$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a72298e8-2e78-3442-a9b3-e5f20027673d.roa File: a72298e8-2e78-3442-a9b3-e5f20027673d.roa (raw, json) Hash identifier: qw96fddTHoryh+REbvEo+baBLyEZepZYN7e3XtBkwf0= Subject key identifier: BE:DC:9F:66:2F:89:04:DC:F9:39:25:FC:36:AB:1C:4A:60:4F:F0:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8A31FF58EDFA43CF1C200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a72298e8-2e78-3442-a9b3-e5f20027673d.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.52.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:a3:1f:f5:8e:df:a4:3c:f1:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=992dd061-5c28-4cf3-85ee-d947b233cb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:a9:c0:28:5c:f9:c7:d4:93:7a:b3:ef:15: 96:c4:50:ce:fa:04:54:2b:51:cd:a9:d4:d2:3b:72: 33:fa:e0:ae:19:e3:43:fa:3e:c4:cd:72:ab:3b:79: a0:3d:3b:56:b1:7d:63:5b:2f:2b:50:d1:b3:d4:6e: 6a:90:71:ee:c7:ae:96:df:63:88:47:65:08:5d:c9: 54:d9:00:e2:5d:d0:45:ab:2e:67:b7:41:82:23:8b: 13:32:f4:f6:f3:8a:72:3e:3e:54:f1:0f:fd:a5:59: a2:4d:b5:94:28:74:d6:ee:ce:a2:3e:75:18:8b:05: 8d:ff:a4:07:ab:fd:49:fc:bb:99:82:48:d4:97:f5: 73:3d:92:93:1c:8e:e8:a7:16:ab:67:9f:ec:d9:34: 22:93:e6:ea:a4:4d:f0:f4:38:f4:33:7e:96:77:7e: a2:e7:61:3a:c3:d4:a6:3c:b4:f3:bd:8a:48:11:7f: a7:65:2d:a3:69:05:06:8f:f8:6e:da:a3:34:a8:da: 6a:0c:3c:38:b4:95:6a:b1:7e:bb:50:31:cb:f0:38: 2f:54:0c:e8:cf:cf:59:a0:44:6d:82:01:e0:9f:76: 00:66:4c:4c:20:33:fe:29:54:08:fd:b4:32:b5:dd: 3f:22:66:6f:71:c6:f3:9d:f3:ed:87:f2:e9:e9:d5: 15:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DC:9F:66:2F:89:04:DC:F9:39:25:FC:36:AB:1C:4A:60:4F:F0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a72298e8-2e78-3442-a9b3-e5f20027673d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:10:af:8c:0e:6b:36:8e:7e:e7:09:a9:42:85:5e:49:2d:1c: 7f:06:6d:e7:56:b1:be:94:c4:1b:66:e3:1f:3b:e2:5e:00:88: cb:e8:f1:9d:30:9a:69:6a:41:fd:33:8e:55:0c:65:ec:3c:39: c8:66:76:73:d8:84:41:66:44:56:b9:d4:bb:16:86:93:e7:47: 69:cd:80:dd:2b:75:8c:ac:d0:ea:9b:42:50:88:34:bb:a0:4a: 9e:18:22:7e:28:85:e5:3d:2f:cb:0f:0a:00:67:40:2b:14:a4: 82:f9:3a:9b:c6:05:24:74:07:86:8c:d4:7d:d5:9d:77:87:17: 66:a0:2d:3b:74:da:86:1d:58:8e:21:7f:5c:48:28:f0:ac:43: f8:82:8e:86:21:2a:82:34:db:63:94:55:9b:2d:b6:bf:d8:57: 38:09:87:35:99:71:8e:01:49:3d:1a:e4:83:52:7f:41:4b:91: 9b:0e:95:04:ad:c1:25:65:68:af:70:57:fa:cd:81:f1:14:d4: 1f:a7:6f:b6:b0:07:6b:1d:ef:7c:ea:d9:c6:c3:f4:fd:73:f3: 0e:66:fd:b0:ba:c7:16:a2:5e:58:d5:78:71:85:d2:9c:c3:28: bf:86:76:97:6e:8c:59:f9:46:7f:ff:38:ac:97:d5:57:79:11: d1:00:29:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKMf9Y7fpDzxwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTkyZGQwNjEtNWMyOC00Y2YzLTg1ZWUtZDk0N2IyMzNjYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNWpwChc+cfUk3qz7xWWxFDO+gRUK1HNqdTS O3Iz+uCuGeND+j7EzXKrO3mgPTtWsX1jWy8rUNGz1G5qkHHux66W32OIR2UIXclU 2QDiXdBFqy5nt0GCI4sTMvT284pyPj5U8Q/9pVmiTbWUKHTW7s6iPnUYiwWN/6QH q/1J/LuZgkjUl/VzPZKTHI7opxarZ5/s2TQik+bqpE3w9Dj0M36Wd36i52E6w9Sm PLTzvYpIEX+nZS2jaQUGj/hu2qM0qNpqDDw4tJVqsX67UDHL8DgvVAzoz89ZoERt ggHgn3YAZkxMIDP+KVQI/bQytd0/ImZvccbznfPth/Lp6dUVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7cn2YviQTc+Tkl/DarHEpgT/D3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTcyMjk4ZTgtMmU3OC0z NDQyLWE5YjMtZTVmMjAwMjc2NzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcQr4wOazaOfucJqUKFXkktHH8GbedWsb6UxBtm4x874l4AiMvo8Z0w mmlqQf0zjlUMZew8OchmdnPYhEFmRFa51LsWhpPnR2nNgN0rdYys0OqbQlCINLug Sp4YIn4oheU9L8sPCgBnQCsUpIL5OpvGBSR0B4aM1H3VnXeHF2agLTt02oYdWI4h f1xIKPCsQ/iCjoYhKoI022OUVZsttr/YVzgJhzWZcY4BST0a5INSf0FLkZsOlQSt wSVlaK9wV/rNgfEU1B+nb7awB2sd73zq2cbD9P1z8w5m/bC6xxaiXljVeHGF0pzD KL+GdpdujFn5Rn//OKyX1Vd5EdEAKVE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:51 2025 by rpki-client