$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26258f0e-6b1c-3d9a-a8d0-715cd883a70d.roa File: 26258f0e-6b1c-3d9a-a8d0-715cd883a70d.roa (raw, json) Hash identifier: k6CCRmSIb3rNntEaIDBua+8Oi9ftevUX7t/J9lVEr4A= Subject key identifier: 67:4A:6B:29:D4:49:18:8F:68:F2:98:4D:AF:B7:09:65:38:97:7B:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8A81013855EFF472CD5C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26258f0e-6b1c-3d9a-a8d0-715cd883a70d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.32.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:a8:10:13:85:5e:ff:47:2c:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=6d6a558d-66d0-4a86-ad33-8a2c7e2b7077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f2:57:66:b2:5d:5a:eb:4f:d0:74:0b:db:53: 0a:10:6e:ce:f7:0b:5d:0b:d4:b2:cf:95:c8:7b:76: 1e:fb:9c:35:b7:d2:61:17:83:bf:f7:dc:f7:90:c9: e7:07:a6:2b:5b:ee:35:d1:32:98:fe:67:0d:b9:f6: d5:10:38:d6:eb:2a:ea:9a:19:e9:56:0c:fb:d5:71: 00:d5:b1:b6:c8:93:8d:66:1c:bc:7d:2e:b7:b0:af: 54:08:19:fe:d1:05:52:8f:5b:2b:8a:4b:4e:4e:59: 15:fa:c8:23:01:70:bd:eb:1e:44:83:91:70:e7:a5: 37:89:0d:06:a7:76:27:79:d4:9a:89:82:23:10:75: 13:cd:49:fb:2b:73:19:85:7c:12:1c:a4:97:fd:1e: f2:d9:6b:74:1a:c0:87:03:62:5c:2e:c0:5c:df:01: bc:c7:a7:b8:e4:29:f4:35:15:c4:c7:65:d9:aa:e8: 4b:6c:a4:60:ee:06:f1:d7:1a:ae:c7:aa:31:db:53: b3:a7:f9:0f:9e:ec:27:cc:28:71:f6:c2:57:5c:6e: 02:fb:b4:e1:b9:15:14:60:fd:6e:71:cd:d1:f8:a0: 13:c8:5e:92:68:6f:99:82:52:04:4e:1b:1c:90:8c: d7:37:cf:54:18:35:b9:a9:f5:15:c5:f4:f8:3e:4b: cd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4A:6B:29:D4:49:18:8F:68:F2:98:4D:AF:B7:09:65:38:97:7B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/26258f0e-6b1c-3d9a-a8d0-715cd883a70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:46:59:f0:2d:39:f2:dc:7c:a3:e6:3c:eb:d9:0f:ec:7e:56: 1c:5b:b6:6e:5d:25:06:c6:46:c9:75:84:ce:54:4d:51:88:78: 04:16:ad:87:4a:c7:5a:21:49:3d:c4:54:d5:70:65:e5:3e:02: 14:4e:2e:5b:6f:3b:a4:28:7b:f1:c8:ad:81:6b:dc:b7:97:cb: 47:6b:72:a2:cd:c6:0a:ea:be:28:29:4e:7b:35:32:0a:97:3b: 57:6c:dd:1c:0a:ce:d7:6b:a9:ca:8b:e0:26:54:f8:45:b3:33: e5:d2:89:99:fa:1e:93:37:78:53:53:1c:08:d5:52:4e:bc:87: fa:11:11:cc:52:8e:5f:62:7d:b7:d4:0e:47:16:72:67:60:85: 4e:61:31:8d:c3:75:ae:7c:cd:60:fe:5f:e1:58:86:0d:0b:40: 85:b2:2e:2b:8c:1c:00:05:55:af:cb:c3:7f:ef:44:72:59:12: 90:d5:06:40:ef:fc:19:bb:68:b4:55:40:a9:83:0d:6d:20:61: ad:c7:81:9d:08:9f:a9:c2:f0:a8:da:ee:8b:6a:10:e8:b4:e9: 24:7f:75:58:1e:c0:5a:35:db:98:3d:00:2c:48:be:a4:f0:f2: 99:59:8b:bd:4b:0f:c4:96:0c:d9:a3:bc:ed:40:ae:6f:be:b0: e0:80:a7:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqKgQE4Ve/0cs1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NmQ2YTU1OGQtNjZkMC00YTg2LWFkMzMtOGEyYzdlMmI3MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PJXZrJdWutP0HQL21MKEG7O9wtdC9Syz5XI e3Ye+5w1t9JhF4O/99z3kMnnB6YrW+410TKY/mcNufbVEDjW6yrqmhnpVgz71XEA 1bG2yJONZhy8fS63sK9UCBn+0QVSj1sriktOTlkV+sgjAXC96x5Eg5Fw56U3iQ0G p3YnedSaiYIjEHUTzUn7K3MZhXwSHKSX/R7y2Wt0GsCHA2JcLsBc3wG8x6e45Cn0 NRXEx2XZquhLbKRg7gbx1xqux6ox21Ozp/kPnuwnzChx9sJXXG4C+7ThuRUUYP1u cc3R+KATyF6SaG+ZglIEThsckIzXN89UGDW5qfUVxfT4PkvNnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdKaynUSRiPaPKYTa+3CWU4l3uCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjYyNThmMGUtNmIxYy0z ZDlhLWE4ZDAtNzE1Y2Q4ODNhNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5GWfAtOfLcfKPmPOvZD+x+Vhxbtm5dJQbGRsl1hM5UTVGIeAQWrYdK x1ohST3EVNVwZeU+AhROLltvO6Qoe/HIrYFr3LeXy0drcqLNxgrqvigpTns1MgqX O1ds3RwKztdrqcqL4CZU+EWzM+XSiZn6HpM3eFNTHAjVUk68h/oREcxSjl9ifbfU DkcWcmdghU5hMY3Dda58zWD+X+FYhg0LQIWyLiuMHAAFVa/Lw3/vRHJZEpDVBkDv /Bm7aLRVQKmDDW0gYa3HgZ0In6nC8Kja7otqEOi06SR/dVgewFo125g9ACxIvqTw 8plZi71LD8SWDNmjvO1Arm++sOCApzc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:41:10 2025 by rpki-client