$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa File: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (raw, json) Hash identifier: zJxCwfOPp1JsmGlS4nP0SLOsL3ux3ZamPefgh7vEmWc= Subject key identifier: 60:66:31:9F:4C:2F:B4:CB:DD:E7:B5:06:1E:81:63:B4:D3:EC:6B:D8 Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F4328584B84E77E9B61E55C25F4CA7900 Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397293 IP address blocks: 68.69.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7e:9b:61:e5:5c:25:f4:ca:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=c19d590a-f88c-4905-a80c-3930996f1107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:e9:46:ca:6f:e4:5d:88:94:85:0c:5e:7b: f8:1a:d1:e2:e2:e4:cb:95:2d:d2:35:2b:bd:fc:6f: 41:b4:cc:08:2a:e3:d2:d6:6d:b0:f2:b8:54:66:4b: 21:e6:59:6c:9c:a0:55:32:7a:8e:11:d1:c1:61:8b: a8:58:6b:92:31:0b:8e:2c:87:de:b6:ea:eb:75:c7: 32:3b:2b:7e:e7:a0:b8:ff:84:72:f3:75:bb:5a:36: 42:79:8b:ab:ad:92:1c:52:da:a8:65:53:29:8e:5f: 27:c8:b4:47:f0:50:9b:31:e3:08:8c:4c:b5:88:b2: ed:f4:29:7b:b1:bc:cf:fd:4d:36:13:4d:7b:b6:53: d0:40:ba:8b:0c:0b:93:65:96:f3:ff:6b:b6:b3:ee: 6f:b0:64:03:a4:ce:0d:67:59:cd:24:a7:76:ad:04: c1:00:35:5a:29:c3:fe:f2:22:e8:b1:b1:56:5c:18: 54:78:eb:bd:cc:85:78:20:d4:9e:26:65:61:23:62: 33:0c:74:fc:bc:f8:18:b6:3c:70:7d:2e:88:4a:1c: 47:4e:9b:7e:a0:2a:2e:79:75:2b:38:60:48:36:71: 38:df:d1:b3:42:e1:e0:44:25:ac:64:68:e2:db:81: ae:38:b8:1a:a3:42:ed:55:c9:b8:8a:ab:b0:e0:85: 8d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:66:31:9F:4C:2F:B4:CB:DD:E7:B5:06:1E:81:63:B4:D3:EC:6B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: 68.69.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:99:af:31:62:ff:6c:02:99:68:c2:80:7b:c0:70:13:81:0e: cc:26:19:dd:c4:39:e7:b7:64:3b:28:28:d7:73:2a:39:8b:6c: 43:fa:a2:52:85:87:ff:2f:2b:1f:d9:df:88:82:05:44:99:d1: 6f:1b:5b:a8:db:59:22:a4:a7:20:56:2c:3e:84:2b:50:95:1b: ca:a9:16:b3:a7:6c:6d:13:e5:bb:c7:68:3b:98:54:7c:63:40: 95:39:0f:aa:98:64:12:6a:3f:5c:e8:d3:bd:c4:9e:45:79:92: fc:d2:f6:da:d5:42:07:9c:b1:1a:92:e9:af:06:3d:0d:53:e8: 44:88:41:22:19:7e:91:da:46:88:b3:9c:09:94:35:84:94:91: 64:40:5a:e9:41:c1:7a:8c:9b:b5:c6:5b:c8:16:df:a1:08:7f: 88:23:70:00:e8:a2:26:cc:f0:d3:d1:ee:fa:f0:a4:69:67:3d: 48:35:82:41:b8:ed:88:51:1f:57:54:b4:c6:b2:53:5e:83:5f: c6:93:e5:c0:59:d5:41:ea:d9:a5:9e:7b:e9:c3:39:0a:a7:5f: 0e:6a:1c:95:d0:db:e7:33:0c:78:29:9a:57:f7:dd:22:b3:68: 17:f1:84:59:0c:b4:d0:b3:13:2f:2a:28:46:5e:99:7d:aa:89: e0:30:a1:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE536bYeVcJfTKeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YzE5ZDU5MGEtZjg4Yy00OTA1LWE4MGMtMzkzMDk5NmYxMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVLpRspv5F2IlIUMXnv4GtHi4uTLlS3SNSu9 /G9BtMwIKuPS1m2w8rhUZksh5llsnKBVMnqOEdHBYYuoWGuSMQuOLIfeturrdccy Oyt+56C4/4Ry83W7WjZCeYurrZIcUtqoZVMpjl8nyLRH8FCbMeMIjEy1iLLt9Cl7 sbzP/U02E017tlPQQLqLDAuTZZbz/2u2s+5vsGQDpM4NZ1nNJKd2rQTBADVaKcP+ 8iLosbFWXBhUeOu9zIV4INSeJmVhI2IzDHT8vPgYtjxwfS6IShxHTpt+oCoueXUr OGBINnE439GzQuHgRCWsZGji24GuOLgao0LtVcm4iquw4IWNgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBmMZ9ML7TL3ee1Bh6BY7TT7GvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvOTViOTU0NDYtMDM1YS0z YjJiLWFlZmQtNzM0ZjNmYjVmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWZrzFi/2wCmWjCgHvAcBOBDswmGd3EOee3ZDsoKNdzKjmLbEP6olKF h/8vKx/Z34iCBUSZ0W8bW6jbWSKkpyBWLD6EK1CVG8qpFrOnbG0T5bvHaDuYVHxj QJU5D6qYZBJqP1zo073EnkV5kvzS9trVQgecsRqS6a8GPQ1T6ESIQSIZfpHaRoiz nAmUNYSUkWRAWulBwXqMm7XGW8gW36EIf4gjcADooibM8NPR7vrwpGlnPUg1gkG4 7YhRH1dUtMayU16DX8aT5cBZ1UHq2aWee+nDOQqnXw5qHJXQ2+czDHgpmlf33SKz aBfxhFkMtNCzEy8qKEZemX2qieAwoRw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:24:15 2025 by rpki-client