$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0059cb-14d9-35f8-aa56-704c2806d4d2.roa File: af0059cb-14d9-35f8-aa56-704c2806d4d2.roa (raw, json) Hash identifier: S04ohD5BlsuI8zHrqt3/TkwA+qdvEpdW3Gbpdp4m2V8= Subject key identifier: E2:26:74:5B:71:BF:F2:58:B8:A8:85:02:31:0F:E0:85:94:6B:83:1E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9FDA78884EDD88E004230 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0059cb-14d9-35f8-aa56-704c2806d4d2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 68.86.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:fd:a7:88:84:ed:d8:8e:00:42:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=766b1649-713f-4c0c-a85c-e4efea67a651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:46:df:d5:ed:43:41:43:81:38:33:7c:14: 85:40:c8:d2:f0:28:46:07:ed:8d:81:27:18:aa:a5: 97:74:b4:8d:26:22:84:53:6b:d2:8c:30:e5:28:8d: 46:de:20:1a:72:2d:ff:d9:45:8b:ba:7d:1b:d6:c6: 69:2d:a7:b6:d5:3e:ce:27:c5:bd:15:02:6a:75:30: 09:90:d8:e0:18:ee:da:3b:29:71:4c:44:1e:f5:66: fa:9d:d6:1b:ed:2c:bc:7d:ba:58:ac:18:8b:71:5c: 6f:a1:87:af:20:e8:87:d1:2d:af:36:42:5e:59:18: c4:e2:f9:df:05:44:68:eb:e5:86:db:9a:41:c7:68: 78:02:1b:1b:21:f8:29:cd:83:b7:f9:a8:ed:f1:66: f8:8c:51:de:3f:3b:c6:02:4b:71:d4:fa:db:0f:26: 1d:9e:97:80:18:a3:94:34:5d:d9:2d:0b:a2:44:e7: 29:a8:ec:6c:9d:91:dc:72:6d:a2:2b:bd:05:33:de: 05:1b:cd:89:b9:c8:e3:82:c7:a5:ef:ca:05:65:60: 18:fc:ba:fa:56:a6:7f:03:a0:23:fd:e8:c5:b5:3d: 6f:55:06:f0:c0:92:33:bf:a2:22:c2:f5:d3:28:f9: 69:01:4a:bc:02:c5:b2:45:c1:43:e3:6f:e0:fd:98: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:26:74:5B:71:BF:F2:58:B8:A8:85:02:31:0F:E0:85:94:6B:83:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0059cb-14d9-35f8-aa56-704c2806d4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:eb:d9:9a:9a:e3:05:19:09:43:8b:e9:a4:25:99:35:8a:a7: 2e:7f:ac:b9:aa:65:6d:f8:cd:56:2f:7c:54:0a:e4:6a:b1:73: 78:0f:77:8d:de:b6:ba:9d:f9:0e:0f:fd:bc:cb:1e:cf:65:ee: 64:97:d2:60:69:e3:b2:5a:ab:92:bc:32:c0:22:12:26:bf:64: 3c:9e:1c:50:5a:0c:e6:8b:2a:d0:23:38:7a:27:fe:eb:02:34: d4:0e:87:ba:4b:44:a0:41:23:4a:ba:48:c3:77:97:54:06:f3: 5c:1b:2e:d1:ca:52:82:6e:97:77:35:2b:0d:4e:19:82:a8:88: d1:1b:7f:9a:c3:13:a8:ab:a8:7d:37:01:d7:bc:89:30:59:5a: 01:12:04:f0:59:a5:5d:da:24:ef:1c:05:ce:b5:14:15:02:9d: 60:1e:a4:15:5f:50:05:78:0c:b5:2f:f1:7d:42:df:76:0d:ac: c5:61:be:1d:98:ff:b3:8a:55:d2:92:ab:f1:03:e7:6b:e4:c8: 53:eb:23:e8:50:10:98:b5:39:5f:92:11:f4:34:c4:70:18:8c: 41:48:77:ab:a6:8a:f4:8c:35:c4:f0:4d:8b:bf:71:b2:4f:43: ee:81:c4:5d:50:d2:37:30:22:4c:bf:c6:9c:31:7e:e0:3c:53: 0a:a2:54:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uf2niITt2I4AQjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NzY2YjE2NDktNzEzZi00YzBjLWE4NWMtZTRlZmVhNjdhNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOlG39XtQ0FDgTgzfBSFQMjS8ChGB+2NgScY qqWXdLSNJiKEU2vSjDDlKI1G3iAaci3/2UWLun0b1sZpLae21T7OJ8W9FQJqdTAJ kNjgGO7aOylxTEQe9Wb6ndYb7Sy8fbpYrBiLcVxvoYevIOiH0S2vNkJeWRjE4vnf BURo6+WG25pBx2h4AhsbIfgpzYO3+ajt8Wb4jFHePzvGAktx1PrbDyYdnpeAGKOU NF3ZLQuiROcpqOxsnZHccm2iK70FM94FG82Jucjjgsel78oFZWAY/Lr6VqZ/A6Aj /ejFtT1vVQbwwJIzv6IiwvXTKPlpAUq8AsWyRcFD42/g/ZhVmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOImdFtxv/JYuKiFAjEP4IWUa4MeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWYwMDU5Y2ItMTRkOS0z NWY4LWFhNTYtNzA0YzI4MDZkNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzr2Zqa4wUZCUOL6aQlmTWKpy5/rLmqZW34zVYvfFQK5Gqxc3gPd43e trqd+Q4P/bzLHs9l7mSX0mBp47Jaq5K8MsAiEia/ZDyeHFBaDOaLKtAjOHon/usC NNQOh7pLRKBBI0q6SMN3l1QG81wbLtHKUoJul3c1Kw1OGYKoiNEbf5rDE6irqH03 Ade8iTBZWgESBPBZpV3aJO8cBc61FBUCnWAepBVfUAV4DLUv8X1C33YNrMVhvh2Y /7OKVdKSq/ED52vkyFPrI+hQEJi1OV+SEfQ0xHAYjEFId6umivSMNcTwTYu/cbJP Q+6BxF1Q0jcwIky/xpwxfuA8UwqiVPk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:12:17 2025 by rpki-client