$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4322ec2-0d7e-3aeb-99b2-43ef70e9b102.roa File: b4322ec2-0d7e-3aeb-99b2-43ef70e9b102.roa (raw, json) Hash identifier: 2Qj5tz10fY6u1uzxCxt7e1a95HNzzHVNxvhXeGSCwM0= Subject key identifier: 20:FA:1E:11:35:28:08:82:3F:EA:BB:91:A6:FC:D7:BE:B6:6F:30:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB70EABBAE6C218148BBE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4322ec2-0d7e-3aeb-99b2-43ef70e9b102.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.47.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:0e:ab:ba:e6:c2:18:14:8b:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d351babe-bd9d-4ed3-8bae-66de0b700e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:54:28:e2:0b:ea:d9:00:08:fa:b7:60:67: 77:51:0b:f2:b9:93:b3:71:b3:75:f6:b5:af:1c:8c: a2:43:90:c5:1a:05:f9:61:c9:59:6e:68:fb:fe:c1: 63:f5:cd:14:92:a2:da:c6:f7:80:64:1c:4f:f8:23: ad:50:c8:1f:88:ba:ad:9a:6f:e4:e7:6a:b6:1e:08: 5b:5a:ff:ea:e4:59:e4:af:52:69:5c:63:36:02:fe: 0c:d5:73:cb:e5:44:67:81:74:6a:05:bb:27:1c:eb: 33:01:74:8d:ed:42:96:73:52:4b:26:01:74:15:32: a7:73:c5:7a:d9:d7:c9:62:50:37:8c:de:7a:b8:9b: 9e:0d:a3:33:ab:7c:5e:bd:05:cb:fe:50:bb:fe:76: 44:4e:a1:75:cf:9e:f4:17:30:bf:c6:f5:73:d1:da: 8e:ab:26:b2:28:6e:cb:a6:34:ce:34:0f:23:2c:50: 1c:21:34:fb:4d:66:82:1d:61:f1:ac:b9:51:0f:db: 16:7d:0e:af:64:f3:68:ed:54:55:ff:bc:96:fe:d5: 81:ca:02:fe:e2:d5:3d:a9:74:36:48:3a:52:63:07: fe:e4:ea:84:8d:3e:cf:b0:2a:b0:a4:ff:92:6c:3d: 20:ad:19:49:5c:4b:a3:a7:23:58:0e:2c:51:01:cd: d6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FA:1E:11:35:28:08:82:3F:EA:BB:91:A6:FC:D7:BE:B6:6F:30:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4322ec2-0d7e-3aeb-99b2-43ef70e9b102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4b:bb:1b:60:bd:b4:81:08:1d:65:d4:29:22:87:23:85:54: e7:3b:16:26:77:8e:1a:0a:48:d7:ae:61:0b:d3:c6:18:14:fa: e3:eb:4c:d9:ca:1b:69:14:2e:b9:6b:cd:2e:cd:e1:7e:c0:16: 2e:db:12:72:f0:87:df:ec:85:45:66:e4:5f:f7:72:47:1b:9b: 55:5a:87:03:48:b5:f7:35:98:d5:80:c2:f8:e0:44:14:d8:22: 8f:6a:d2:ae:5d:41:9e:e0:eb:8a:3b:b5:e5:7d:ec:b3:d3:6d: e7:bf:08:a7:ab:86:5c:14:3f:1e:32:c6:8b:e0:fc:09:77:ba: c4:7f:a5:1b:47:70:e4:d6:1a:8a:a9:39:26:7a:d0:b1:59:21: 57:26:f9:59:70:72:6b:a5:5a:32:b9:3a:b0:b0:42:d0:28:be: 08:6e:52:bc:24:a5:72:7f:25:8b:6c:df:0b:ca:32:40:da:5a: 4e:dd:01:1f:d8:db:7c:61:92:52:65:79:44:d1:92:5a:92:33: 87:09:7a:2c:4a:a4:ff:b2:63:da:af:b8:f6:69:1d:3a:ee:56: 30:ef:83:ec:14:c5:2a:70:d7:f8:a3:cf:ff:5a:ed:96:6d:aa: f8:9f:e4:1d:ec:36:6d:e2:4d:0c:c4:86:43:67:55:2a:c7:00: a9:e5:62:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tw6ruubCGBSLvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDM1MWJhYmUtYmQ5ZC00ZWQzLThiYWUtNjZkZTBiNzAwZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEVUKOIL6tkACPq3YGd3UQvyuZOzcbN19rWv HIyiQ5DFGgX5YclZbmj7/sFj9c0UkqLaxveAZBxP+COtUMgfiLqtmm/k52q2Hghb Wv/q5Fnkr1JpXGM2Av4M1XPL5URngXRqBbsnHOszAXSN7UKWc1JLJgF0FTKnc8V6 2dfJYlA3jN56uJueDaMzq3xevQXL/lC7/nZETqF1z570FzC/xvVz0dqOqyayKG7L pjTONA8jLFAcITT7TWaCHWHxrLlRD9sWfQ6vZPNo7VRV/7yW/tWBygL+4tU9qXQ2 SDpSYwf+5OqEjT7PsCqwpP+SbD0grRlJXEujpyNYDixRAc3WwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD6HhE1KAiCP+q7kab81762bzDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjQzMjJlYzItMGQ3ZS0z YWViLTk5YjItNDNlZjcwZTliMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARC+lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZLuxtgvbSBCB1l1CkihyOFVOc7FiZ3jhoKSNeuYQvTxhgU+uPrTNnK G2kULrlrzS7N4X7AFi7bEnLwh9/shUVm5F/3ckcbm1VahwNItfc1mNWAwvjgRBTY Io9q0q5dQZ7g64o7teV97LPTbee/CKerhlwUPx4yxovg/Al3usR/pRtHcOTWGoqp OSZ60LFZIVcm+VlwcmulWjK5OrCwQtAovghuUrwkpXJ/JYts3wvKMkDaWk7dAR/Y 23xhklJleUTRklqSM4cJeixKpP+yY9qvuPZpHTruVjDvg+wUxSpw1/ijz/9a7ZZt qvif5B3sNm3iTQzEhkNnVSrHAKnlYsc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:09 2025 by rpki-client