$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa File: d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa (raw, json) Hash identifier: p09SS4eKrCYsghWvjdbMzO7i6fFq8YtObNBVVICmk4I= Subject key identifier: 22:29:E0:77:24:54:6C:51:EB:DA:5B:52:96:E4:26:80:FF:B6:1A:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8A13443C939388F1972A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.52.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:a1:34:43:c9:39:38:8f:19:72:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=f4b86e3d-11d3-4625-99b8-902823736cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:58:e8:49:92:4c:a6:1f:64:1c:60:a4:23: 52:8a:ca:07:8b:11:6f:a8:f1:45:32:7c:cc:f3:2d: c0:4b:f1:e5:59:ce:47:0e:8e:0d:12:78:04:24:02: 5a:85:79:59:4c:ea:84:c2:21:d6:72:c0:a1:27:31: e2:c4:d1:c3:23:37:1b:31:e4:dd:a4:26:d9:f0:de: 92:51:4d:dd:e3:8e:1e:e0:3d:30:42:ef:6e:c5:97: 0d:62:b4:e4:5d:bb:c7:22:44:ce:fa:e8:94:72:d6: f7:0a:52:9e:bc:21:bc:d9:31:8e:95:73:b7:ce:c0: 12:b2:31:92:71:e1:dd:b7:74:a8:5a:1d:cd:fa:d1: 33:2a:93:6d:b2:01:05:16:80:81:6f:2c:04:e4:69: 6b:ab:11:7f:86:7c:91:df:ec:88:d4:ee:da:50:4c: ed:3e:3e:77:ad:42:d5:9f:32:f1:bc:f6:e8:86:fb: 08:b5:fe:66:59:c1:30:0d:dc:a2:c4:2a:d8:63:7e: 34:93:7e:83:8d:b7:1d:44:1d:b0:b9:5d:0d:66:c1: 1a:0d:1b:9d:28:60:54:59:74:97:13:ca:23:96:09: 78:bf:6f:94:46:28:9f:82:91:3d:03:56:24:a2:38: 2e:7d:ff:ab:3b:20:1f:a5:3f:b9:e6:d6:ba:17:52: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:29:E0:77:24:54:6C:51:EB:DA:5B:52:96:E4:26:80:FF:B6:1A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:74:b4:72:43:22:9b:36:87:bf:d9:e7:98:30:4e:d9:0c:b9: 91:72:6d:d5:48:b7:13:9d:f6:90:54:cb:83:39:a7:22:26:6d: db:b8:29:64:53:ff:dd:d9:bd:89:31:20:a8:f3:f4:f7:b7:fc: 5c:12:10:4f:ac:88:19:93:ab:b6:c5:f3:42:76:34:cf:24:59: 75:29:82:6a:4e:f9:a6:40:3f:38:51:be:d4:d7:dd:03:74:e7: 7c:4f:ea:19:a4:5f:2f:fb:d0:4e:1b:c1:63:14:e5:cb:02:7e: 8c:f5:4d:be:80:74:b1:1d:6d:d6:bf:5e:fb:4a:5c:c1:08:dc: 07:e0:fb:27:f8:24:7f:93:6a:0e:b8:24:6c:e0:da:bd:7d:2b: 67:ea:91:90:c0:39:f3:f2:49:2d:08:81:8f:68:fb:99:85:80: fe:b4:f5:f9:44:30:54:ee:af:e2:2d:10:0f:5d:d5:0c:be:fa: 40:da:75:9e:aa:7a:c0:fb:fd:87:33:83:3e:a2:2a:05:ed:8c: 44:21:df:cd:ef:8a:50:20:96:e3:03:92:3d:a8:83:89:e6:84: 49:49:10:34:75:07:f4:9d:b7:67:98:34:67:05:33:0d:5f:47: 5b:f8:35:02:05:9c:70:82:b0:67:54:e2:07:a1:f2:51:3e:0a: 29:7a:3c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKE0Q8k5OI8ZcqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZjRiODZlM2QtMTFkMy00NjI1LTk5YjgtOTAyODIzNzM2Y2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCdY6EmSTKYfZBxgpCNSisoHixFvqPFFMnzM 8y3AS/HlWc5HDo4NEngEJAJahXlZTOqEwiHWcsChJzHixNHDIzcbMeTdpCbZ8N6S UU3d444e4D0wQu9uxZcNYrTkXbvHIkTO+uiUctb3ClKevCG82TGOlXO3zsASsjGS ceHdt3SoWh3N+tEzKpNtsgEFFoCBbywE5GlrqxF/hnyR3+yI1O7aUEztPj53rULV nzLxvPbohvsItf5mWcEwDdyixCrYY340k36DjbcdRB2wuV0NZsEaDRudKGBUWXSX E8ojlgl4v2+URiifgpE9A1Ykojguff+rOyAfpT+55ta6F1KIjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIp4HckVGxR69pbUpbkJoD/thr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDk2ZDVkMWMtM2M4NS0z YjZjLThmMzQtMTI0Njc1ZWFlN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDRrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh0tHJDIps2h7/Z55gwTtkMuZFybdVItxOd9pBUy4M5pyImbdu4KWRT /93ZvYkxIKjz9Pe3/FwSEE+siBmTq7bF80J2NM8kWXUpgmpO+aZAPzhRvtTX3QN0 53xP6hmkXy/70E4bwWMU5csCfoz1Tb6AdLEdbda/XvtKXMEI3Afg+yf4JH+Tag64 JGzg2r19K2fqkZDAOfPySS0IgY9o+5mFgP609flEMFTur+ItEA9d1Qy++kDadZ6q esD7/Yczgz6iKgXtjEQh383vilAgluMDkj2og4nmhElJEDR1B/Sdt2eYNGcFMw1f R1v4NQIFnHCCsGdU4geh8lE+Cil6PFY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:12 2025 by rpki-client