$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8652bb89-2424-30f2-ae88-ec1c7f2c9935.roa File: 8652bb89-2424-30f2-ae88-ec1c7f2c9935.roa (raw, json) Hash identifier: AOKmjelYWQsj5TLyIf8FKprNzbV5psZjkNi5LvqOCbE= Subject key identifier: D9:31:E6:54:72:EB:8A:36:92:3C:E7:7F:6C:9D:97:01:60:14:AE:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECBA0296ACC45870CAB780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8652bb89-2424-30f2-ae88-ec1c7f2c9935.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 68.60.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:ba:02:96:ac:c4:58:70:ca:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=02c714f6-b0f4-4dda-8fc7-448669bb4308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:63:b0:7d:a0:de:c7:3c:24:6a:91:ba:55:b7: 85:73:7b:90:c6:1c:db:8f:03:54:bc:83:df:9c:bd: c4:ec:20:30:65:c3:06:ed:e3:13:f1:47:46:3c:35: f5:a3:70:fc:e7:35:91:20:8d:bc:dc:5d:6e:2d:76: b8:af:cc:2d:44:36:cf:e8:dc:58:9c:b0:1c:6e:e1: 2a:44:66:82:ab:be:cf:5b:23:31:6e:96:42:2f:b3: 5c:cb:ae:35:26:44:6e:67:10:79:98:b7:9b:7f:a6: b7:46:2d:bf:11:07:5c:d8:79:33:0f:62:c0:a9:3c: c4:ad:b5:ef:48:1c:57:71:85:85:d7:c9:ed:49:82: 17:41:4f:bc:26:52:75:d9:59:33:2d:16:76:55:30: 3a:dc:8b:c0:36:be:75:41:df:20:2d:e2:2e:68:f1: eb:aa:fa:a0:ff:11:19:82:21:8c:cd:ab:8d:5d:8d: bc:4d:52:f4:79:eb:b5:36:ae:c1:4e:c5:13:f0:7f: c4:3d:0a:60:f6:d1:dc:9e:77:5a:cc:f3:0a:b7:fe: ea:0c:64:2c:54:d0:31:b5:42:a8:c9:77:91:46:d5: 6c:d4:67:cd:0f:a1:54:92:4f:b7:9a:e9:84:10:50: f2:0a:05:14:53:52:ba:bd:4d:25:89:b0:2e:7a:c2: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:E6:54:72:EB:8A:36:92:3C:E7:7F:6C:9D:97:01:60:14:AE:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8652bb89-2424-30f2-ae88-ec1c7f2c9935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b0:9c:1c:b1:3b:30:2e:30:d9:a6:d8:83:f0:fe:99:6e:ae: 5f:45:07:1e:bd:32:b9:73:c5:2b:a0:43:44:5c:24:64:90:84: cf:21:fc:4d:05:09:09:8f:81:5b:e1:3b:c3:03:0a:a1:61:e4: c0:d1:0d:cb:e7:4a:b2:f7:bb:74:8c:b7:bf:be:ef:2f:79:f4: 5d:a5:3f:32:f2:40:6e:66:79:1c:bc:fc:a2:2c:7f:54:4f:b8: 41:9d:b6:16:75:e4:d3:b2:82:a4:be:9e:d9:6d:ab:e3:59:ec: 5a:1a:4a:99:12:97:2b:3b:bd:f4:1a:53:a4:76:43:89:8c:e2: 4c:de:71:06:b2:bf:c6:a2:66:d7:12:46:a8:e2:9b:78:2b:9e: 57:1d:b2:f5:d2:b9:05:60:70:c7:43:65:f4:79:e5:50:d1:1d: a3:6f:fb:cf:3d:a7:f6:1a:07:1d:0e:3f:46:b0:04:33:a8:5e: ca:14:57:ac:8c:95:7f:f6:f6:95:55:ea:d7:21:5f:ef:c2:02: ed:6e:e7:43:be:60:e8:6c:1e:d5:b7:b9:96:68:41:a7:23:9f: a1:af:61:f9:d3:54:00:4a:9d:33:02:2f:dc:38:ac:44:4f:61: 34:20:0f:14:1b:28:34:73:a1:bf:62:44:3b:56:67:01:c5:2e: 76:ba:2d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07LoClqzEWHDKt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MDJjNzE0ZjYtYjBmNC00ZGRhLThmYzctNDQ4NjY5YmI0MzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWOwfaDexzwkapG6VbeFc3uQxhzbjwNUvIPf nL3E7CAwZcMG7eMT8UdGPDX1o3D85zWRII283F1uLXa4r8wtRDbP6NxYnLAcbuEq RGaCq77PWyMxbpZCL7Ncy641JkRuZxB5mLebf6a3Ri2/EQdc2HkzD2LAqTzErbXv SBxXcYWF18ntSYIXQU+8JlJ12VkzLRZ2VTA63IvANr51Qd8gLeIuaPHrqvqg/xEZ giGMzauNXY28TVL0eeu1Nq7BTsUT8H/EPQpg9tHcnndazPMKt/7qDGQsVNAxtUKo yXeRRtVs1GfND6FUkk+3mumEEFDyCgUUU1K6vU0libAuesIMkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkx5lRy64o2kjznf2ydlwFgFK65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY1MmJiODktMjQyNC0z MGYyLWFlODgtZWMxYzdmMmM5OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGwnByxOzAuMNmm2IPw/plurl9FBx69MrlzxSugQ0RcJGSQhM8h/E0F CQmPgVvhO8MDCqFh5MDRDcvnSrL3u3SMt7++7y959F2lPzLyQG5meRy8/KIsf1RP uEGdthZ15NOygqS+ntltq+NZ7FoaSpkSlys7vfQaU6R2Q4mM4kzecQayv8aiZtcS Rqjim3grnlcdsvXSuQVgcMdDZfR55VDRHaNv+889p/YaBx0OP0awBDOoXsoUV6yM lX/29pVV6tchX+/CAu1u50O+YOhsHtW3uZZoQacjn6GvYfnTVABKnTMCL9w4rERP YTQgDxQbKDRzob9iRDtWZwHFLna6LdA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:33:07 2025 by rpki-client