$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f26c0cf-4378-36e1-aee3-81efd1406807.roa File: 8f26c0cf-4378-36e1-aee3-81efd1406807.roa (raw, json) Hash identifier: L0nqQdKcI9pzlH/W7MEOs64yU794XH7NmD5l8Xgmj4Y= Subject key identifier: 61:26:15:04:EE:53:EA:DC:08:95:59:B7:D6:E4:BA:F2:4E:57:7C:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A7730DDEF22F3CABFC96C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f26c0cf-4378-36e1-aee3-81efd1406807.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 68.58.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:73:0d:de:f2:2f:3c:ab:fc:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=4320ebda-ed4e-4b0f-9486-8840222c8a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:05:a9:ed:e3:ab:21:9a:34:37:59:9d:31:45: de:93:2f:ab:d7:17:07:f1:79:a0:3a:97:6d:ad:46: 85:e8:74:97:3e:6e:98:20:40:55:d8:8b:8e:f6:13: cf:fc:26:e0:86:00:cc:67:25:67:e1:6f:80:ec:b3: 83:05:f0:73:51:02:af:94:fc:94:9c:8a:0c:bf:cc: e7:01:f2:65:32:f6:2a:f0:c2:ad:35:5e:51:36:eb: 9c:49:1e:a2:64:78:0d:1d:6b:e6:82:34:14:49:6d: 8b:01:fc:2e:56:1a:ef:86:93:0a:30:02:1d:7c:b2: a4:3b:ef:b2:d4:bb:46:28:d0:eb:f2:2c:65:1b:06: 3d:44:07:dd:04:af:94:89:78:fc:4e:46:46:2f:2d: 7f:ac:18:6b:64:6a:1d:3f:f6:96:b6:71:b3:e6:32: 24:eb:12:33:87:ff:18:fa:3e:cc:e0:94:94:a0:f8: 64:3e:d4:1f:16:e7:14:1f:6f:10:41:7e:a8:81:57: e9:61:0f:7e:1a:55:49:8d:7a:d0:d9:0f:b7:00:9c: 2c:40:fe:1b:f5:dd:4f:04:a9:3e:9b:28:84:bf:ab: a8:ab:f6:45:10:3b:bc:f9:0f:94:bd:14:b9:ca:d5: 24:9c:ff:60:b3:56:d0:48:94:ba:fc:95:21:61:59: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:26:15:04:EE:53:EA:DC:08:95:59:B7:D6:E4:BA:F2:4E:57:7C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f26c0cf-4378-36e1-aee3-81efd1406807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:99:e8:0f:9a:d1:eb:d2:eb:67:84:bd:28:f6:7b:bd:9a:18: b2:b8:43:0f:f3:c0:8f:ea:71:a2:c6:60:81:63:9e:1c:e1:42: c0:4e:8c:e9:22:86:bf:e3:44:21:7f:77:af:5d:2b:ad:21:1c: 33:ec:26:8b:5d:f6:8e:63:86:92:e3:0c:58:af:cf:66:f1:90: 20:f4:1e:7a:1b:b0:19:e8:2f:42:63:2b:4f:2c:75:93:7a:fb: c5:e3:31:80:8a:cb:8f:03:84:96:9f:4d:21:fc:45:d4:02:f1: b5:05:b0:c0:2b:f2:de:c4:6d:fc:e4:51:cf:86:0f:73:b8:79: 58:2e:2d:ac:c1:94:53:92:77:a8:65:25:a4:d4:50:a8:1d:30: c1:1e:ad:74:2b:41:40:96:2c:27:46:e6:30:45:08:fc:0e:89: 72:8e:fb:f4:5d:37:c7:51:eb:41:c5:e4:41:7f:23:68:74:6f: 0c:33:be:71:c2:78:2d:e5:0a:5f:54:ec:95:51:3c:99:d8:d7: fe:cd:06:50:f6:09:b2:75:15:47:bb:a3:be:bf:18:28:a3:04: df:c5:2c:78:6a:d3:13:9a:18:fa:a4:48:8e:62:39:04:a8:8d: 7c:5a:51:3e:ed:93:91:e5:2a:30:7b:8f:d9:ae:04:54:aa:fb: ae:03:bf:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3MN3vIvPKv8lsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NDMyMGViZGEtZWQ0ZS00YjBmLTk0ODYtODg0MDIyMmM4YThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwWp7eOrIZo0N1mdMUXeky+r1xcH8XmgOpdt rUaF6HSXPm6YIEBV2IuO9hPP/CbghgDMZyVn4W+A7LODBfBzUQKvlPyUnIoMv8zn AfJlMvYq8MKtNV5RNuucSR6iZHgNHWvmgjQUSW2LAfwuVhrvhpMKMAIdfLKkO++y 1LtGKNDr8ixlGwY9RAfdBK+UiXj8TkZGLy1/rBhrZGodP/aWtnGz5jIk6xIzh/8Y +j7M4JSUoPhkPtQfFucUH28QQX6ogVfpYQ9+GlVJjXrQ2Q+3AJwsQP4b9d1PBKk+ myiEv6uoq/ZFEDu8+Q+UvRS5ytUknP9gs1bQSJS6/JUhYVnnewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEmFQTuU+rcCJVZt9bkuvJOV3yWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYyNmMwY2YtNDM3OC0z NmUxLWFlZTMtODFlZmQxNDA2ODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDoSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSZ6A+a0evS62eEvSj2e72aGLK4Qw/zwI/qcaLGYIFjnhzhQsBOjOki hr/jRCF/d69dK60hHDPsJotd9o5jhpLjDFivz2bxkCD0HnobsBnoL0JjK08sdZN6 +8XjMYCKy48DhJafTSH8RdQC8bUFsMAr8t7EbfzkUc+GD3O4eVguLazBlFOSd6hl JaTUUKgdMMEerXQrQUCWLCdG5jBFCPwOiXKO+/RdN8dR60HF5EF/I2h0bwwzvnHC eC3lCl9U7JVRPJnY1/7NBlD2CbJ1FUe7o76/GCijBN/FLHhq0xOaGPqkSI5iOQSo jXxaUT7tk5HlKjB7j9muBFSq+64Dv6g= -----END CERTIFICATE-----Generated at Mon Oct 20 06:57:44 2025 by rpki-client