$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9608543c-2dcc-3e34-907d-f77a68cd382f.roa File: 9608543c-2dcc-3e34-907d-f77a68cd382f.roa (raw, json) Hash identifier: bIXM5NwpcpQ69q3tt5g0odObaYXNGiQ7OpJAmhpDvfQ= Subject key identifier: 34:9A:FE:A4:2E:4B:C6:9A:8C:F5:B2:86:EE:DE:C7:FD:BB:28:AF:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8A9145B8CB1D8EDFC3500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9608543c-2dcc-3e34-907d-f77a68cd382f.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.54.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:a9:14:5b:8c:b1:d8:ed:fc:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5cd0cb12-c6c6-414c-8a43-70a25d907033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:58:32:6a:19:e7:63:26:82:b2:a5:f7:86:21: b3:56:80:bc:c7:d0:ce:14:ce:e6:f3:58:71:36:bf: ea:5f:b9:f4:f7:73:43:4e:5a:33:52:25:6f:09:45: c5:0b:3d:98:02:89:30:f4:a0:2a:46:23:57:dc:ff: 18:82:28:61:f0:1e:82:81:c9:f3:c3:8e:f7:5c:3c: 44:97:e7:bb:7f:bf:47:5a:c2:ca:2c:72:5a:73:df: d5:5a:cb:66:6a:10:cb:b5:dd:e4:61:4f:59:f9:79: 0e:32:24:4f:80:f8:50:4c:c3:c6:89:29:53:03:d9: 74:cb:c1:a4:cb:ab:a7:c6:89:37:67:70:2a:85:d4: 64:1b:e6:70:50:df:37:9f:95:b2:de:e8:f3:f1:ef: 12:dd:8e:5d:19:68:4b:96:50:3f:74:6b:3e:5d:ba: ed:8e:c9:63:e7:e2:45:98:34:18:67:65:b0:f5:a2: f8:52:cb:95:5a:ff:3f:67:d7:9e:8f:8b:77:bf:af: 75:36:b4:52:94:3b:76:70:ba:b6:51:a6:87:27:8a: ae:1d:73:86:20:fa:69:d6:c9:f2:66:5a:ac:d1:47: d7:a3:7a:3c:4a:33:49:5c:5b:e9:60:27:e5:dc:11: c3:e6:20:ba:d0:b2:5e:e6:de:b8:ed:75:97:88:bc: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9A:FE:A4:2E:4B:C6:9A:8C:F5:B2:86:EE:DE:C7:FD:BB:28:AF:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9608543c-2dcc-3e34-907d-f77a68cd382f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:10:59:5f:ed:db:38:cc:2f:62:26:9b:f2:b4:4c:da:78:06: 7e:2a:98:8d:d2:8d:c8:9a:05:96:75:da:36:6e:cc:e3:39:93: 6c:5a:8e:ff:5a:b7:57:c0:ec:e1:d8:47:b2:71:1c:98:35:7b: 71:07:86:ca:25:e1:d4:01:7c:ab:24:a3:24:dc:c3:d5:2b:1a: 1f:bb:4b:b1:14:23:2f:50:77:45:43:91:42:3f:8c:3d:99:e4: 83:31:b9:af:ab:6f:39:67:77:6d:8c:10:1b:0f:9d:b3:0c:14: 26:b0:85:b4:6e:e0:0d:84:08:86:52:08:03:5c:98:9a:74:15: 27:00:70:0f:79:d3:64:40:ea:27:fe:2a:91:69:e2:a0:0b:eb: d0:b4:96:be:98:86:63:5c:26:cc:c1:b3:f6:5a:ce:2b:e7:8d: 18:be:90:34:33:d1:8a:c0:5d:7f:86:e3:f2:9a:ab:f9:80:84: 55:15:42:b5:96:61:a0:9d:67:84:df:eb:4c:b7:7f:4c:5a:30: f7:75:f7:b9:1e:bc:fb:1c:12:1c:02:17:23:37:2b:0c:61:25: 14:26:52:1b:ba:b6:92:4d:10:1e:4d:bf:a5:72:58:31:6c:a2: e0:61:22:c8:77:c1:a4:ee:75:e8:cb:27:6d:47:4f:71:dd:ef: 37:ec:db:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKkUW4yx2O38NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NWNkMGNiMTItYzZjNi00MTRjLThhNDMtNzBhMjVkOTA3MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFgyahnnYyaCsqX3hiGzVoC8x9DOFM7m81hx Nr/qX7n093NDTlozUiVvCUXFCz2YAokw9KAqRiNX3P8Ygihh8B6Cgcnzw473XDxE l+e7f79HWsLKLHJac9/VWstmahDLtd3kYU9Z+XkOMiRPgPhQTMPGiSlTA9l0y8Gk y6unxok3Z3AqhdRkG+ZwUN83n5Wy3ujz8e8S3Y5dGWhLllA/dGs+Xbrtjslj5+JF mDQYZ2Ww9aL4UsuVWv8/Z9eej4t3v691NrRSlDt2cLq2UaaHJ4quHXOGIPpp1sny Zlqs0UfXo3o8SjNJXFvpYCfl3BHD5iC60LJe5t647XWXiLwZ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSa/qQuS8aajPWyhu7ex/27KK/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTYwODU0M2MtMmRjYy0z ZTM0LTkwN2QtZjc3YTY4Y2QzODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDbPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwQWV/t2zjML2Imm/K0TNp4Bn4qmI3SjciaBZZ12jZuzOM5k2xajv9a t1fA7OHYR7JxHJg1e3EHhsol4dQBfKskoyTcw9UrGh+7S7EUIy9Qd0VDkUI/jD2Z 5IMxua+rbzlnd22MEBsPnbMMFCawhbRu4A2ECIZSCANcmJp0FScAcA9502RA6if+ KpFp4qAL69C0lr6YhmNcJszBs/ZazivnjRi+kDQz0YrAXX+G4/Kaq/mAhFUVQrWW YaCdZ4Tf60y3f0xaMPd197kevPscEhwCFyM3KwxhJRQmUhu6tpJNEB5Nv6VyWDFs ouBhIsh3waTudejLJ21HT3Hd7zfs270= -----END CERTIFICATE-----Generated at Mon Oct 20 06:31:57 2025 by rpki-client