$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ed3c41-685b-3bd3-9025-b362da5f6c3c.roa File: d3ed3c41-685b-3bd3-9025-b362da5f6c3c.roa (raw, json) Hash identifier: nnuhrYKi7x7JAExU5VbX3ueJFvhBGlPxXWgY5jMXnVM= Subject key identifier: 8C:4F:A6:FC:23:98:9F:91:16:12:5F:EB:54:D5:50:A8:90:F7:30:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7FB8C46141D7FE8C5AC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ed3c41-685b-3bd3-9025-b362da5f6c3c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 68.46.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:fb:8c:46:14:1d:7f:e8:c5:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=aa05b953-ae89-468d-a203-5612fa9c1efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f5:cc:18:3d:1b:14:e9:13:fc:89:0c:53:9f: 97:27:df:e3:9f:19:4e:0b:11:1c:74:b2:47:e5:fa: 52:d4:f6:8b:57:4f:2d:29:2e:70:94:e0:c2:e6:b7: 88:5c:9a:3d:42:41:53:cb:23:04:f3:2a:12:a0:06: ab:27:e6:85:c5:36:9d:bc:43:68:35:d5:cb:87:5d: b2:0d:92:90:5b:f8:5a:2a:c3:7a:3f:5f:8f:14:c0: be:44:8e:73:6f:77:43:95:f6:7a:1f:5d:0e:e2:c7: a3:78:d9:f3:a2:1b:9c:bd:f9:d0:14:bb:5f:2b:c8: 2e:a7:97:c4:00:e4:08:95:e8:15:a9:7e:7a:83:14: bd:1e:32:63:39:51:0d:b2:10:3a:ab:e8:15:b1:0a: 65:e7:5c:f3:bb:35:c1:ac:a5:d2:ae:4b:26:63:b0: df:75:af:9e:48:97:87:db:97:75:31:c5:61:3d:83: 03:a8:a1:d2:01:c4:e7:8b:c6:f4:48:e4:09:a1:04: ae:85:1a:80:27:01:f0:b4:f2:50:08:58:29:93:82: c9:ed:88:02:73:82:47:27:8c:1b:94:8c:f4:e8:81: 09:c5:a0:e1:bb:53:b3:58:49:9e:72:1d:4a:60:f7: a5:bd:ca:1c:09:f2:7d:8a:54:8f:6d:78:96:18:4b: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4F:A6:FC:23:98:9F:91:16:12:5F:EB:54:D5:50:A8:90:F7:30:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ed3c41-685b-3bd3-9025-b362da5f6c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.46.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:e2:5d:77:a7:f2:b3:f3:19:00:57:a3:3b:31:05:58:db:ef: f9:99:30:5d:16:fa:c7:89:6c:1d:d3:97:1c:a5:0f:91:65:16: 06:77:c6:14:2f:3e:b4:61:4f:8d:1f:2b:53:d8:81:3c:8e:48: 30:15:d7:88:a4:45:42:94:ef:b1:ac:8f:a0:07:f6:2f:ac:30: f5:97:34:8f:9f:f1:11:e1:08:60:3e:9f:36:8d:ff:5f:06:b1: 7d:b7:83:64:6c:71:bf:14:18:28:5e:bc:e8:42:42:df:fd:f5: 3b:58:2b:f5:74:72:19:a9:80:29:7b:e3:96:d4:24:2e:05:18: 1c:07:78:bb:3d:3c:3b:90:a4:17:49:10:f0:fa:a4:a8:18:e2: f4:47:a2:c3:45:94:1e:53:6f:e6:49:a3:7d:54:ae:89:6c:ff: c3:6d:35:15:35:90:1a:ec:f9:be:34:04:99:88:99:1e:9a:76: fc:ec:b8:f4:26:91:8b:f7:88:43:5e:1f:96:1f:7e:17:03:d9: 4f:f2:cc:09:c5:07:36:b0:fb:8a:85:6c:9b:af:8c:d4:ad:c4: 7e:ff:f8:6a:f2:3d:ed:e3:9b:18:e4:18:0d:99:ad:0c:55:a4: 06:04:d7:86:e9:c1:4b:65:d1:bb:17:13:ce:6f:7a:52:a6:8c: f6:83:a9:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t/uMRhQdf+jFrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YWEwNWI5NTMtYWU4OS00NjhkLWEyMDMtNTYxMmZhOWMxZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/XMGD0bFOkT/IkMU5+XJ9/jnxlOCxEcdLJH 5fpS1PaLV08tKS5wlODC5reIXJo9QkFTyyME8yoSoAarJ+aFxTadvENoNdXLh12y DZKQW/haKsN6P1+PFMC+RI5zb3dDlfZ6H10O4sejeNnzohucvfnQFLtfK8gup5fE AOQIlegVqX56gxS9HjJjOVENshA6q+gVsQpl51zzuzXBrKXSrksmY7Dfda+eSJeH 25d1McVhPYMDqKHSAcTni8b0SOQJoQSuhRqAJwHwtPJQCFgpk4LJ7YgCc4JHJ4wb lIz06IEJxaDhu1OzWEmech1KYPelvcocCfJ9ilSPbXiWGEvLJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxPpvwjmJ+RFhJf61TVUKiQ9zCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNlZDNjNDEtNjg1Yi0z YmQzLTkwMjUtYjM2MmRhNWY2YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC46MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANviXXen8rPzGQBXozsxBVjb7/mZMF0W+seJbB3TlxylD5FlFgZ3xhQv PrRhT40fK1PYgTyOSDAV14ikRUKU77Gsj6AH9i+sMPWXNI+f8RHhCGA+nzaN/18G sX23g2Rscb8UGChevOhCQt/99TtYK/V0chmpgCl745bUJC4FGBwHeLs9PDuQpBdJ EPD6pKgY4vRHosNFlB5Tb+ZJo31Urols/8NtNRU1kBrs+b40BJmImR6advzsuPQm kYv3iENeH5YffhcD2U/yzAnFBzaw+4qFbJuvjNStxH7/+GryPe3jmxjkGA2ZrQxV pAYE14bpwUtl0bsXE85velKmjPaDqRU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:00:59 2025 by rpki-client