$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa File: cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa (raw, json) Hash identifier: HrYZEpmDqCWmvaoWpcHZP7DK1TWmR0t2vXaaulp/6Ag= Subject key identifier: 8D:2E:BB:70:19:A5:9E:7F:08:EB:0D:44:A0:6B:1D:4E:FA:6C:FA:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB91E466052D7E06D5F38A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33489 IP address blocks: 68.85.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:1e:46:60:52:d7:e0:6d:5f:38:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=99383ac9-b5b4-4387-b006-6f98b14c9c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:3d:b2:bb:29:d4:26:23:fb:9b:43:b6:b7: 29:19:5a:6e:27:c8:76:5c:f4:32:f1:ba:14:89:77: 42:4b:6b:db:dc:33:64:9e:14:68:4e:c7:b4:00:c2: 52:cf:cf:93:bd:4e:32:ee:b4:25:b3:3a:77:23:3c: e9:2d:b9:4a:b1:c2:e8:62:28:9c:b5:40:b1:33:ec: 54:2c:26:f0:9c:53:fc:8d:e8:3a:a7:83:d9:6c:ad: 24:dd:6c:bc:97:f4:1f:ea:4f:94:43:d2:af:7c:71: 80:92:2a:23:91:ee:ee:f9:16:e4:14:f7:7d:69:57: d4:dc:0a:40:e6:f5:b1:d9:5e:b4:ec:f4:b3:75:70: 3f:56:36:a8:3f:ed:1a:0b:84:e1:62:21:14:3a:14: 03:0c:0e:f8:49:35:91:4b:5a:90:71:fc:b9:f4:27: 95:5a:7e:ce:50:54:22:ae:a9:7e:07:0d:8b:f7:2f: 73:81:67:1b:38:c7:5c:59:da:bc:31:bd:17:4f:2c: 8a:fb:84:e5:2a:c0:5f:1c:92:56:9a:55:10:f3:d1: ab:30:15:29:7a:08:59:64:5e:c6:d5:05:83:c9:12: d1:c7:f0:8e:6f:1a:bf:d2:2e:52:d5:e9:2d:53:50: d0:db:db:e5:7b:eb:64:86:c0:da:1b:13:3c:68:f8: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2E:BB:70:19:A5:9E:7F:08:EB:0D:44:A0:6B:1D:4E:FA:6C:FA:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd8a59b6-d619-3c4c-a3d0-0a27dbb1f862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:99:b6:3e:1e:82:07:ff:10:5d:ab:b1:ac:0f:c8:cb:70:c0: c2:57:5a:40:ba:7c:fc:8d:e0:5f:49:74:20:69:79:40:cc:31: 2f:4b:50:a0:7c:36:66:71:53:6b:b3:f9:c3:34:87:83:8d:71: c1:fa:76:fc:db:6a:65:18:29:68:80:4d:61:b9:87:67:90:20: c9:5e:22:1f:d6:db:68:4e:9f:6e:b0:05:18:9b:7f:77:d2:f5: f1:d1:56:11:e3:e1:63:7f:2e:7c:60:06:32:87:28:9d:6b:34: f2:d7:8a:10:18:f7:94:27:28:e4:65:01:fb:c8:26:78:d5:30: c6:80:46:85:d7:da:dd:dc:50:40:42:f9:23:77:64:44:d9:3e: d9:63:f1:22:1e:cc:8d:0f:de:4e:01:d1:c0:7a:b6:71:d5:c2: 0a:ef:f4:de:bb:4e:3c:ea:20:a3:80:77:12:29:e6:40:77:a1: ec:94:6d:f1:a2:97:95:36:9a:2d:5d:9e:bc:6e:28:19:70:d8: 75:0a:d6:08:b9:5c:7e:7b:35:1a:80:3c:4a:72:dc:1c:06:18: 15:72:11:8b:1c:04:e7:40:a6:2d:53:2c:a3:73:4e:70:20:5d: 19:a4:6e:30:78:f8:c0:a2:b4:a4:ec:e4:40:04:93:ca:38:90: 67:21:bf:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uR5GYFLX4G1fOKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTkzODNhYzktYjViNC00Mzg3LWIwMDYtNmY5OGIxNGM5YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNk9srsp1CYj+5tDtrcpGVpuJ8h2XPQy8boU iXdCS2vb3DNknhRoTse0AMJSz8+TvU4y7rQlszp3IzzpLblKscLoYiictUCxM+xU LCbwnFP8jeg6p4PZbK0k3Wy8l/Qf6k+UQ9KvfHGAkiojke7u+RbkFPd9aVfU3ApA 5vWx2V607PSzdXA/VjaoP+0aC4ThYiEUOhQDDA74STWRS1qQcfy59CeVWn7OUFQi rql+Bw2L9y9zgWcbOMdcWdq8Mb0XTyyK+4TlKsBfHJJWmlUQ89GrMBUpeghZZF7G 1QWDyRLRx/CObxq/0i5S1ektU1DQ29vle+tkhsDaGxM8aPhcJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0uu3AZpZ5/COsNRKBrHU76bPpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Q4YTU5YjYtZDYxOS0z YzRjLWEzZDAtMGEyN2RiYjFmODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASZtj4eggf/EF2rsawPyMtwwMJXWkC6fPyN4F9JdCBpeUDMMS9LUKB8 NmZxU2uz+cM0h4ONccH6dvzbamUYKWiATWG5h2eQIMleIh/W22hOn26wBRibf3fS 9fHRVhHj4WN/LnxgBjKHKJ1rNPLXihAY95QnKORlAfvIJnjVMMaARoXX2t3cUEBC +SN3ZETZPtlj8SIezI0P3k4B0cB6tnHVwgrv9N67TjzqIKOAdxIp5kB3oeyUbfGi l5U2mi1dnrxuKBlw2HUK1gi5XH57NRqAPEpy3BwGGBVyEYscBOdApi1TLKNzTnAg XRmkbjB4+MCitKTs5EAEk8o4kGchv6A= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:52 2025 by rpki-client