$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f887e5eb-6d2b-3f53-b355-27b7d8e3978e.roa File: f887e5eb-6d2b-3f53-b355-27b7d8e3978e.roa (raw, json) Hash identifier: yyM2OXkq6RxooG0j7XiaMRXSL7jGfCC2IP7cPolrgiE= Subject key identifier: 32:84:FA:0C:0C:95:CC:EF:43:51:EB:E6:28:68:3B:C5:EE:B1:E4:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7C5CD35AC648AF241B800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f887e5eb-6d2b-3f53-b355-27b7d8e3978e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33668 IP address blocks: 68.86.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:c5:cd:35:ac:64:8a:f2:41:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=23e1e42c-f668-4541-9bc1-dcfff9630c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:36:da:01:c4:92:cf:8c:e5:46:b9:ab:f9: 13:dc:18:aa:62:20:67:85:1c:c6:33:db:ac:40:f7: c8:95:e9:c5:82:3a:42:8b:2d:78:5e:82:a8:b4:12: af:41:c8:ac:f3:d7:28:ee:cf:92:33:46:0c:24:bb: 61:56:68:08:9b:c8:c8:0f:95:c4:2f:ab:f7:48:a9: f4:a9:66:d0:f8:80:06:69:0a:f0:bd:33:55:95:f4: b9:ba:47:54:12:5e:32:bd:36:a9:f1:aa:83:af:23: 94:69:cb:a7:90:32:89:ba:e0:29:e8:10:6e:df:a1: 94:96:0e:71:6c:9a:5b:cb:be:c1:19:03:53:3d:52: 98:fa:a6:5c:2f:c4:a2:71:2f:7a:15:35:66:31:4b: 3d:69:44:a1:30:03:7a:5d:00:3b:6d:81:03:3a:b2: 62:8e:86:8e:be:c7:40:ad:7e:1c:fe:af:0e:56:dc: 25:c8:c8:56:82:77:e2:19:a9:8c:48:c2:84:5f:ff: 30:4b:88:5d:a2:05:d0:5f:97:0c:96:a9:32:0f:47: 99:f3:e3:de:aa:7e:7c:36:4c:3d:2a:82:31:33:1f: cf:60:27:fa:08:84:ec:77:3c:2e:cd:4b:c6:fb:05: cf:36:d6:38:05:1a:b8:38:1d:81:b8:26:62:68:10: 8e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:84:FA:0C:0C:95:CC:EF:43:51:EB:E6:28:68:3B:C5:EE:B1:E4:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f887e5eb-6d2b-3f53-b355-27b7d8e3978e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:82:34:57:4e:dc:f1:e0:e5:42:f5:25:0b:b7:76:95:e4:cf: e8:c3:31:19:b3:c5:67:af:43:3a:24:a9:07:7f:c9:b8:08:6a: 59:9e:a6:f1:b0:5b:a4:3f:0d:66:22:91:9d:bd:14:0d:9e:65: 9d:9b:d1:ad:24:7a:ab:b9:da:1a:15:64:62:5f:72:e9:65:66: 38:96:94:29:97:27:6b:01:8f:76:ae:bd:70:f9:4a:f9:e1:20: dd:97:37:a8:cd:d9:35:ec:1f:13:48:ba:69:18:ac:0f:30:22: f2:b4:dd:17:10:96:15:0d:c7:60:e6:e4:9a:72:3e:16:ae:a7: 10:d0:8b:32:b6:61:39:f7:6a:43:fb:f4:5e:d7:4f:c2:06:6e: 01:89:52:82:8c:3a:8e:24:3f:7c:3e:5d:1a:ba:2e:91:be:98: 60:c3:0c:7f:7d:8a:5c:a7:0b:f7:6e:85:1d:92:36:7e:43:d1: a6:06:95:c7:71:b2:6a:27:eb:f9:f6:10:f0:81:70:aa:23:6a: 37:f3:a0:83:1a:20:1a:06:2a:0f:39:9a:73:bd:c4:14:76:a1: 1e:7c:00:93:30:ca:38:ec:a4:b8:8a:46:30:31:f5:3e:d0:42: 77:54:71:3e:56:4c:6c:47:71:90:1b:73:70:dc:46:09:ce:a1: 0b:d3:24:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t8XNNaxkivJBuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MjNlMWU0MmMtZjY2OC00NTQxLTliYzEtZGNmZmY5NjMwYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31s22gHEks+M5Ua5q/kT3BiqYiBnhRzGM9us QPfIlenFgjpCiy14XoKotBKvQcis89co7s+SM0YMJLthVmgIm8jID5XEL6v3SKn0 qWbQ+IAGaQrwvTNVlfS5ukdUEl4yvTap8aqDryOUacunkDKJuuAp6BBu36GUlg5x bJpby77BGQNTPVKY+qZcL8SicS96FTVmMUs9aUShMAN6XQA7bYEDOrJijoaOvsdA rX4c/q8OVtwlyMhWgnfiGamMSMKEX/8wS4hdogXQX5cMlqkyD0eZ8+Peqn58Nkw9 KoIxMx/PYCf6CITsdzwuzUvG+wXPNtY4BRq4OB2BuCZiaBCOWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKE+gwMlczvQ1Hr5ihoO8XuseRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg4N2U1ZWItNmQyYi0z ZjUzLWIzNTUtMjdiN2Q4ZTM5NzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFYKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmCNFdO3PHg5UL1JQu3dpXkz+jDMRmzxWevQzokqQd/ybgIalmepvGw W6Q/DWYikZ29FA2eZZ2b0a0kequ52hoVZGJfcullZjiWlCmXJ2sBj3auvXD5Svnh IN2XN6jN2TXsHxNIumkYrA8wIvK03RcQlhUNx2Dm5JpyPhaupxDQizK2YTn3akP7 9F7XT8IGbgGJUoKMOo4kP3w+XRq6LpG+mGDDDH99ilynC/duhR2SNn5D0aYGlcdx smon6/n2EPCBcKojajfzoIMaIBoGKg85mnO9xBR2oR58AJMwyjjspLiKRjAx9T7Q QndUcT5WTGxHcZAbc3DcRgnOoQvTJL8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:55:02 2025 by rpki-client