$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de93d752-61fa-35d1-89fe-de1c540126f7.roa File: de93d752-61fa-35d1-89fe-de1c540126f7.roa (raw, json) Hash identifier: AkezJTa2b//puUOvN2DEohtL5Q4GW4fZhP9+AXom0oc= Subject key identifier: 3E:62:1C:24:0C:09:0D:A6:7C:D7:CA:46:33:91:44:9B:B4:89:90:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7194AEB9C1D7E1CEA0E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de93d752-61fa-35d1-89fe-de1c540126f7.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.60.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:19:4a:eb:9c:1d:7e:1c:ea:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a11087d5-e6ec-4b4e-955b-5d30b3b5d74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:17:6f:c2:b4:69:fb:c8:2c:3d:70:26:34: 62:de:0f:a9:bd:cb:49:98:5f:33:8f:3a:be:8e:8f: 2f:89:35:2d:61:6c:5a:90:0f:c3:0b:19:30:d9:73: 11:4a:18:50:f4:c5:8f:95:9c:40:20:20:6a:03:b0: 53:2c:aa:c3:90:97:25:05:4c:03:78:45:e6:75:75: 24:a0:e7:7d:fa:28:98:60:e6:dd:09:43:17:9a:17: 06:0d:34:5a:60:77:cd:9d:27:ce:7d:b7:bd:bf:41: 5b:bd:0d:f7:e1:bb:2b:f9:95:32:21:cb:15:b7:06: 76:fb:ec:03:68:10:79:1d:c7:d9:93:07:f7:fe:b0: 69:de:22:a2:52:16:a8:da:a2:37:d5:a8:a4:58:5b: ef:35:12:9a:17:8b:1a:7b:91:2d:18:c3:20:e1:22: fa:25:79:5c:95:47:f2:fa:d3:c2:d5:31:33:01:64: 4f:33:cc:96:a4:65:3a:ad:a6:ee:72:a6:ab:22:8f: 1a:6e:be:4e:8d:04:0f:83:18:2a:a7:cd:3f:4e:f0: 06:38:82:7d:c6:6f:4c:2a:b5:6f:b5:0c:f7:0a:9f: a0:01:ea:a4:04:df:7c:fd:05:60:8a:45:2b:36:01: c4:ad:b9:f6:46:4d:0f:ab:f1:5b:99:b5:5c:ab:8c: 71:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:62:1C:24:0C:09:0D:A6:7C:D7:CA:46:33:91:44:9B:B4:89:90:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de93d752-61fa-35d1-89fe-de1c540126f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4f:ed:46:64:5e:0d:8b:92:d0:a0:33:da:66:2c:c6:c4:11: d1:5d:dc:77:a1:46:98:87:88:32:29:e2:ac:1c:19:43:a1:ed: f4:11:03:3b:d1:31:74:cc:c8:5c:12:36:3d:33:4e:b4:50:e8: 76:57:76:3a:1f:5b:2d:07:2e:1a:0d:c4:0a:64:f8:aa:b1:28: d5:5d:0a:fa:1e:8d:23:fe:cd:aa:86:4d:1e:2d:2d:99:19:b9: b6:d5:5c:ce:7f:01:19:06:f8:b3:53:67:fa:9a:83:44:a6:98: d6:e4:13:3b:d0:3f:36:64:12:49:a4:c9:10:f6:78:df:da:7a: fa:29:2d:7b:7c:6f:4d:39:c3:5f:76:c1:d9:9c:75:bc:ce:41: fd:dc:07:de:46:8e:85:f9:52:a9:43:31:cf:e9:ca:1e:b3:9d: 29:2a:58:ed:ec:0c:59:f7:f0:de:79:e8:a4:b0:45:98:7f:1c: e9:68:39:c8:a7:e9:f0:1b:55:52:96:f0:bb:1c:55:e4:00:c9: 8d:19:8d:8d:b5:a2:a5:00:31:25:14:34:e5:1c:7e:54:2a:2a: bf:83:68:2c:43:be:3e:e1:82:64:d6:ef:27:4a:85:00:67:5f: c2:5b:1b:f7:47:21:6f:2c:4c:6c:9c:16:17:3e:e8:2a:b1:e0: 92:18:e0:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9txlK65wdfhzqDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTExMDg3ZDUtZTZlYy00YjRlLTk1NWItNWQzMGIzYjVkNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaMXb8K0afvILD1wJjRi3g+pvctJmF8zjzq+ jo8viTUtYWxakA/DCxkw2XMRShhQ9MWPlZxAICBqA7BTLKrDkJclBUwDeEXmdXUk oOd9+iiYYObdCUMXmhcGDTRaYHfNnSfOfbe9v0FbvQ334bsr+ZUyIcsVtwZ2++wD aBB5HcfZkwf3/rBp3iKiUhao2qI31aikWFvvNRKaF4sae5EtGMMg4SL6JXlclUfy +tPC1TEzAWRPM8yWpGU6rabucqarIo8abr5OjQQPgxgqp80/TvAGOIJ9xm9MKrVv tQz3Cp+gAeqkBN98/QVgikUrNgHErbn2Rk0Pq/FbmbVcq4xxgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5iHCQMCQ2mfNfKRjORRJu0iZDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGU5M2Q3NTItNjFmYS0z NWQxLTg5ZmUtZGUxYzU0MDEyNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRP7UZkXg2LktCgM9pmLMbEEdFd3HehRpiHiDIp4qwcGUOh7fQRAzvR MXTMyFwSNj0zTrRQ6HZXdjofWy0HLhoNxApk+KqxKNVdCvoejSP+zaqGTR4tLZkZ ubbVXM5/ARkG+LNTZ/qag0SmmNbkEzvQPzZkEkmkyRD2eN/aevopLXt8b005w192 wdmcdbzOQf3cB95GjoX5UqlDMc/pyh6znSkqWO3sDFn38N556KSwRZh/HOloOcin 6fAbVVKW8LscVeQAyY0ZjY21oqUAMSUUNOUcflQqKr+DaCxDvj7hgmTW7ydKhQBn X8JbG/dHIW8sTGycFhc+6Cqx4JIY4Mg= -----END CERTIFICATE-----Generated at Tue Oct 21 03:56:52 2025 by rpki-client