$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e680408e-a5bc-3d5f-8130-7db5f4d0d317.roa File: e680408e-a5bc-3d5f-8130-7db5f4d0d317.roa (raw, json) Hash identifier: 984KYgiwHl7jy5PT8FxWXfW8Fa3cntQHTsRUM378suA= Subject key identifier: D3:88:35:C7:6B:14:C4:9F:80:C7:BE:F9:E2:C3:A1:30:61:D3:EC:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A74E42DAE4CE4BACFEFA60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e680408e-a5bc-3d5f-8130-7db5f4d0d317.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 68.58.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:4e:42:da:e4:ce:4b:ac:fe:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=e306d2fb-4fce-42f5-bf96-d0a4c390956f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6f:82:6d:7d:d4:a5:27:2e:55:d3:18:0c:bc: 12:03:7d:4d:b9:e0:a4:ce:49:bb:c3:89:ae:68:1b: 2e:61:8f:e3:66:6b:af:2b:83:19:8a:2f:34:e1:f4: 42:f0:50:b2:56:72:d3:1f:c5:90:9a:d8:13:a7:2f: b7:f5:a9:1f:2e:54:a0:69:b1:83:ca:12:c6:d9:9e: fc:d4:43:7c:65:39:68:40:f8:d1:af:5b:d7:a5:13: d9:fb:c3:fe:2a:b7:cc:b3:0d:f6:ca:56:94:5e:ee: 1d:dd:20:7c:32:35:e5:1f:08:13:07:ce:2b:27:97: 86:fd:13:9b:70:07:e5:31:e5:09:6f:45:12:12:7f: 7d:bc:83:6d:da:97:f8:12:5a:c0:62:3c:b9:83:db: 1f:12:2b:6a:db:64:8e:64:19:1f:e4:a3:a5:cf:76: 0d:b7:10:9c:6d:9b:a6:be:2e:88:01:ae:c1:87:c3: 80:70:63:40:de:d9:dd:df:01:cf:0d:b1:9b:0a:b8: 36:59:bd:5a:f6:69:7b:87:f3:56:17:d9:50:b5:49: 0d:84:6a:3b:80:de:28:39:32:34:75:29:08:9c:5b: fb:ba:b2:c1:ad:49:ad:c1:e5:c7:59:69:1b:16:1d: 84:75:a4:cf:32:af:8e:83:a1:cd:fe:56:ad:70:78: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:88:35:C7:6B:14:C4:9F:80:C7:BE:F9:E2:C3:A1:30:61:D3:EC:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e680408e-a5bc-3d5f-8130-7db5f4d0d317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:4f:9d:11:c7:c5:5e:7b:71:1c:75:b4:05:ff:41:37:d9:dd: 13:fd:fd:59:a7:bd:18:aa:08:16:69:f8:c4:8f:c2:14:92:29: 54:57:da:46:2e:56:2e:6d:e1:a1:72:cb:bd:e3:09:9c:70:06: ff:cd:4b:dc:b3:f3:29:b2:e5:f9:75:01:23:18:64:29:c6:ba: b8:f3:e6:6d:f1:c4:78:84:37:8e:38:76:45:17:cd:af:c4:d1: 43:86:b2:62:28:96:a9:bb:7b:93:b1:3a:1a:b8:fe:03:ae:cc: 05:30:7b:c6:b0:16:b2:a4:89:64:c8:01:46:94:9a:b6:df:12: 9e:e7:0c:18:72:af:b1:19:8e:e0:f4:bd:83:11:d5:1e:13:2b: 14:a2:28:74:13:d5:02:0e:8e:c1:5c:ca:4e:a7:f3:f6:a0:6a: e2:bb:c4:80:17:3e:56:6b:55:4f:09:7e:0a:14:c0:b9:41:59: db:f0:d1:db:02:92:8c:78:da:5a:b3:a0:16:f3:42:30:b3:b0: 40:d5:f1:a6:4e:b9:6b:86:48:36:e9:50:0e:1d:8b:df:7b:ff: ca:6d:04:fc:45:e2:18:02:2f:8d:46:8c:73:94:42:05:b1:93: 3a:6b:53:7d:f0:b6:6e:fa:5c:01:2d:5c:d5:c4:34:a1:e5:83: d5:20:25:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp05C2uTOS6z++mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZTMwNmQyZmItNGZjZS00MmY1LWJmOTYtZDBhNGMzOTA5NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m+CbX3UpScuVdMYDLwSA31NueCkzkm7w4mu aBsuYY/jZmuvK4MZii804fRC8FCyVnLTH8WQmtgTpy+39akfLlSgabGDyhLG2Z78 1EN8ZTloQPjRr1vXpRPZ+8P+KrfMsw32ylaUXu4d3SB8MjXlHwgTB84rJ5eG/ROb cAflMeUJb0USEn99vINt2pf4ElrAYjy5g9sfEitq22SOZBkf5KOlz3YNtxCcbZum vi6IAa7Bh8OAcGNA3tnd3wHPDbGbCrg2Wb1a9ml7h/NWF9lQtUkNhGo7gN4oOTI0 dSkInFv7urLBrUmtweXHWWkbFh2EdaTPMq+Og6HN/latcHgKgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOINcdrFMSfgMe++eLDoTBh0+xwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTY4MDQwOGUtYTViYy0z ZDVmLTgxMzAtN2RiNWY0ZDBkMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9PnRHHxV57cRx1tAX/QTfZ3RP9/VmnvRiqCBZp+MSPwhSSKVRX2kYu Vi5t4aFyy73jCZxwBv/NS9yz8ymy5fl1ASMYZCnGurjz5m3xxHiEN444dkUXza/E 0UOGsmIolqm7e5OxOhq4/gOuzAUwe8awFrKkiWTIAUaUmrbfEp7nDBhyr7EZjuD0 vYMR1R4TKxSiKHQT1QIOjsFcyk6n8/agauK7xIAXPlZrVU8JfgoUwLlBWdvw0dsC kox42lqzoBbzQjCzsEDV8aZOuWuGSDbpUA4di997/8ptBPxF4hgCL41GjHOUQgWx kzprU33wtm76XAEtXNXENKHlg9UgJeQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:57 2025 by rpki-client