$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ce087cc-6768-3753-b247-3cd78fb47625.roa File: 8ce087cc-6768-3753-b247-3cd78fb47625.roa (raw, json) Hash identifier: ZxI43CVcCGUqWkJvKtrBcRxKgCjR15Br6qd77zPtNE4= Subject key identifier: 23:16:AA:BA:3A:39:3C:EA:FD:B5:85:70:48:F6:35:C4:F0:B4:96:BD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB70F9929D17FAFDF605620 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ce087cc-6768-3753-b247-3cd78fb47625.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.47.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:0f:99:29:d1:7f:af:df:60:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=ef680de4-4550-4891-9d95-948b7c093961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:26:59:b7:a0:32:7a:bc:14:ff:c1:2d:b8:f2: b8:3f:61:9a:40:9d:b9:07:94:a4:ef:18:92:2d:f3: 3b:5b:3d:e4:cf:bb:b6:56:b6:51:f1:08:5a:8c:a3: f0:4d:f0:8a:7a:29:a4:1a:5e:c2:76:c8:ee:05:36: 2f:77:ac:c1:83:6a:72:15:1f:c1:89:73:83:c5:80: 25:55:c0:e7:5f:33:c9:8b:28:61:e9:37:44:2e:89: 99:9d:dd:41:50:d0:fe:47:36:27:9e:ae:33:ab:eb: 6f:ab:a1:94:e5:c2:67:5e:1e:1f:47:d2:bc:1b:09: f6:3f:0f:be:d8:68:5d:d2:2a:f5:ff:bc:a7:43:e7: 7f:bc:c9:e8:1e:40:4f:bf:85:e4:e4:c0:aa:d4:34: e7:1d:1b:f2:c4:8e:32:b4:61:74:ed:0a:ae:47:87: d1:3f:8a:09:58:1d:03:5d:b5:2b:9e:e0:12:68:11: 86:f2:aa:6f:99:d0:ef:ab:16:85:0a:a9:30:d4:66: 66:c4:f8:9a:f6:8b:91:80:43:b6:49:15:8e:07:dd: a5:99:f6:4e:e8:cf:d3:e8:5b:99:38:92:91:61:94: 39:7e:c2:a8:9f:f2:f5:b5:b9:3a:1f:c8:e3:38:09: e9:c5:fe:be:51:ee:4c:89:0c:55:20:06:02:34:96: 53:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:16:AA:BA:3A:39:3C:EA:FD:B5:85:70:48:F6:35:C4:F0:B4:96:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ce087cc-6768-3753-b247-3cd78fb47625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:93:5f:37:78:06:f3:79:9c:b2:49:5b:a2:ed:da:f9:81:27: 2c:6f:62:e9:0f:e4:eb:d3:8e:da:bf:1f:92:62:41:08:a6:86: 2c:10:c5:32:4e:59:39:0f:76:14:dd:f5:44:b2:13:84:cf:d2: cb:f1:73:9a:be:e8:ad:e4:90:79:4b:dc:af:ac:6c:d6:2c:cd: f8:c4:ce:61:e9:93:98:e2:35:2e:c7:4b:58:55:55:eb:5d:e8: b9:14:1b:d3:43:08:bb:6f:9f:84:1c:bb:8f:1a:2b:a9:35:47: 2e:74:c5:a1:de:30:37:64:c7:48:eb:d4:8a:f8:1c:9e:52:c0: cb:0f:1b:d9:c5:a4:69:b7:fa:85:7d:08:ae:84:f1:a6:43:73: cf:13:8f:21:1c:7e:53:bd:d3:86:3d:5f:e2:31:50:cb:cb:c7: a2:c2:1f:e3:13:41:29:1f:2c:f0:2b:cf:8b:ad:66:f5:e9:45: 3e:7a:46:69:ff:90:2d:d0:3a:57:ed:93:5f:9b:48:f7:b8:b5: 7d:66:37:60:14:f6:24:50:ec:d6:50:44:38:cd:ef:c6:10:fb: 36:fb:b3:4a:f1:d4:8e:5f:24:ce:04:9d:b4:73:91:a9:de:4b: 97:b1:31:54:aa:8e:c8:35:97:32:79:3d:bb:23:8c:dd:86:e7: e9:95:13:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tw+ZKdF/r99gViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZWY2ODBkZTQtNDU1MC00ODkxLTlkOTUtOTQ4YjdjMDkzOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yZZt6AyerwU/8EtuPK4P2GaQJ25B5Sk7xiS LfM7Wz3kz7u2VrZR8QhajKPwTfCKeimkGl7CdsjuBTYvd6zBg2pyFR/BiXODxYAl VcDnXzPJiyhh6TdELomZnd1BUND+RzYnnq4zq+tvq6GU5cJnXh4fR9K8Gwn2Pw++ 2Ghd0ir1/7ynQ+d/vMnoHkBPv4Xk5MCq1DTnHRvyxI4ytGF07QquR4fRP4oJWB0D XbUrnuASaBGG8qpvmdDvqxaFCqkw1GZmxPia9ouRgEO2SRWOB92lmfZO6M/T6FuZ OJKRYZQ5fsKon/L1tbk6H8jjOAnpxf6+Ue5MiQxVIAYCNJZTpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMWqro6OTzq/bWFcEj2NcTwtJa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGNlMDg3Y2MtNjc2OC0z NzUzLWIyNDctM2NkNzhmYjQ3NjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARC+/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGTXzd4BvN5nLJJW6Lt2vmBJyxvYukP5OvTjtq/H5JiQQimhiwQxTJO WTkPdhTd9USyE4TP0svxc5q+6K3kkHlL3K+sbNYszfjEzmHpk5jiNS7HS1hVVetd 6LkUG9NDCLtvn4Qcu48aK6k1Ry50xaHeMDdkx0jr1Ir4HJ5SwMsPG9nFpGm3+oV9 CK6E8aZDc88TjyEcflO904Y9X+IxUMvLx6LCH+MTQSkfLPArz4utZvXpRT56Rmn/ kC3QOlftk1+bSPe4tX1mN2AU9iRQ7NZQRDjN78YQ+zb7s0rx1I5fJM4EnbRzkane S5exMVSqjsg1lzJ5PbsjjN2G5+mVEzk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:26:23 2025 by rpki-client