$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dae82bfa-3ba7-3978-ac05-bfa8d572e541.roa File: dae82bfa-3ba7-3978-ac05-bfa8d572e541.roa (raw, json) Hash identifier: xFtg66eBVB72EELkxovleKMX7WeTcAXm7HoJkep0RVg= Subject key identifier: 69:85:98:AD:FA:C4:5A:B5:2B:63:7D:AD:09:52:81:1D:3B:1B:D5:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB713AD41D75465DDBF5C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dae82bfa-3ba7-3978-ac05-bfa8d572e541.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.52.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:13:ad:41:d7:54:65:dd:bf:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=fe55212b-16cc-417f-8bbb-fa7e36052b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:c0:a9:63:39:bd:28:4d:07:75:d2:25:0a: 6b:ae:d4:07:7a:64:73:89:fc:1b:16:c8:a2:f3:cc: 25:0b:87:56:f6:a5:47:a8:66:c1:91:a7:8c:81:91: 70:4d:32:ce:67:78:29:98:3e:2b:ae:40:d0:13:78: 64:db:41:6e:3e:b9:1b:d5:64:89:a1:50:14:63:cf: 93:ee:19:f2:40:4f:07:bf:7e:8e:67:5b:56:3e:e9: 75:c1:c5:32:b2:73:e2:86:4a:33:bd:60:68:ca:f4: e2:fb:9e:3c:84:a1:12:26:2d:d9:77:42:b2:f9:ab: 14:14:ba:89:89:da:e4:e0:57:86:40:67:97:ee:0f: 88:27:b5:7d:ea:a2:46:e2:06:1f:6e:00:ca:46:bd: 71:22:68:d2:f2:9a:34:e0:c1:f4:36:32:6f:e8:7d: 32:11:74:2d:99:9e:72:11:bc:ca:2a:b2:46:f7:ff: 24:4c:a9:70:b9:b3:af:d9:60:1b:1a:1e:16:b5:25: 5a:de:a8:34:99:14:8e:06:cc:44:3a:8e:1d:a8:7d: dc:74:d0:d3:07:9a:c5:dc:dc:c6:7c:ed:24:43:42: 32:07:63:0f:4c:5a:2c:2d:e5:1e:de:b4:1b:07:d8: 00:ba:f3:46:63:79:d7:b6:72:21:b3:7a:af:9b:ce: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:85:98:AD:FA:C4:5A:B5:2B:63:7D:AD:09:52:81:1D:3B:1B:D5:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dae82bfa-3ba7-3978-ac05-bfa8d572e541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:ff:78:6e:bb:8e:dc:6c:a2:14:51:31:c8:c0:64:94:9c:c3: 2d:4c:a3:ae:63:b7:9f:77:39:8a:d4:9f:ec:74:16:eb:89:20: d1:f1:ae:f9:9b:4b:18:15:76:40:e5:88:0f:fc:2e:c5:2e:37: 06:55:85:c5:51:ff:a5:66:cb:f3:c1:45:a3:19:d3:5f:f3:9f: bc:68:60:19:7e:53:1a:31:41:39:3e:83:00:d1:29:4d:16:0b: 34:11:51:79:17:f1:da:4a:1c:62:0b:95:a6:a7:92:46:17:45: 00:e8:81:4d:d7:ae:3a:97:6c:51:c0:6e:23:48:2f:8d:a3:23: 68:6f:f0:8f:49:f5:17:d5:ab:7d:84:0f:8d:62:fb:db:91:02: 28:9e:bc:32:82:60:19:1c:0d:5f:b6:31:e6:63:61:ef:0b:73: a5:4f:8e:17:60:27:2e:3d:da:5a:b6:57:ed:39:40:a5:0c:e2: 79:31:37:02:eb:d4:ff:bf:d8:3f:d8:d1:c9:be:44:bd:43:d2: 05:1e:e1:8c:95:1d:a9:1c:d7:59:b7:cb:bd:4a:9f:05:44:77: ae:50:6f:90:83:a1:8c:95:98:7b:4e:29:cc:38:a3:b6:42:f0: a9:f5:3a:02:cc:ef:10:3b:bb:fc:80:b6:89:1a:90:d0:8f:d0: 49:47:4e:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9txOtQddUZd2/XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZmU1NTIxMmItMTZjYy00MTdmLThiYmItZmE3ZTM2MDUyYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugDAqWM5vShNB3XSJQprrtQHemRzifwbFsii 88wlC4dW9qVHqGbBkaeMgZFwTTLOZ3gpmD4rrkDQE3hk20FuPrkb1WSJoVAUY8+T 7hnyQE8Hv36OZ1tWPul1wcUysnPihkozvWBoyvTi+548hKESJi3Zd0Ky+asUFLqJ idrk4FeGQGeX7g+IJ7V96qJG4gYfbgDKRr1xImjS8po04MH0NjJv6H0yEXQtmZ5y EbzKKrJG9/8kTKlwubOv2WAbGh4WtSVa3qg0mRSOBsxEOo4dqH3cdNDTB5rF3NzG fO0kQ0IyB2MPTFosLeUe3rQbB9gAuvNGY3nXtnIhs3qvm86WCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmFmK36xFq1K2N9rQlSgR07G9W1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGFlODJiZmEtM2JhNy0z OTc4LWFjMDUtYmZhOGQ1NzJlNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN3/eG67jtxsohRRMcjAZJScwy1Mo65jt593OYrUn+x0FuuJINHxrvmb SxgVdkDliA/8LsUuNwZVhcVR/6Vmy/PBRaMZ01/zn7xoYBl+UxoxQTk+gwDRKU0W CzQRUXkX8dpKHGILlaankkYXRQDogU3XrjqXbFHAbiNIL42jI2hv8I9J9RfVq32E D41i+9uRAiievDKCYBkcDV+2MeZjYe8Lc6VPjhdgJy492lq2V+05QKUM4nkxNwLr 1P+/2D/Y0cm+RL1D0gUe4YyVHakc11m3y71KnwVEd65Qb5CDoYyVmHtOKcw4o7ZC 8Kn1OgLM7xA7u/yAtokakNCP0ElHTuc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:53:56 2025 by rpki-client