$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c23c4a08-1499-31cb-8779-beb4facfd1b7.roa File: c23c4a08-1499-31cb-8779-beb4facfd1b7.roa (raw, json) Hash identifier: 4He/nb7x3jbfU14Ouo0JmsrsORVqqIul3GV4QcNJKHI= Subject key identifier: CA:94:F7:53:AC:B3:71:BF:3E:4E:9D:CC:F2:D6:07:D5:B3:24:7D:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB82BDAB063B10F8C17B500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c23c4a08-1499-31cb-8779-beb4facfd1b7.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.86.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:2b:da:b0:63:b1:0f:8c:17:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=70dbe0f9-34bf-44a3-bef5-f389c59247c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:87:90:b6:8d:34:f5:a5:ad:3e:4f:46:ac: a2:e5:51:63:50:61:2c:f0:31:0b:3e:ab:c7:2a:90: c4:c9:0e:6c:ff:9f:85:47:e6:62:6b:bc:51:66:5b: 28:10:9e:e9:b1:c5:d3:9d:0f:cd:50:e5:58:1c:af: 7c:9f:f0:78:09:cd:94:ad:a9:50:8a:9e:f3:a1:4c: a3:a9:39:d6:c4:ec:f9:aa:e5:ec:c9:7b:86:ae:cc: ca:46:f0:37:13:2a:d7:15:cc:d2:38:91:5a:85:91: 2e:b2:73:8e:5a:6f:8c:77:2f:63:f7:35:d8:69:93: ab:cc:28:39:48:ea:80:d0:60:ed:f8:9e:89:05:35: 66:61:3c:d5:f0:46:83:83:b6:4a:62:5e:50:2b:13: ee:d4:a3:2d:82:f2:cd:95:9a:fd:78:50:92:7e:bd: ca:1a:e5:7a:5c:2d:69:4b:0d:90:39:4b:26:98:7a: f4:d0:2a:d6:60:1d:b9:16:13:47:10:67:bc:75:ea: 01:90:34:7c:ba:a9:e0:3c:58:48:64:21:bd:2b:33: ec:85:c0:9e:5c:a3:0e:a9:7e:47:ea:45:db:db:ed: d4:59:90:47:12:25:b0:e2:36:7c:ba:57:93:fd:c4: 56:57:85:84:2d:35:58:3e:36:18:53:e3:ac:b9:22: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:94:F7:53:AC:B3:71:BF:3E:4E:9D:CC:F2:D6:07:D5:B3:24:7D:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c23c4a08-1499-31cb-8779-beb4facfd1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:14:3a:38:03:f1:3d:2a:28:a2:34:6a:a6:8c:c8:9a:e6:08: 6c:26:d1:1c:cc:1f:50:71:b8:71:74:12:dd:43:68:80:ba:d8: 92:08:40:54:c9:61:81:e9:72:b9:b8:52:52:eb:25:4c:0a:24: 66:c1:2c:2b:30:8b:fd:6b:89:98:15:92:de:e3:9c:2b:2c:62: 5c:cc:8b:c9:79:06:f0:8a:b2:f7:c4:ec:e3:2b:0f:87:8e:00: e6:04:d8:62:8f:13:66:54:d2:4b:85:9e:49:61:e1:47:78:85: cf:96:fb:2d:6a:d2:d1:ef:6f:1c:d8:9c:0c:c1:1e:4f:d6:a8: 81:8b:bb:4f:6f:3c:70:0d:c6:4f:7a:16:86:59:7f:23:a0:fc: b2:ef:71:ab:ee:76:4d:7f:d4:d5:dd:e3:c0:78:be:ff:8a:cf: 9c:cc:db:cd:11:c2:69:d9:15:29:5a:47:69:e8:22:79:97:aa: 92:f2:9c:17:50:bb:0b:a1:a3:68:4a:7b:f7:95:ee:d0:46:07: da:42:72:66:06:66:05:a2:82:7d:bf:d0:41:b6:f4:d5:b3:54: 2f:bf:8f:70:1b:c5:94:a4:a8:2e:d9:8d:95:c1:d6:e5:2e:5f: fd:32:d8:cf:48:a4:0d:cb:61:14:12:97:dc:15:3b:02:51:4e: f0:46:2e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uCvasGOxD4wXtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NzBkYmUwZjktMzRiZi00NGEzLWJlZjUtZjM4OWM1OTI0N2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGqHkLaNNPWlrT5PRqyi5VFjUGEs8DELPqvH KpDEyQ5s/5+FR+Zia7xRZlsoEJ7pscXTnQ/NUOVYHK98n/B4Cc2UralQip7zoUyj qTnWxOz5quXsyXuGrszKRvA3EyrXFczSOJFahZEusnOOWm+Mdy9j9zXYaZOrzCg5 SOqA0GDt+J6JBTVmYTzV8EaDg7ZKYl5QKxPu1KMtgvLNlZr9eFCSfr3KGuV6XC1p Sw2QOUsmmHr00CrWYB25FhNHEGe8deoBkDR8uqngPFhIZCG9KzPshcCeXKMOqX5H 6kXb2+3UWZBHEiWw4jZ8uleT/cRWV4WELTVYPjYYU+OsuSKd6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqU91Oss3G/Pk6dzPLWB9WzJH0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzIzYzRhMDgtMTQ5OS0z MWNiLTg3NzktYmViNGZhY2ZkMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkUOjgD8T0qKKI0aqaMyJrmCGwm0RzMH1BxuHF0Et1DaIC62JIIQFTJ YYHpcrm4UlLrJUwKJGbBLCswi/1riZgVkt7jnCssYlzMi8l5BvCKsvfE7OMrD4eO AOYE2GKPE2ZU0kuFnklh4Ud4hc+W+y1q0tHvbxzYnAzBHk/WqIGLu09vPHANxk96 FoZZfyOg/LLvcavudk1/1NXd48B4vv+Kz5zM280RwmnZFSlaR2noInmXqpLynBdQ uwuho2hKe/eV7tBGB9pCcmYGZgWign2/0EG29NWzVC+/j3AbxZSkqC7ZjZXB1uUu X/0y2M9IpA3LYRQSl9wVOwJRTvBGLvw= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:22 2025 by rpki-client