$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa File: a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa (raw, json) Hash identifier: rWowyy7l8uMJvT5Tsw8eS0OFZR9NDW6+ostfwgJPQII= Subject key identifier: 00:DA:93:63:34:27:46:0C:D6:1B:06:23:0C:B0:B6:76:D3:D0:82:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B5141E14078A34817D978D480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 7922 IP address blocks: 68.87.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:e1:40:78:a3:48:17:d9:78:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=5cbe79a5-9496-4d27-b5cb-d8692151d722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d5:17:ca:f3:98:03:f1:dd:56:5f:81:00:c2: 51:0f:02:ac:cf:0b:84:20:17:6e:5c:c8:ef:07:c0: 8a:6c:a8:41:7e:38:4c:50:10:03:92:14:4d:fb:eb: eb:9f:91:20:f1:dd:0b:78:54:c0:a8:eb:91:ff:46: c6:cd:e7:54:74:88:5b:8c:3d:02:9a:cc:48:99:fa: 52:06:81:ff:24:40:df:cb:5d:ce:bc:8a:ba:2b:49: 61:c3:8b:29:a9:c8:69:97:1f:dc:19:a3:b8:1b:17: cb:0e:79:c8:46:1f:55:8c:57:8b:b7:f2:a0:9b:03: 70:23:96:05:be:bb:8f:ab:c7:34:98:f0:35:c9:56: b3:66:26:8f:96:1b:08:5f:2c:fd:57:34:96:db:1f: 59:3c:f1:1a:89:c7:35:f6:13:60:0e:48:71:36:ef: f4:80:9a:e6:d0:ab:c6:78:f3:f8:8e:74:b9:37:df: fc:95:80:0a:9a:72:0a:ad:93:27:3b:4a:8d:c0:5a: 01:31:c5:96:1a:85:ef:95:11:5d:76:d4:ee:0d:97: 74:57:97:cc:ac:ca:22:ff:27:da:7a:c1:a8:4f:da: e8:b3:e3:a1:a5:9d:25:98:3e:db:3c:38:cf:dc:bc: 36:64:ea:a8:02:fe:b8:5c:6e:fb:3a:54:70:e7:74: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DA:93:63:34:27:46:0C:D6:1B:06:23:0C:B0:B6:76:D3:D0:82:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0c:c8:7e:c3:94:73:5e:de:53:47:58:e9:e8:ed:d5:09:cf: ef:95:fd:81:12:a9:0d:10:c2:f4:55:c1:f2:51:26:03:9e:0f: 7c:22:47:0e:85:21:af:71:f5:ef:7b:ac:b9:17:69:18:01:53: 4e:89:2b:c8:24:d2:34:45:4b:70:00:50:22:be:08:ab:31:1c: 8d:ae:de:18:29:81:86:aa:00:96:02:f3:39:4d:d2:87:e6:ad: 58:41:c8:0f:25:90:3c:be:2e:d1:b2:d3:b4:d5:03:d8:18:cc: 19:41:bb:93:ef:18:b7:12:95:80:31:91:6a:e0:e3:39:81:2d: a5:1b:3c:0c:1b:37:63:9d:17:c1:91:cf:46:f8:78:41:3e:f8: 01:40:42:15:ce:12:87:14:a7:92:60:41:d5:01:df:b6:05:09: c5:d6:3a:60:3e:8b:ee:f7:15:d7:05:4d:14:87:84:44:c5:0c: ab:a2:fc:ab:79:a1:dd:99:63:d9:bd:0e:f7:06:81:49:62:c3: 69:de:7d:75:46:e4:80:25:2f:2a:b8:9c:a3:b9:2c:74:79:f0: 58:59:0b:2a:f0:05:bb:52:18:50:7d:33:ec:b6:e9:9d:5d:0d: 4e:97:8f:c2:a0:c3:2e:aa:7d:b5:e2:34:ae:44:0e:6c:0a:cb: e0:70:9f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQeFAeKNIF9l41IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NWNiZTc5YTUtOTQ5Ni00ZDI3LWI1Y2ItZDg2OTIxNTFkNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19UXyvOYA/HdVl+BAMJRDwKszwuEIBduXMjv B8CKbKhBfjhMUBADkhRN++vrn5Eg8d0LeFTAqOuR/0bGzedUdIhbjD0CmsxImfpS BoH/JEDfy13OvIq6K0lhw4spqchplx/cGaO4GxfLDnnIRh9VjFeLt/KgmwNwI5YF vruPq8c0mPA1yVazZiaPlhsIXyz9VzSW2x9ZPPEaicc19hNgDkhxNu/0gJrm0KvG ePP4jnS5N9/8lYAKmnIKrZMnO0qNwFoBMcWWGoXvlRFddtTuDZd0V5fMrMoi/yfa esGoT9ros+OhpZ0lmD7bPDjP3Lw2ZOqoAv64XG77OlRw53Sk/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADak2M0J0YM1hsGIwywtnbT0IIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTI5MzYwODItZmY3Zi0z YzJmLWI2M2ItYzY0OGM2ZmU1ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQMyH7DlHNe3lNHWOno7dUJz++V/YESqQ0QwvRVwfJRJgOeD3wiRw6F Ia9x9e97rLkXaRgBU06JK8gk0jRFS3AAUCK+CKsxHI2u3hgpgYaqAJYC8zlN0ofm rVhByA8lkDy+LtGy07TVA9gYzBlBu5PvGLcSlYAxkWrg4zmBLaUbPAwbN2OdF8GR z0b4eEE++AFAQhXOEocUp5JgQdUB37YFCcXWOmA+i+73FdcFTRSHhETFDKui/Kt5 od2ZY9m9DvcGgUliw2nefXVG5IAlLyq4nKO5LHR58FhZCyrwBbtSGFB9M+y26Z1d DU6Xj8Kgwy6qfbXiNK5EDmwKy+Bwnzk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:26:32 2025 by rpki-client