$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf3c6cd9-e82e-34dd-b6fd-5c0f9be99ca1.roa File: bf3c6cd9-e82e-34dd-b6fd-5c0f9be99ca1.roa (raw, json) Hash identifier: jIPg7Ml7NEZaQq+MG1hnuy+se9g2y13i/iiIT1qV7Uw= Subject key identifier: 3A:9E:63:D8:4B:CF:11:43:6D:74:AC:50:E1:0D:03:D5:2F:D7:8B:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB70EE2817ADC152FFD2B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf3c6cd9-e82e-34dd-b6fd-5c0f9be99ca1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.47.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:0e:e2:81:7a:dc:15:2f:fd:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d84effc5-cce1-4611-a80d-b923017febf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:a5:06:14:37:03:d5:7d:f3:4e:e1:3d:c5: b1:83:ad:d6:a6:4d:8e:1d:47:14:b3:e5:af:40:d2: 30:12:89:43:fb:fa:b2:99:7e:af:37:45:11:6b:ca: 87:1f:66:72:8b:bc:df:e0:42:6a:f1:74:89:e8:eb: 80:21:26:66:8c:bd:fd:f4:e7:9c:7a:03:27:05:6b: 08:a2:59:9f:c1:4e:52:7b:bf:5e:ac:93:1d:59:4a: 41:fb:cb:07:62:b0:53:4c:29:3a:4f:f4:66:48:3a: 66:be:b5:5e:32:83:08:4c:00:5d:b3:da:59:2a:c3: 24:6d:e6:d2:1c:73:ec:25:84:f0:9d:45:42:4d:27: 0a:8b:dc:6a:06:30:cd:23:05:e9:b7:59:1c:2f:68: 76:94:04:6c:d7:f6:37:97:d6:a0:b0:eb:0e:8a:fd: e3:16:c2:ec:ba:08:84:9b:bc:26:50:af:7b:e5:6e: 87:4a:4e:11:bf:11:35:fa:ba:79:e9:a9:e2:ba:e5: 24:04:f1:e1:8f:1c:85:77:f3:34:14:99:8c:14:7c: 65:e0:1c:bc:88:67:32:f9:af:63:4b:7b:7d:a5:5c: 5f:c8:7a:96:63:5a:45:5d:51:50:48:9b:79:09:cc: 05:09:38:6e:a1:4c:f1:fa:95:0a:96:a5:16:4a:a4: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9E:63:D8:4B:CF:11:43:6D:74:AC:50:E1:0D:03:D5:2F:D7:8B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf3c6cd9-e82e-34dd-b6fd-5c0f9be99ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:87:02:aa:d6:5b:c2:1a:e6:d2:c8:41:bf:2d:e0:b3:68:23: 77:ba:b0:36:d8:25:6e:ee:a4:fd:c1:bb:52:5c:90:d5:69:d2: 74:a0:7f:44:35:f7:ee:27:9c:d7:20:73:41:74:33:78:d5:5d: 9e:23:e2:5c:68:1d:57:8f:23:e5:95:dd:af:b7:6e:3e:81:fe: a0:4b:bb:26:8f:fb:10:38:e8:12:e6:f6:4c:2b:2d:1d:63:c3: b4:99:a4:5b:f0:c9:7b:c5:d0:74:d8:33:ab:59:4e:c1:8b:02: 3e:51:5c:59:71:ef:cd:e8:5c:f4:4d:b6:65:07:31:a7:1c:ea: 91:be:ca:00:0a:e0:ab:5e:88:84:bf:1d:f3:f0:de:4d:3a:53: 25:31:2f:f6:57:4a:ec:4f:93:e3:aa:7d:b7:bc:8f:7d:b7:ef: 3c:42:b1:99:dd:82:07:6e:28:8c:21:5d:19:30:67:b7:4c:9c: de:85:04:12:71:52:95:1a:41:05:08:19:54:c4:53:d1:29:50: f0:38:f4:31:35:a8:53:1a:d2:c7:d4:ba:31:3c:a7:39:a7:19: 63:72:fe:b0:53:d5:dc:a3:b9:29:19:45:a6:52:e0:43:06:54: 61:ce:1b:63:f0:6e:36:20:17:b9:60:b5:7e:5c:6f:f0:ed:15: f3:0c:76:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tw7igXrcFS/9KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDg0ZWZmYzUtY2NlMS00NjExLWE4MGQtYjkyMzAxN2ZlYmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHmlBhQ3A9V9807hPcWxg63Wpk2OHUcUs+Wv QNIwEolD+/qymX6vN0URa8qHH2Zyi7zf4EJq8XSJ6OuAISZmjL399OecegMnBWsI olmfwU5Se79erJMdWUpB+8sHYrBTTCk6T/RmSDpmvrVeMoMITABds9pZKsMkbebS HHPsJYTwnUVCTScKi9xqBjDNIwXpt1kcL2h2lARs1/Y3l9agsOsOiv3jFsLsugiE m7wmUK975W6HSk4RvxE1+rp56aniuuUkBPHhjxyFd/M0FJmMFHxl4By8iGcy+a9j S3t9pVxfyHqWY1pFXVFQSJt5CcwFCThuoUzx+pUKlqUWSqSHDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqeY9hLzxFDbXSsUOENA9Uv14vDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYzYzZjZDktZTgyZS0z NGRkLWI2ZmQtNWMwZjliZTk5Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARC+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeHAqrWW8Ia5tLIQb8t4LNoI3e6sDbYJW7upP3Bu1JckNVp0nSgf0Q1 9+4nnNcgc0F0M3jVXZ4j4lxoHVePI+WV3a+3bj6B/qBLuyaP+xA46BLm9kwrLR1j w7SZpFvwyXvF0HTYM6tZTsGLAj5RXFlx783oXPRNtmUHMacc6pG+ygAK4KteiIS/ HfPw3k06UyUxL/ZXSuxPk+Oqfbe8j3237zxCsZndggduKIwhXRkwZ7dMnN6FBBJx UpUaQQUIGVTEU9EpUPA49DE1qFMa0sfUujE8pzmnGWNy/rBT1dyjuSkZRaZS4EMG VGHOG2PwbjYgF7lgtX5cb/DtFfMMdmA= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:00 2025 by rpki-client