$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acccec98-be8b-3cb6-aa9d-11b27a7d0d89.roa File: acccec98-be8b-3cb6-aa9d-11b27a7d0d89.roa (raw, json) Hash identifier: lYmkA/dVRUHsaNXQlQto4WSs2NMlDUxF5eA1C8kvjnQ= Subject key identifier: 2C:FF:6C:FE:93:51:20:16:45:87:EB:FC:CB:B7:47:9F:97:CA:96:18 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8A62DA8753CA2F7DA7EE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acccec98-be8b-3cb6-aa9d-11b27a7d0d89.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.53.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:a6:2d:a8:75:3c:a2:f7:da:7e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d58be38a-6964-480e-91a7-2524c0b056c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:62:47:31:f1:81:37:88:e5:9b:3f:71:c5: d6:6a:c7:9f:2e:49:63:24:cb:5a:7d:36:d4:90:2e: 48:8b:f0:5f:f6:23:b1:f4:01:46:ff:0e:6c:75:f0: 69:3c:64:50:e6:6e:75:3d:02:90:31:85:d0:ec:eb: 63:d9:d6:6c:77:81:12:a1:83:28:d8:9c:a9:eb:f7: a8:4e:0c:de:df:25:34:63:96:69:a4:cc:7f:a3:29: 75:1c:03:b7:6a:ea:7e:b3:6f:6e:a6:ea:71:ad:57: 64:1e:b4:aa:0e:17:1c:3b:78:81:b7:68:6e:f1:8a: 63:4b:49:88:b6:0b:80:37:92:93:77:32:7c:72:4b: 28:81:61:55:fc:a8:f8:50:e6:de:e8:e7:a2:27:a1: c8:91:6c:d1:85:ca:2f:60:e8:38:50:9e:83:a5:4a: 8f:47:fa:35:25:d8:6e:96:2b:b2:00:e8:e7:6f:9a: 3a:19:11:f6:1b:f7:70:93:75:21:d4:46:86:b7:3e: 15:36:60:b5:53:84:c0:f2:40:80:87:20:a9:eb:4b: b2:0a:96:67:db:cc:62:34:5c:7b:35:c5:eb:b5:1e: cc:18:2a:b7:72:e1:75:4b:4f:dd:8b:06:37:e3:02: 2f:5c:57:47:23:ad:4a:44:ea:c8:83:18:99:cf:01: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FF:6C:FE:93:51:20:16:45:87:EB:FC:CB:B7:47:9F:97:CA:96:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/acccec98-be8b-3cb6-aa9d-11b27a7d0d89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:66:1c:ef:a2:e8:a9:30:77:e5:bd:9b:f7:37:84:68:29:d9: 59:be:0a:64:46:5d:99:22:b9:7a:88:db:01:d3:d7:74:f8:0c: b0:2c:b3:7c:62:72:1d:64:df:e6:ed:3b:20:1a:14:c8:81:ce: a7:c1:cc:2f:6c:a0:bf:ef:88:1a:44:96:da:86:fc:96:97:2c: 45:2b:bf:c2:14:1b:d0:f6:45:71:96:d3:41:86:9f:a7:3b:d7: 3f:01:e7:e4:06:b5:ac:42:68:40:fe:64:eb:41:b4:2c:c2:a2: 52:9b:dd:f3:38:89:b0:b5:d5:32:d1:dc:ee:7f:08:44:88:67: ad:1f:e2:26:07:eb:27:18:6b:c2:3c:64:a6:2d:5f:1e:1c:03: 4d:d6:95:00:ee:ed:dc:e5:9d:93:4c:f8:18:19:a4:a4:0d:ca: fc:90:fe:f9:e7:a0:be:f7:7f:b9:41:37:85:b4:a2:f0:3d:03: 53:44:4e:f3:91:9b:b2:2b:95:d8:47:84:cd:5b:73:20:db:fc: 16:dc:50:40:6d:90:55:1c:d9:21:8a:cc:f0:c7:60:7d:e8:d7: 95:b3:1d:00:68:4c:47:2d:ad:f5:6f:d3:cb:d8:d9:0e:ea:8d: c2:78:71:16:ec:85:ef:61:a5:c0:b7:d9:89:13:7b:06:69:d9: 44:d9:13:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKYtqHU8ovfafuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDU4YmUzOGEtNjk2NC00ODBlLTkxYTctMjUyNGMwYjA1NmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR5iRzHxgTeI5Zs/ccXWasefLkljJMtafTbU kC5Ii/Bf9iOx9AFG/w5sdfBpPGRQ5m51PQKQMYXQ7Otj2dZsd4ESoYMo2Jyp6/eo Tgze3yU0Y5ZppMx/oyl1HAO3aup+s29upupxrVdkHrSqDhccO3iBt2hu8YpjS0mI tguAN5KTdzJ8cksogWFV/Kj4UObe6OeiJ6HIkWzRhcovYOg4UJ6DpUqPR/o1Jdhu liuyAOjnb5o6GRH2G/dwk3Uh1EaGtz4VNmC1U4TA8kCAhyCp60uyCpZn28xiNFx7 NcXrtR7MGCq3cuF1S0/diwY34wIvXFdHI61KROrIgxiZzwEnnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCz/bP6TUSAWRYfr/Mu3R5+XypYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWNjY2VjOTgtYmU4Yi0z Y2I2LWFhOWQtMTFiMjdhN2QwZDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDWHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1mHO+i6Kkwd+W9m/c3hGgp2Vm+CmRGXZkiuXqI2wHT13T4DLAss3xi ch1k3+btOyAaFMiBzqfBzC9soL/viBpEltqG/JaXLEUrv8IUG9D2RXGW00GGn6c7 1z8B5+QGtaxCaED+ZOtBtCzColKb3fM4ibC11TLR3O5/CESIZ60f4iYH6ycYa8I8 ZKYtXx4cA03WlQDu7dzlnZNM+BgZpKQNyvyQ/vnnoL73f7lBN4W0ovA9A1NETvOR m7IrldhHhM1bcyDb/BbcUEBtkFUc2SGKzPDHYH3o15WzHQBoTEctrfVv08vY2Q7q jcJ4cRbshe9hpcC32YkTewZp2UTZE/A= -----END CERTIFICATE-----Generated at Mon Oct 20 03:26:25 2025 by rpki-client