$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1ca871c-be97-3b26-a845-b75529c17fa5.roa File: d1ca871c-be97-3b26-a845-b75529c17fa5.roa (raw, json) Hash identifier: YLIov8YwyvIqPOq+8wrg4B8/nCoBH11nrYABM/ZFFlM= Subject key identifier: D7:27:34:08:65:E0:05:2B:60:62:18:7A:B8:C1:38:1E:07:E6:13:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9C684E12045490F576200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1ca871c-be97-3b26-a845-b75529c17fa5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.86.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:c6:84:e1:20:45:49:0f:57:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=85ed251d-fd07-4b0f-aaae-566a10f45829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ea:40:44:51:1c:ef:67:76:5d:07:b2:01:65: a9:01:4d:f0:b1:91:81:25:3a:d2:9b:62:e7:ac:8c: 55:4b:fe:63:a5:e9:a8:47:41:fc:c5:42:b9:2f:9d: 4b:92:2c:56:04:88:6c:ae:80:20:b0:04:ea:40:d0: 76:2a:df:a4:62:56:6a:14:5f:0c:07:73:61:57:02: d1:81:dd:cd:6a:8b:93:5d:10:06:53:22:c3:3e:d7: 3b:18:ef:44:46:e4:1b:df:18:46:3b:c0:d7:c6:6f: 63:3f:37:a7:22:01:fd:34:50:00:bc:20:ff:90:5a: 41:81:8b:c7:55:2b:fd:04:90:d0:54:10:9f:a8:eb: 5d:b7:b8:ce:c0:a4:a1:64:3c:7b:f6:73:f1:41:fe: 83:5c:5c:c0:51:23:81:e4:d3:fa:95:9c:76:c3:a8: 49:f9:96:21:a0:8b:71:fe:00:6d:4b:68:f2:11:1b: b1:fa:74:9a:41:02:5f:bf:ef:91:2d:f1:0c:9a:3b: de:58:2b:0b:82:30:5b:fc:e7:ba:66:5f:06:3d:44: 10:3f:58:2d:19:3a:0b:f3:f8:6e:d6:e6:43:d6:c0: 17:b5:24:0b:ab:fd:93:80:8b:74:a4:1f:9a:9e:f6: 9d:93:58:7a:82:46:d8:62:f1:71:ed:e7:bf:e1:b3: 3a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:27:34:08:65:E0:05:2B:60:62:18:7A:B8:C1:38:1E:07:E6:13:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1ca871c-be97-3b26-a845-b75529c17fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c2:ff:85:38:32:04:17:46:a7:ec:22:18:7e:a2:de:32:df: 8c:54:d1:d4:87:a6:cc:7b:e4:79:86:8e:e1:c8:da:c0:be:2d: 66:41:73:5a:2b:e6:33:e9:58:6f:31:48:51:b4:3f:45:57:23: 64:9b:21:52:51:98:51:52:78:25:dc:05:0c:26:2e:1b:8c:54: 14:8c:82:98:65:f6:7e:dd:ea:ca:7c:ca:64:7e:60:f3:55:f4: 94:f0:60:15:b3:ec:f2:d4:9d:d8:7e:bf:6a:71:ad:47:61:34: 15:ed:0f:98:c5:1b:11:a6:ca:68:93:f9:e2:c2:b7:5f:82:86: eb:eb:d7:33:ec:a0:da:1c:73:58:52:f6:86:9f:c5:a3:ad:43: 9f:f6:cc:4b:08:bb:16:77:db:84:cf:6f:77:91:78:0d:f8:bc: 8f:3d:3f:ba:d9:5b:66:97:cb:1c:5e:55:57:e6:2c:b9:8a:51: 72:4a:94:5d:68:c9:9f:63:81:e1:6a:dc:53:6f:be:ae:4b:16: 83:4e:8f:ce:3d:25:9a:89:94:59:0c:df:3b:a8:3f:51:f7:d3: be:e5:62:d7:24:2b:a2:5a:37:97:60:41:84:7b:a8:a5:a0:e1: 30:69:94:cb:dd:c8:80:29:ee:37:06:5e:df:74:26:4d:84:a5: 74:c1:9a:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ucaE4SBFSQ9XYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODVlZDI1MWQtZmQwNy00YjBmLWFhYWUtNTY2YTEwZjQ1ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhepARFEc72d2XQeyAWWpAU3wsZGBJTrSm2Ln rIxVS/5jpemoR0H8xUK5L51LkixWBIhsroAgsATqQNB2Kt+kYlZqFF8MB3NhVwLR gd3NaouTXRAGUyLDPtc7GO9ERuQb3xhGO8DXxm9jPzenIgH9NFAAvCD/kFpBgYvH VSv9BJDQVBCfqOtdt7jOwKShZDx79nPxQf6DXFzAUSOB5NP6lZx2w6hJ+ZYhoItx /gBtS2jyERux+nSaQQJfv++RLfEMmjveWCsLgjBb/Oe6Zl8GPUQQP1gtGToL8/hu 1uZD1sAXtSQLq/2TgIt0pB+anvadk1h6gkbYYvFx7ee/4bM6MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcnNAhl4AUrYGIYerjBOB4H5hMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFjYTg3MWMtYmU5Ny0z YjI2LWE4NDUtYjc1NTI5YzE3ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjC/4U4MgQXRqfsIhh+ot4y34xU0dSHpsx75HmGjuHI2sC+LWZBc1or 5jPpWG8xSFG0P0VXI2SbIVJRmFFSeCXcBQwmLhuMVBSMgphl9n7d6sp8ymR+YPNV 9JTwYBWz7PLUndh+v2pxrUdhNBXtD5jFGxGmymiT+eLCt1+Chuvr1zPsoNocc1hS 9oafxaOtQ5/2zEsIuxZ324TPb3eReA34vI89P7rZW2aXyxxeVVfmLLmKUXJKlF1o yZ9jgeFq3FNvvq5LFoNOj849JZqJlFkM3zuoP1H3077lYtckK6JaN5dgQYR7qKWg 4TBplMvdyIAp7jcGXt90Jk2EpXTBmq4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:30 2025 by rpki-client