$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa File: bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa (raw, json) Hash identifier: T0efSyCBJaUFgvzzqRD0Vbdzx5fFoSknHMViYzMWl+s= Subject key identifier: CA:B3:9D:F6:E2:82:9E:8B:AB:D6:38:B3:DD:47:26:77:5C:E7:35:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9C64A4D8559648B2FBBA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.84.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:c6:4a:4d:85:59:64:8b:2f:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=b18c1298-e38a-4f73-8528-60b8d0c3ba55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:45:83:0a:03:f8:dd:90:bd:7c:41:5c:74:bb: 2f:1c:b2:d1:8d:a9:a2:3c:8e:2e:15:f2:28:87:36: 52:bc:e8:6f:e7:37:4e:3e:fc:56:68:19:03:4f:11: 06:56:b4:97:83:6c:38:96:42:e2:e1:1d:c3:11:68: 41:c9:4c:b9:a6:fb:ad:f3:46:cf:f6:4b:33:38:c7: 0a:35:a1:fa:d2:ce:c9:b2:5c:f7:1b:a5:3e:1c:c5: be:90:ec:90:03:44:18:99:9b:f5:6c:0f:e1:ad:60: 2f:4f:17:e2:17:1a:cf:59:45:77:fc:37:63:0b:5b: 35:1c:dc:32:4a:ab:07:8e:1a:e9:69:fa:38:11:26: 10:fc:31:c1:78:1c:36:2f:79:5c:d7:d7:07:38:b9: dc:64:00:ff:ae:ce:5d:0a:cb:e2:35:32:fe:fa:36: 12:4d:e5:1a:e0:60:4e:97:b0:67:5a:13:37:3d:35: f6:58:d7:a8:fc:2f:77:8b:a7:2f:37:4b:86:a5:67: f4:66:b3:e3:94:e4:99:72:83:51:9d:3f:27:7d:95: 88:8e:65:b1:dc:b1:18:32:f8:ad:1e:9b:3e:1f:7d: 70:65:98:41:29:c0:76:fc:35:8e:07:c4:e4:f9:93: c1:bd:c0:53:d6:9a:9a:03:a3:31:ee:87:7d:b6:eb: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B3:9D:F6:E2:82:9E:8B:AB:D6:38:B3:DD:47:26:77:5C:E7:35:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fa:c8:c3:8c:a5:11:f2:31:4e:62:ea:b6:a7:ac:ad:60:10: ba:b3:43:d1:70:be:84:06:bc:d1:54:2e:40:79:f7:50:d8:c2: 79:93:5d:ab:74:3c:29:95:56:71:11:e1:90:f0:3e:be:73:66: ee:ff:5b:2c:aa:60:e4:6f:bc:8f:09:f6:da:34:14:35:63:e3: 84:30:90:51:b8:30:77:e7:7a:a6:ea:91:70:77:40:e3:c4:91: 4a:ba:59:61:16:4b:1a:19:3d:6d:e6:37:48:81:02:76:28:0a: 9e:4c:d9:84:fd:73:cf:43:fc:92:96:a1:d5:4a:3d:dd:68:b5: a5:9e:7a:37:75:29:55:52:52:a0:09:55:13:d9:cd:b9:c0:88: 7a:34:74:cf:e7:4e:68:47:11:8d:83:df:a5:73:dd:d5:10:7b: fa:70:7f:a5:4c:f7:d9:de:c1:f5:1e:9a:59:d4:06:2a:3b:bf: cf:ba:9f:a2:16:36:9f:24:e5:20:90:e8:d3:e5:d1:27:cb:32: ff:ee:e8:09:3e:15:ef:9b:8f:83:e3:ff:c3:59:f1:83:18:ae: b9:ac:37:c0:a4:15:9c:1f:0e:5b:b1:5c:5d:b3:f7:53:34:10: b5:2a:80:41:94:03:e8:93:0b:6c:66:ba:82:f0:49:80:17:e4: c5:71:11:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ucZKTYVZZIsvu6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YjE4YzEyOTgtZTM4YS00ZjczLTg1MjgtNjBiOGQwYzNiYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkWDCgP43ZC9fEFcdLsvHLLRjamiPI4uFfIo hzZSvOhv5zdOPvxWaBkDTxEGVrSXg2w4lkLi4R3DEWhByUy5pvut80bP9kszOMcK NaH60s7Jslz3G6U+HMW+kOyQA0QYmZv1bA/hrWAvTxfiFxrPWUV3/DdjC1s1HNwy SqsHjhrpafo4ESYQ/DHBeBw2L3lc19cHOLncZAD/rs5dCsviNTL++jYSTeUa4GBO l7BnWhM3PTX2WNeo/C93i6cvN0uGpWf0ZrPjlOSZcoNRnT8nfZWIjmWx3LEYMvit Hps+H31wZZhBKcB2/DWOB8Tk+ZPBvcBT1pqaA6Mx7od9tuvoHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqznfbigp6Lq9Y4s91HJndc5zXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZjZThlZTktMDNhMy0z ZjdlLWE3NWItN2M4ZjNjODI0MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERFTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX6yMOMpRHyMU5i6ranrK1gELqzQ9FwvoQGvNFULkB591DYwnmTXat0 PCmVVnER4ZDwPr5zZu7/WyyqYORvvI8J9to0FDVj44QwkFG4MHfneqbqkXB3QOPE kUq6WWEWSxoZPW3mN0iBAnYoCp5M2YT9c89D/JKWodVKPd1otaWeejd1KVVSUqAJ VRPZzbnAiHo0dM/nTmhHEY2D36Vz3dUQe/pwf6VM99newfUemlnUBio7v8+6n6IW Np8k5SCQ6NPl0SfLMv/u6Ak+Fe+bj4Pj/8NZ8YMYrrmsN8CkFZwfDluxXF2z91M0 ELUqgEGUA+iTC2xmuoLwSYAX5MVxEbs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:54 2025 by rpki-client