$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc620ae6-22e7-3e5e-9325-398df6447949.roa File: bc620ae6-22e7-3e5e-9325-398df6447949.roa (raw, json) Hash identifier: qr+mrTTbl67FloiKyP4lK6y5yPPBx7edFlcPvRdIGjk= Subject key identifier: AF:AF:5C:58:EA:A1:02:97:13:6E:49:D8:0B:CD:60:D1:B2:08:57:12 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A769EC591769F340983080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc620ae6-22e7-3e5e-9325-398df6447949.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 68.60.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:69:ec:59:17:69:f3:40:98:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=ae790482-d808-4b2d-be59-472973b6f31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:ad:8c:f5:22:03:01:12:7c:93:7e:c3:ef: 86:86:4d:a2:f2:e9:8b:e7:69:35:73:11:36:a7:b2: f6:9e:73:1e:07:cc:f8:09:56:2c:6b:1b:1f:5f:c1: bf:02:89:85:d0:d9:a9:62:81:35:04:73:59:30:74: e2:a5:62:d9:19:a5:0d:d7:53:3b:57:98:9f:6f:d9: ba:8f:cf:5a:b0:82:64:92:4b:0d:ae:40:45:6d:13: 7a:3b:11:6e:6b:cb:10:d0:6b:e7:1f:39:4d:a7:5b: 7a:32:d9:78:86:49:bc:5f:e1:46:70:88:36:05:0e: d3:63:b1:98:ae:d6:2d:e0:8a:2d:6f:45:d2:52:57: 0f:af:83:21:f2:86:ca:2a:c1:5d:54:09:b8:17:a9: 2c:73:63:25:56:a7:c2:4f:77:fc:52:0c:bc:d3:6c: 65:26:57:98:29:11:d8:d2:50:ba:82:cd:45:8f:9a: 37:ea:92:75:e1:3d:89:72:a7:bf:b8:e4:c4:73:3c: 09:a5:8c:85:08:ed:c8:c3:be:f9:a6:d8:06:47:17: 29:bc:56:28:96:84:0f:df:30:b0:a8:c1:67:45:07: e6:12:01:94:e8:f6:0a:3a:9d:8e:74:ff:bf:f8:48: 9b:6e:dd:4d:56:b0:76:ca:88:2e:65:43:79:2a:f8: 30:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AF:5C:58:EA:A1:02:97:13:6E:49:D8:0B:CD:60:D1:B2:08:57:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc620ae6-22e7-3e5e-9325-398df6447949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:af:9f:a5:cb:a2:3e:45:cf:69:05:ad:7f:c7:97:c8:1f:29: da:8c:6e:39:6b:1c:b8:59:09:6f:68:c7:b1:b0:5d:31:e9:f1: 12:99:4c:2a:81:92:84:70:74:e6:81:5b:3c:99:e8:3e:a8:1d: fd:a2:e1:34:56:54:c5:6b:ef:20:ad:d9:cb:76:b4:ff:ed:9e: 69:13:95:7c:16:10:7f:40:3d:c5:22:8e:20:c6:81:5f:70:29: 4a:9e:5d:b2:41:ab:f4:40:21:79:db:a5:00:6f:19:ae:de:e5: 8e:da:7f:14:9e:c7:52:32:76:f9:e6:12:41:62:4e:54:ab:e1: 67:cd:2b:49:fc:8d:b2:a1:f7:74:e1:30:ca:7f:fc:d0:79:48: 8b:f2:53:24:a2:a6:26:d4:89:5a:26:3a:14:19:41:af:77:0a: ba:03:6e:75:9f:2c:0d:44:64:b0:38:fa:91:5b:e9:3a:88:f2: d0:2b:77:bb:19:0c:82:1b:58:33:cb:be:65:92:dd:ae:d2:f5: ad:a1:cd:89:f2:42:62:a0:be:b1:9f:8d:b2:34:0b:77:54:09: 24:0e:11:84:2f:53:7a:98:6c:73:cf:1d:4d:72:12:0a:94:09: 1a:08:83:b0:62:a2:85:95:99:ff:c2:ac:74:1f:ae:dd:45:4b: 13:3e:1e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2nsWRdp80CYMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YWU3OTA0ODItZDgwOC00YjJkLWJlNTktNDcyOTczYjZmMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyitjPUiAwESfJN+w++Ghk2i8umL52k1cxE2 p7L2nnMeB8z4CVYsaxsfX8G/AomF0NmpYoE1BHNZMHTipWLZGaUN11M7V5ifb9m6 j89asIJkkksNrkBFbRN6OxFua8sQ0GvnHzlNp1t6Mtl4hkm8X+FGcIg2BQ7TY7GY rtYt4Iotb0XSUlcPr4Mh8obKKsFdVAm4F6ksc2MlVqfCT3f8Ugy802xlJleYKRHY 0lC6gs1Fj5o36pJ14T2Jcqe/uOTEczwJpYyFCO3Iw775ptgGRxcpvFYoloQP3zCw qMFnRQfmEgGU6PYKOp2OdP+/+Eibbt1NVrB2yoguZUN5KvgwbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+vXFjqoQKXE25J2AvNYNGyCFcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmM2MjBhZTYtMjJlNy0z ZTVlLTkzMjUtMzk4ZGY2NDQ3OTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDzsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOvn6XLoj5Fz2kFrX/Hl8gfKdqMbjlrHLhZCW9ox7GwXTHp8RKZTCqB koRwdOaBWzyZ6D6oHf2i4TRWVMVr7yCt2ct2tP/tnmkTlXwWEH9APcUijiDGgV9w KUqeXbJBq/RAIXnbpQBvGa7e5Y7afxSex1IydvnmEkFiTlSr4WfNK0n8jbKh93Th MMp//NB5SIvyUySipibUiVomOhQZQa93CroDbnWfLA1EZLA4+pFb6TqI8tArd7sZ DIIbWDPLvmWS3a7S9a2hzYnyQmKgvrGfjbI0C3dUCSQOEYQvU3qYbHPPHU1yEgqU CRoIg7BiooWVmf/CrHQfrt1FSxM+HoQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:43:07 2025 by rpki-client