$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a04e3b1a-8670-3344-a5a1-2cea5d9366b7.roa File: a04e3b1a-8670-3344-a5a1-2cea5d9366b7.roa (raw, json) Hash identifier: Qm1t3j+YjntsOVLU0ote1t8UWAS2P5epRIy1UTkJB8I= Subject key identifier: B8:BA:BE:DD:6F:13:A2:22:CC:52:6F:65:48:51:4E:9A:59:EB:C9:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7147549048C3EB87BBF40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a04e3b1a-8670-3344-a5a1-2cea5d9366b7.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.52.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:14:75:49:04:8c:3e:b8:7b:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=13aa8e0b-83a1-4ea6-aa16-d30d8ad09254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:42:25:c7:79:7c:60:c2:ba:5d:b8:1b:d3: 64:32:7f:ef:a4:5f:c3:4c:ad:93:85:c4:08:4e:90: 92:69:3d:84:d3:5c:4e:81:63:a2:51:e0:4a:87:c7: 03:17:76:39:78:84:28:c5:03:95:2d:19:af:f4:21: aa:a4:0c:43:27:01:6f:90:e1:44:29:ce:a1:73:6e: 56:55:aa:d8:55:32:24:2c:51:78:df:81:78:8c:ca: e1:39:dd:10:07:ca:db:6e:02:51:ec:ed:0c:f1:16: e0:bc:98:52:f9:68:67:15:42:81:b8:3a:6b:87:40: 3b:eb:fa:02:77:cc:54:33:4d:cc:1f:c0:6b:99:13: 8e:17:3e:c3:b9:47:49:80:65:5a:4b:26:32:20:bb: 66:6a:62:41:fb:c2:cd:cb:1e:86:dd:fe:e9:42:72: 3d:1a:4f:fc:4f:15:cd:2a:20:ed:76:29:f7:70:f2: ce:17:84:13:6a:3c:9f:f6:a9:ee:d5:d3:56:ab:82: 1b:28:18:ef:65:87:9e:09:7d:79:83:00:a2:9a:0b: 08:df:5b:2f:30:29:9c:d1:d9:45:96:b1:3b:8e:54: 73:b6:3b:ba:37:d5:59:12:95:e5:d8:44:e1:5c:47: 10:8f:3c:37:ca:78:49:c4:2a:a5:27:3b:8e:81:a0: 4f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BA:BE:DD:6F:13:A2:22:CC:52:6F:65:48:51:4E:9A:59:EB:C9:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a04e3b1a-8670-3344-a5a1-2cea5d9366b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d8:54:5c:b6:08:a9:a3:0e:f4:ea:78:04:42:79:09:bb:8c: 80:b2:4a:f0:5e:f4:00:94:72:8d:a1:ef:89:1c:6a:3d:cf:d7: 64:55:96:d6:16:95:45:76:4b:ba:4c:72:60:af:78:e3:ff:0c: 36:37:af:4e:58:c9:dc:e4:6f:15:b0:ca:59:d2:0c:6f:a5:46: 9c:29:d8:ef:6d:13:eb:4e:ec:bc:ec:ff:22:3e:e2:2d:6a:45: 06:53:d4:ae:95:f2:ae:82:c9:12:d5:8c:51:71:3f:4d:43:a6: 0d:97:95:a3:85:da:e7:2a:07:9d:48:eb:3d:a2:04:19:40:2f: ad:f8:bf:12:d3:55:af:06:5b:10:51:7b:fa:9d:3c:9e:33:ab: 95:52:02:00:10:58:b3:a7:e9:eb:eb:c8:e8:85:49:26:0d:6c: 32:d9:b1:c9:5f:e0:5c:25:ea:a7:c7:af:78:75:2d:06:40:10: 31:1d:80:b2:ea:ea:83:d1:0e:bf:54:0d:e3:23:f6:62:28:43: 95:20:ab:9f:e2:37:75:a0:dd:f7:d5:b1:b1:79:7f:07:10:bf: ec:c6:59:1d:9a:a1:28:20:d1:62:47:52:53:cf:2e:45:ee:91: cf:f9:02:ed:54:e7:be:19:eb:67:2f:97:3a:84:b6:5f:e5:a3: 3b:46:b7:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9txR1SQSMPrh7v0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTNhYThlMGItODNhMS00ZWE2LWFhMTYtZDMwZDhhZDA5MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz1CJcd5fGDCul24G9NkMn/vpF/DTK2ThcQI TpCSaT2E01xOgWOiUeBKh8cDF3Y5eIQoxQOVLRmv9CGqpAxDJwFvkOFEKc6hc25W VarYVTIkLFF434F4jMrhOd0QB8rbbgJR7O0M8RbgvJhS+WhnFUKBuDprh0A76/oC d8xUM03MH8BrmROOFz7DuUdJgGVaSyYyILtmamJB+8LNyx6G3f7pQnI9Gk/8TxXN KiDtdin3cPLOF4QTajyf9qnu1dNWq4IbKBjvZYeeCX15gwCimgsI31svMCmc0dlF lrE7jlRztju6N9VZEpXl2EThXEcQjzw3ynhJxCqlJzuOgaBPRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi6vt1vE6IizFJvZUhRTppZ68mVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA0ZTNiMWEtODY3MC0z MzQ0LWE1YTEtMmNlYTVkOTM2NmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETYVFy2CKmjDvTqeARCeQm7jICySvBe9ACUco2h74kcaj3P12RVltYW lUV2S7pMcmCveOP/DDY3r05YydzkbxWwylnSDG+lRpwp2O9tE+tO7Lzs/yI+4i1q RQZT1K6V8q6CyRLVjFFxP01Dpg2XlaOF2ucqB51I6z2iBBlAL634vxLTVa8GWxBR e/qdPJ4zq5VSAgAQWLOn6evryOiFSSYNbDLZsclf4Fwl6qfHr3h1LQZAEDEdgLLq 6oPRDr9UDeMj9mIoQ5Ugq5/iN3Wg3ffVsbF5fwcQv+zGWR2aoSgg0WJHUlPPLkXu kc/5Au1U574Z62cvlzqEtl/loztGt34= -----END CERTIFICATE-----Generated at Mon Oct 20 03:26:03 2025 by rpki-client