$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa File: a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa (raw, json) Hash identifier: 1j4XSEttKwEXIal5vJxwo6iraVG5erX6VWy+avCpunE= Subject key identifier: DD:99:B3:1B:F6:EE:6B:1C:B5:14:47:84:5D:31:74:EB:CA:AF:D1:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB753049ED4A38F7563E180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7016 IP address blocks: 68.85.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:53:04:9e:d4:a3:8f:75:63:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=2e73f3d3-0c96-4f1e-b303-b228c3d371aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:24:e5:8c:01:37:85:6d:0d:df:9d:ea:d5:a2: 87:50:61:e8:f0:de:e9:a3:a4:de:27:d3:34:34:18: 86:60:e4:d7:10:69:b5:ce:29:89:70:cd:32:6f:d0: fe:40:68:5e:c1:b1:3c:2d:b4:3c:0b:91:c2:fd:43: dc:36:38:12:1b:b8:53:7d:56:37:95:75:91:23:54: f9:cf:a0:a7:e9:ce:91:34:73:5a:87:02:d3:3f:9f: 86:f8:52:67:84:e2:ce:33:37:95:b0:9f:61:8a:2b: 05:f0:4d:24:89:4d:0f:67:6b:68:f5:28:15:55:07: 7e:7d:09:1b:83:d3:eb:78:16:24:77:42:9d:f1:bb: d3:1b:67:d7:f3:42:10:a4:f6:45:7b:38:3b:53:8a: 1f:0a:d0:be:49:f4:7f:fb:ee:a1:19:33:5c:99:8d: fe:fa:64:44:68:c3:0f:e7:ee:a6:4a:7f:54:09:85: b6:8a:90:cc:e6:fa:86:99:18:13:d5:ba:6d:ac:db: 82:11:35:3c:25:27:1a:66:15:c2:13:05:4f:04:3e: d9:bd:0c:5a:84:e1:3f:b3:96:42:a1:ae:6d:df:11: ce:d1:6e:88:74:32:ac:19:35:77:e1:e2:95:02:ec: e9:ed:e6:c5:06:e2:47:e3:a7:3b:b5:3a:50:3d:e3: e7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:99:B3:1B:F6:EE:6B:1C:B5:14:47:84:5D:31:74:EB:CA:AF:D1:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d9:55:df:78:9c:b5:53:d3:5f:a4:91:18:91:aa:ad:d5:b6: 97:06:84:e8:2e:de:64:f5:b1:17:1e:32:a1:fe:03:20:99:b8: 4c:99:c4:b3:75:01:58:27:a1:78:f6:8a:ae:3a:76:b9:fe:a5: fd:09:b0:ec:aa:22:4b:d1:62:14:e0:c7:d3:3f:9e:d8:b2:50: ca:d1:70:e2:74:00:5f:ad:64:97:56:30:8b:84:c4:8c:de:22: 7b:43:81:16:6c:e5:c5:e2:be:b2:c5:11:49:fe:0f:c1:5a:ca: 5e:be:02:6d:9b:8b:b4:11:5d:97:74:e2:01:69:7a:19:79:fb: e1:f3:10:6c:40:52:3c:a1:d7:29:6c:38:ae:70:45:54:fb:82: 22:fd:10:c8:f2:21:43:45:93:4f:31:29:93:fe:cd:c4:36:a6: 25:46:7c:09:b4:f5:78:f6:7f:f4:2d:46:51:39:47:76:7a:65: bc:35:f6:ed:4f:ea:45:f5:78:ea:52:d3:ca:13:82:a9:8b:bf: 91:51:f5:93:da:03:ed:d5:fa:05:d8:a9:67:77:47:5b:24:8a: 9e:79:61:70:00:41:d9:73:e0:1a:e2:99:85:29:4e:25:72:a5: 44:ae:27:ac:d3:0a:63:70:a8:29:f2:2a:3c:27:14:b3:fd:3b: f4:5d:95:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t1MEntSjj3Vj4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MmU3M2YzZDMtMGM5Ni00ZjFlLWIzMDMtYjIyOGMzZDM3MWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CTljAE3hW0N353q1aKHUGHo8N7po6TeJ9M0 NBiGYOTXEGm1zimJcM0yb9D+QGhewbE8LbQ8C5HC/UPcNjgSG7hTfVY3lXWRI1T5 z6Cn6c6RNHNahwLTP5+G+FJnhOLOMzeVsJ9hiisF8E0kiU0PZ2to9SgVVQd+fQkb g9PreBYkd0Kd8bvTG2fX80IQpPZFezg7U4ofCtC+SfR/++6hGTNcmY3++mREaMMP 5+6mSn9UCYW2ipDM5vqGmRgT1bptrNuCETU8JScaZhXCEwVPBD7ZvQxahOE/s5ZC oa5t3xHO0W6IdDKsGTV34eKVAuzp7ebFBuJH46c7tTpQPePnwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2Zsxv27msctRRHhF0xdOvKr9FiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTg2MmExNGYtZGU5ZC0z OWUyLWEyMTctNmNkMGNmMWIzMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArZVd94nLVT01+kkRiRqq3VtpcGhOgu3mT1sRceMqH+AyCZuEyZxLN1 AVgnoXj2iq46drn+pf0JsOyqIkvRYhTgx9M/ntiyUMrRcOJ0AF+tZJdWMIuExIze IntDgRZs5cXivrLFEUn+D8Fayl6+Am2bi7QRXZd04gFpehl5++HzEGxAUjyh1yls OK5wRVT7giL9EMjyIUNFk08xKZP+zcQ2piVGfAm09Xj2f/QtRlE5R3Z6Zbw19u1P 6kX1eOpS08oTgqmLv5FR9ZPaA+3V+gXYqWd3R1skip55YXAAQdlz4BrimYUpTiVy pUSuJ6zTCmNwqCnyKjwnFLP9O/Rdlf4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:47:26 2025 by rpki-client