$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2574929-762b-37e7-bd9c-f54a9a00bf0e.roa File: f2574929-762b-37e7-bd9c-f54a9a00bf0e.roa (raw, json) Hash identifier: 6ABVDVvMuPMh4dngnUU6z1dO2+XXqtb8iB/YQqB4+KI= Subject key identifier: FE:6E:9F:7F:59:6C:0B:3B:52:EB:2F:B9:4F:58:85:BE:1F:D9:18:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB70F2DD336F05EDEFF5F50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2574929-762b-37e7-bd9c-f54a9a00bf0e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.47.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:0f:2d:d3:36:f0:5e:de:ff:5f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=623c1d5c-7de6-4b3a-9d3b-e468d420cd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:44:25:1c:a1:12:29:9d:2b:84:ca:df:84:44: 09:fd:dc:f4:0b:43:3c:31:54:9c:80:f6:82:f5:cc: 81:6a:c9:53:18:ce:74:1d:a2:1d:c2:ce:09:ee:37: dc:74:f3:fc:eb:6d:fe:a7:65:56:74:53:c5:5e:be: a0:59:92:aa:e8:34:12:3f:94:32:2c:1c:14:d0:b5: 9d:d4:07:08:3a:dd:73:99:d5:3d:12:fa:0b:07:84: 50:2c:65:d3:d3:a2:98:07:d7:3f:bc:e0:5a:b2:86: a0:ed:6d:c3:b6:f1:26:27:dd:c3:ea:98:b7:80:63: 68:65:01:bc:dd:4b:42:8d:3a:a5:87:a8:52:16:93: 27:de:f7:3f:9a:ef:4c:cc:2b:7e:ff:d4:73:ef:30: d1:46:41:71:50:13:c2:51:ea:c6:df:6b:24:2f:c3: 73:6b:a5:aa:1b:00:70:23:ff:da:53:1e:49:39:17: 30:ac:7d:9c:fe:8a:b6:e8:91:68:d1:62:ef:ee:20: fc:4a:35:a6:d4:2d:5a:6a:69:18:c5:f3:c1:a5:de: 8b:34:ab:ea:fa:10:28:1a:d8:15:2f:1d:da:1b:3c: 62:c3:06:80:3a:c4:c6:85:3b:15:be:0a:a4:60:ba: 0f:ae:a3:93:5d:28:52:5d:c8:25:46:73:fe:8e:a4: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6E:9F:7F:59:6C:0B:3B:52:EB:2F:B9:4F:58:85:BE:1F:D9:18:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2574929-762b-37e7-bd9c-f54a9a00bf0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:49:62:f5:d3:4e:8f:7c:76:1c:44:65:54:bb:71:75:06:aa: 68:2b:6c:66:cd:8f:57:58:ed:8c:0d:65:5f:84:39:f6:e5:66: 41:78:84:9a:58:6e:f7:80:82:2f:43:44:98:ab:67:35:6e:7e: 3d:0e:27:2a:13:28:2a:78:76:72:1f:c8:aa:1e:f8:6c:91:02: 25:32:f7:33:e0:51:3c:90:b7:81:bf:56:a0:a2:e8:d5:3a:c8: f5:e3:72:3c:d5:5e:18:b4:67:47:06:42:ac:da:bf:88:77:2b: e3:27:ba:d9:d6:7d:ab:91:07:a5:e0:91:91:84:81:eb:43:52: 1d:cc:96:54:47:e5:74:f4:96:ae:55:12:2b:63:f9:d5:2e:46: 07:0d:7e:29:bf:bd:44:4a:0a:7c:be:7f:7a:6c:c1:e2:5c:94: ee:98:77:b5:7c:e2:88:1d:e5:6d:4a:53:55:e0:e6:d0:b2:63: 42:88:ea:37:1a:f1:e7:f5:32:2e:f3:87:96:c6:7b:ed:44:e7: 79:24:b8:a7:47:ae:5a:5c:96:48:aa:5f:46:33:aa:4a:83:cf: ba:e4:cb:41:78:57:c6:d1:b7:3b:2f:fb:dd:dd:94:0d:32:33: fe:7d:0f:fd:e9:3c:c8:bb:63:52:44:1e:e0:d0:1c:53:39:57: e7:0f:00:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tw8t0zbwXt7/X1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjIzYzFkNWMtN2RlNi00YjNhLTlkM2ItZTQ2OGQ0MjBjZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UQlHKESKZ0rhMrfhEQJ/dz0C0M8MVScgPaC 9cyBaslTGM50HaIdws4J7jfcdPP8623+p2VWdFPFXr6gWZKq6DQSP5QyLBwU0LWd 1AcIOt1zmdU9EvoLB4RQLGXT06KYB9c/vOBasoag7W3DtvEmJ93D6pi3gGNoZQG8 3UtCjTqlh6hSFpMn3vc/mu9MzCt+/9Rz7zDRRkFxUBPCUerG32skL8Nza6WqGwBw I//aUx5JORcwrH2c/oq26JFo0WLv7iD8SjWm1C1aamkYxfPBpd6LNKvq+hAoGtgV Lx3aGzxiwwaAOsTGhTsVvgqkYLoPrqOTXShSXcglRnP+jqQWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5un39ZbAs7UusvuU9Yhb4f2RjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjI1NzQ5MjktNzYyYi0z N2U3LWJkOWMtZjU0YTlhMDBiZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARC+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBJYvXTTo98dhxEZVS7cXUGqmgrbGbNj1dY7YwNZV+EOfblZkF4hJpY bveAgi9DRJirZzVufj0OJyoTKCp4dnIfyKoe+GyRAiUy9zPgUTyQt4G/VqCi6NU6 yPXjcjzVXhi0Z0cGQqzav4h3K+MnutnWfauRB6XgkZGEgetDUh3MllRH5XT0lq5V Eitj+dUuRgcNfim/vURKCny+f3psweJclO6Yd7V84ogd5W1KU1Xg5tCyY0KI6jca 8ef1Mi7zh5bGe+1E53kkuKdHrlpclkiqX0YzqkqDz7rky0F4V8bRtzsv+93dlA0y M/59D/3pPMi7Y1JEHuDQHFM5V+cPAA4= -----END CERTIFICATE-----Generated at Mon Oct 20 16:54:30 2025 by rpki-client