$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9727927-b4c1-39a8-a5f1-e0d5e32ff063.roa File: a9727927-b4c1-39a8-a5f1-e0d5e32ff063.roa (raw, json) Hash identifier: qtkzIe4jx+bcc1QR+9oNvgnPaxNxtGx7BBuQmpkuAeI= Subject key identifier: 16:7C:E1:A8:9B:6A:47:15:B0:2F:55:0D:A0:FB:55:38:4E:95:AA:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB998D963E54ADC3DD42580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9727927-b4c1-39a8-a5f1-e0d5e32ff063.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 68.47.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:98:d9:63:e5:4a:dc:3d:d4:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d91581fb-f71b-4d08-b8c5-20214b5237b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:dc:42:1d:a8:c0:6c:c7:35:bc:e2:54:bc: fa:3a:9f:13:0e:7f:ea:c6:a0:4e:68:fa:4e:3f:a7: a2:62:83:60:a2:a6:d6:2e:fd:d6:2c:89:f1:42:03: 80:52:35:f8:ec:71:d4:b8:9e:09:8b:a2:44:fa:04: 58:e3:8a:cf:4d:e1:ce:d8:33:74:3f:27:35:13:08: 70:45:ba:52:11:e6:62:84:2d:04:e0:ec:c3:33:85: 6b:ab:16:ca:e4:16:f9:ec:e2:aa:7e:86:7e:dd:3a: 64:81:23:a1:8d:f2:d7:7c:e9:51:28:87:f8:da:20: 8a:b1:ea:d1:03:ae:c0:1d:36:b3:b0:9e:d7:bf:01: dc:91:20:76:ee:91:7d:b8:3e:16:54:14:42:6e:96: ab:d5:19:94:04:28:ad:85:47:df:25:94:f1:35:a7: 89:6b:7a:79:50:e2:aa:0e:c0:92:60:61:c5:42:cc: 15:83:8e:85:18:ba:3b:b3:d5:d9:93:63:f0:99:b3: 49:3b:ad:a6:dd:db:87:9c:20:78:7b:43:f2:ba:f6: 46:d4:63:b9:52:a3:8b:c9:ef:d5:82:a4:dc:4b:06: 09:92:a8:81:e2:d2:a6:d2:25:72:22:b4:64:09:5a: 9b:74:81:15:73:8a:12:b6:98:61:27:42:15:8a:fd: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7C:E1:A8:9B:6A:47:15:B0:2F:55:0D:A0:FB:55:38:4E:95:AA:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9727927-b4c1-39a8-a5f1-e0d5e32ff063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:f2:e7:94:22:17:31:74:f1:c1:bc:42:2e:87:52:d6:ee:3f: 57:39:e2:de:c3:dc:62:2a:3f:f5:14:ce:f6:01:4b:4f:fb:28: 7a:91:29:b3:90:f8:74:f4:17:00:fe:57:90:32:ee:6b:2b:94: 2e:b7:52:45:d4:fe:f3:17:34:04:74:11:35:30:4e:dd:22:5e: b2:6b:e8:2b:33:e1:6e:5d:fb:34:3e:32:e4:5d:0d:89:b9:be: 74:85:4f:fe:53:cb:40:d4:2c:11:a8:95:a1:77:4f:53:77:c1: d1:28:f2:5a:ec:6c:7c:90:a7:2a:ed:6f:c6:d0:f2:5e:aa:6e: 47:e5:94:83:30:46:e6:6b:1c:91:fb:4b:ee:b3:f9:36:7f:ca: 8c:64:d1:40:7f:8f:9e:72:a0:32:57:9d:11:29:dd:ee:d0:83: 61:24:f7:f0:1f:5d:ca:15:15:ae:a0:80:bc:a5:2a:b7:39:6a: 14:ba:ca:df:2c:ae:c8:4e:2c:81:99:3b:ae:9f:3f:2c:52:ce: 08:0c:0a:3c:5b:7b:04:9c:83:4d:70:fd:1f:cd:de:c5:f7:70: be:8e:7a:8d:65:b6:42:4c:9a:9e:ae:0a:0f:8d:61:8c:f5:98: af:a6:6d:bf:15:2e:c8:65:09:1d:bc:4a:eb:33:76:3f:f2:c8: 9b:0c:ff:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uZjZY+VK3D3UJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDkxNTgxZmItZjcxYi00ZDA4LWI4YzUtMjAyMTRiNTIzN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5TcQh2owGzHNbziVLz6Op8TDn/qxqBOaPpO P6eiYoNgoqbWLv3WLInxQgOAUjX47HHUuJ4Ji6JE+gRY44rPTeHO2DN0Pyc1Ewhw RbpSEeZihC0E4OzDM4VrqxbK5Bb57OKqfoZ+3TpkgSOhjfLXfOlRKIf42iCKserR A67AHTazsJ7XvwHckSB27pF9uD4WVBRCbpar1RmUBCithUffJZTxNaeJa3p5UOKq DsCSYGHFQswVg46FGLo7s9XZk2PwmbNJO62m3duHnCB4e0PyuvZG1GO5UqOLye/V gqTcSwYJkqiB4tKm0iVyIrRkCVqbdIEVc4oStphhJ0IViv0S9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ84aibakcVsC9VDaD7VThOlapoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk3Mjc5MjctYjRjMS0z OWE4LWE1ZjEtZTBkNWUzMmZmMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANby55QiFzF08cG8Qi6HUtbuP1c54t7D3GIqP/UUzvYBS0/7KHqRKbOQ +HT0FwD+V5Ay7msrlC63UkXU/vMXNAR0ETUwTt0iXrJr6Csz4W5d+zQ+MuRdDYm5 vnSFT/5Ty0DULBGolaF3T1N3wdEo8lrsbHyQpyrtb8bQ8l6qbkfllIMwRuZrHJH7 S+6z+TZ/yoxk0UB/j55yoDJXnREp3e7Qg2Ek9/AfXcoVFa6ggLylKrc5ahS6yt8s rshOLIGZO66fPyxSzggMCjxbewScg01w/R/N3sX3cL6Oeo1ltkJMmp6uCg+NYYz1 mK+mbb8VLshlCR28Suszdj/yyJsM/wE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:03:37 2025 by rpki-client