$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d1cf701-b761-379a-9007-e98885128dc5.roa File: 8d1cf701-b761-379a-9007-e98885128dc5.roa (raw, json) Hash identifier: kdVHfO+26TBcARTLUU8EhrR3RZoYPUf8Gj3u6vmpZJQ= Subject key identifier: 17:B5:12:F7:2C:DA:55:76:E4:20:F0:06:8D:11:08:30:10:D2:76:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8AB47952E27423BBFCC20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d1cf701-b761-379a-9007-e98885128dc5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.57.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:ab:47:95:2e:27:42:3b:bf:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=55d29a05-29a6-48cc-b061-d1d79c95f3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:28:54:e1:49:a2:aa:f4:6e:7f:d1:f8:15: 3b:01:9c:61:5a:0b:38:3d:a3:e5:93:6c:b2:81:c7: c4:71:58:d3:5c:2d:bd:78:7a:fc:28:7c:14:5e:a4: d5:20:25:44:d3:27:cd:5f:8f:41:9d:2a:58:35:15: 02:33:d8:74:11:65:9d:9c:e4:db:9f:74:9c:e3:ed: 6a:04:e8:a9:c5:68:47:a7:26:e1:93:00:eb:57:35: 83:2b:a8:85:c5:d1:65:2e:d4:b3:82:50:49:eb:50: 81:28:24:95:8e:0d:ef:4d:ba:41:1f:41:08:b6:ed: 8e:a6:65:aa:e2:ef:8e:49:3b:d0:0e:8e:d5:f4:30: cd:24:38:b9:6d:5f:29:b6:7b:24:b1:58:7d:ec:68: 06:f9:e1:31:f4:0c:b0:d0:34:b4:b2:36:0b:8a:91: 91:fc:74:30:7e:3e:3c:87:ee:5b:e0:12:8f:f7:2b: ea:82:1d:78:66:9c:95:7a:fa:0a:d6:37:9e:a0:67: 8b:e2:00:f3:25:16:1b:c4:c1:ff:d8:99:0b:29:ae: d3:ee:5d:a8:2d:95:95:f3:d8:d9:95:90:59:78:09: c1:db:06:cd:32:72:ae:4e:56:40:64:35:f4:f3:43: be:a6:83:5d:1b:c2:43:55:54:a5:28:ed:44:2b:6c: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:12:F7:2C:DA:55:76:E4:20:F0:06:8D:11:08:30:10:D2:76:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d1cf701-b761-379a-9007-e98885128dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.57.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b6:d7:52:d5:18:ba:f2:3f:c8:c6:0a:09:eb:89:e9:1a:7b: fa:48:86:39:ce:a0:65:91:09:ea:a1:c2:ce:50:4b:70:b6:30: cb:1d:32:76:c9:cb:1a:22:ee:98:78:56:78:2a:8a:73:cb:00: d9:2e:91:7c:68:3a:2e:f9:96:17:06:ee:4b:25:2d:cd:a0:36: 95:49:6b:b4:b3:18:e1:3c:8b:56:6c:00:a9:b0:87:5a:c0:94: 70:36:cb:33:4f:ce:c9:99:2b:82:cb:41:f1:00:61:d4:19:53: 5f:52:3a:cf:2c:ed:b5:19:d2:05:fe:67:bd:48:86:b1:fe:2b: 31:7d:9b:30:bb:a4:3c:2d:97:72:b1:cc:9d:20:dd:f4:a4:bb: 27:d3:c4:e2:6d:97:6d:d3:a3:93:3c:c7:af:2b:ff:66:ae:d6: f5:10:d2:2d:69:79:ad:11:8d:b8:5a:6e:9d:c8:ee:05:fc:e1: 39:1c:3b:32:81:b3:d2:6f:d2:39:42:ef:42:1f:b7:15:dc:ee: 15:6c:8a:ce:c2:f0:55:c4:19:35:f1:be:14:94:03:0f:89:5f: d4:ad:7c:d7:e0:37:97:ab:6d:88:26:8e:ce:76:86:2b:cb:ca: a5:23:78:ed:f5:96:b5:35:2b:93:2a:28:21:38:62:7d:a1:03: bb:3c:6f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKtHlS4nQju/zCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NTVkMjlhMDUtMjlhNi00OGNjLWIwNjEtZDFkNzljOTVmM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2soVOFJoqr0bn/R+BU7AZxhWgs4PaPlk2yy gcfEcVjTXC29eHr8KHwUXqTVICVE0yfNX49BnSpYNRUCM9h0EWWdnOTbn3Sc4+1q BOipxWhHpybhkwDrVzWDK6iFxdFlLtSzglBJ61CBKCSVjg3vTbpBH0EItu2OpmWq 4u+OSTvQDo7V9DDNJDi5bV8ptnsksVh97GgG+eEx9Ayw0DS0sjYLipGR/HQwfj48 h+5b4BKP9yvqgh14ZpyVevoK1jeeoGeL4gDzJRYbxMH/2JkLKa7T7l2oLZWV89jZ lZBZeAnB2wbNMnKuTlZAZDX080O+poNdG8JDVVSlKO1EK2wtpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe1Evcs2lV25CDwBo0RCDAQ0naAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQxY2Y3MDEtYjc2MS0z NzlhLTkwMDctZTk4ODg1MTI4ZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC211LVGLryP8jGCgnriekae/pIhjnOoGWRCeqhws5QS3C2MMsdMnbJ yxoi7ph4VngqinPLANkukXxoOi75lhcG7kslLc2gNpVJa7SzGOE8i1ZsAKmwh1rA lHA2yzNPzsmZK4LLQfEAYdQZU19SOs8s7bUZ0gX+Z71IhrH+KzF9mzC7pDwtl3Kx zJ0g3fSkuyfTxOJtl23To5M8x68r/2au1vUQ0i1pea0Rjbhabp3I7gX84TkcOzKB s9Jv0jlC70IftxXc7hVsis7C8FXEGTXxvhSUAw+JX9StfNfgN5erbYgmjs52hivL yqUjeO31lrU1K5MqKCE4Yn2hA7s8b9c= -----END CERTIFICATE-----Generated at Mon Oct 20 09:32:15 2025 by rpki-client