:2e: db:2a:d6:44:16:fc:4a:42:43:d3:88:b4:81:1d:55:23:02:2b: c2:36:36:0b:e3:ca:96:4d:f3:46:cf:2b:d0:f4:47:3a:49:4e: 4b:ba:9d:29:55:42:1e:0f:e5:50:8b:24:19:88:59:e9:20:ee: 08:55:25:f8:31:36:d6:36:01:92:62:12:1f:e6:4a:3e:a8:10: 40:24:de:3d:0c:1e:c4:cb:ea:6c:ea:af:bc:74:e3:c6:0c:69: e1:61:17:1e:39:b6:3c:72:e2:68:dc:4d:20:40:d4:d1:b5:c3: 18:ad:1e:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uR7CjVogVNQn5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk M2UwYjg4ZmItOTAxZS00OGIxLWIyZmQtOGI1MjllNWQ4M2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIRQ7M6JX6soX+BczgiRpn9G6/y5ddzFa1hm 0tc/yTkZjSvLg+f7tOW6xNgjnMPIwHlVwjgoMqQG+3eniZIHrohNAZUQnLCcv9We fwHWFAv+PQckxESJQvYgdC/oitBcF6/GdwCURBSBpJW9wlSxV4SsPeCDFAIZUWaB 3wotOUBBCxzxNO0ClWuuEXhKHV0JCVj6487dvOJNy1VSYqgQoo0Rvz0G5JqShnH0 XFCYHNnooa+YMLm6kWtAJ0KupEXW3iLssDpb+G46ZhZh9c+EBgKW5AdKvk4wl/F6 Cw2DkFDjBRYWCykfmStHjuVprfxnpiSo7Tir+rQToa+MAMHvlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtAH7S5AcTKYl68t5FtnG51X3xYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY0ZGE2ODMtZjVjYS0z Y2JiLWE5ZjctMDk4ZDZlYmQzY2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERYjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANwfXAue7/T3GUrvMOA6guv0CPQP1ZPb/prjW0TaWPtbir53nvQHE3iH VYNSPsx7u2wQxEtNvHp62r2SSiyMUSZTmH8cbwsQuh6OVYdRGtQcHenn1ZhUer0v LYxE3782Wz/5wRjChhmAcjEr1WvV0ww9ocTmHIgI9xOmWCVLKKT6C1On6gbzIQuy n1mFQfJQLtsq1kQW/EpCQ9OItIEdVSMCK8I2NgvjypZN80bPK9D0RzpJTku6nSlV Qh4P5VCLJBmIWekg7ghVJfgxNtY2AZJiEh/mSj6oEEAk3j0MHsTL6mzqr7x048YM aeFhFx45tjxy4mjcTSBA1NG1wxitHqE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:30:58 2025 by rpki-client