$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db40098a-85a3-34c6-8cd4-67c59d2685c6.roa File: db40098a-85a3-34c6-8cd4-67c59d2685c6.roa (raw, json) Hash identifier: e7zXs2Qs9MsOZ7GXnKbCVPHncCky3qqNMPzOw71KQk0= Subject key identifier: 2C:1F:AE:B2:B0:8D:39:33:F0:79:E5:AA:2B:9A:E9:61:DD:14:28:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB715271CF04E5DB5E6D200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db40098a-85a3-34c6-8cd4-67c59d2685c6.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.53.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:15:27:1c:f0:4e:5d:b5:e6:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=0f7aceec-ee21-467d-9a94-4e8f11649c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:cc:40:e9:8d:76:d5:2a:9e:e6:e4:6a:e7: 7b:e5:5d:54:9d:68:47:83:79:31:4a:6c:ee:58:f0: 98:a5:69:f2:75:31:2a:0a:10:4c:33:30:aa:c4:b8: 2d:b4:5e:ed:5c:4a:f5:a9:fc:cc:a0:b7:d4:41:ae: 67:81:22:44:05:8a:75:98:a1:65:2e:92:ea:bd:e8: 84:45:61:3d:d8:ea:a9:04:87:b6:ea:2b:c4:1d:90: a0:7e:c9:65:d0:f6:f8:eb:82:11:22:6d:72:e7:b5: fd:ce:d9:f1:38:b7:ff:74:d3:44:5e:18:a6:6c:c2: bd:a4:b7:ff:73:dd:a9:9e:1a:4f:0e:aa:f5:b9:49: 34:fc:00:bb:a2:26:fd:1a:96:95:0e:58:21:af:aa: 35:e3:eb:8c:a8:47:50:b0:1a:38:65:55:9a:b8:f3: 6e:37:2c:54:21:8e:e7:e1:4d:ef:69:bf:77:97:f0: d5:d4:44:e6:62:e5:54:99:fc:30:90:b3:5c:f7:a1: 9e:e0:59:11:72:d8:ed:57:0d:1f:1a:67:db:b1:6d: 26:bc:c3:cd:70:1a:16:23:72:60:bc:9a:ff:5d:42: 4c:a3:27:5b:6a:33:7e:fe:03:5b:63:28:63:76:7f: cd:e9:8d:84:a0:1a:62:58:93:aa:4c:3d:8a:79:79: 64:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1F:AE:B2:B0:8D:39:33:F0:79:E5:AA:2B:9A:E9:61:DD:14:28:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db40098a-85a3-34c6-8cd4-67c59d2685c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5c:e3:40:4e:3b:e2:72:4f:af:de:34:26:85:c2:45:a2:1f: 46:bd:07:e5:00:3f:61:f8:ed:3a:bc:bd:31:41:ad:24:e3:d9: 12:dd:76:a1:e9:45:6d:18:b8:02:80:4c:39:fa:44:65:f6:c3: fa:a6:ef:2f:ff:25:1e:e5:69:41:3e:d4:6a:18:4f:7b:54:9d: d5:70:62:ae:ea:a0:14:15:c0:01:84:db:29:88:fb:1d:47:a7: 0a:53:21:cc:54:0e:64:38:d4:0f:71:e6:54:30:5b:8b:ee:a3: 68:77:a1:c4:99:35:73:73:ec:8a:6d:b9:cd:22:db:eb:dc:eb: de:d4:e4:1e:1e:66:46:e1:35:60:0e:87:ef:c3:1b:cc:01:08: 79:a9:d6:76:d6:b5:0c:14:d9:b4:4f:c6:fd:e6:4c:71:ce:43: 0e:95:1c:1e:d1:d2:fc:f8:03:45:8d:35:d2:c7:ae:89:7f:55: b3:52:e5:69:93:d1:a9:c1:63:11:29:f0:84:e5:70:84:b9:e1: e7:e5:ba:05:c6:17:bd:0c:78:a6:16:9d:87:90:df:3f:38:68: 4d:00:7b:41:36:93:f2:07:ed:67:20:4f:41:67:e2:c8:78:00: 17:33:3d:a8:13:19:ea:e1:8e:43:7e:af:5b:a1:83:39:e9:48: c7:7b:09:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9txUnHPBOXbXm0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MGY3YWNlZWMtZWUyMS00NjdkLTlhOTQtNGU4ZjExNjQ5YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpTMQOmNdtUqnubkaud75V1UnWhHg3kxSmzu WPCYpWnydTEqChBMMzCqxLgttF7tXEr1qfzMoLfUQa5ngSJEBYp1mKFlLpLqveiE RWE92OqpBIe26ivEHZCgfsll0Pb464IRIm1y57X9ztnxOLf/dNNEXhimbMK9pLf/ c92pnhpPDqr1uUk0/AC7oib9GpaVDlghr6o14+uMqEdQsBo4ZVWauPNuNyxUIY7n 4U3vab93l/DV1ETmYuVUmfwwkLNc96Ge4FkRctjtVw0fGmfbsW0mvMPNcBoWI3Jg vJr/XUJMoydbajN+/gNbYyhjdn/N6Y2EoBpiWJOqTD2KeXlkxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwfrrKwjTkz8Hnlqiua6WHdFCiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGI0MDA5OGEtODVhMy0z NGM2LThjZDQtNjdjNTlkMjY4NWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDUaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBc40BOO+JyT6/eNCaFwkWiH0a9B+UAP2H47Tq8vTFBrSTj2RLddqHp RW0YuAKATDn6RGX2w/qm7y//JR7laUE+1GoYT3tUndVwYq7qoBQVwAGE2ymI+x1H pwpTIcxUDmQ41A9x5lQwW4vuo2h3ocSZNXNz7Iptuc0i2+vc697U5B4eZkbhNWAO h+/DG8wBCHmp1nbWtQwU2bRPxv3mTHHOQw6VHB7R0vz4A0WNNdLHrol/VbNS5WmT 0anBYxEp8ITlcIS54eflugXGF70MeKYWnYeQ3z84aE0Ae0E2k/IH7WcgT0Fn4sh4 ABczPagTGerhjkN+r1uhgznpSMd7CQI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:27:51 2025 by rpki-client