$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4b9cf9-f35a-3d5b-8232-8298f788f3e1.roa File: 3a4b9cf9-f35a-3d5b-8232-8298f788f3e1.roa (raw, json) Hash identifier: pm+sX9iYV/0JINJq8sxMhSe4Z354un+R52ecGkMbsgc= Subject key identifier: DE:4A:D8:91:29:A6:23:2F:EF:F5:0F:C3:02:3F:7E:6D:BF:08:9F:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B8026A308F6C9535E0500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4b9cf9-f35a-3d5b-8232-8298f788f3e1.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 68.35.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:80:26:a3:08:f6:c9:53:5e:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=df6d0bdd-47fe-4311-b35e-87c2d311bcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:e0:b8:66:32:2b:2b:f5:7d:94:0e:dd:7f: e4:78:40:6e:cc:c0:92:3a:ea:cb:76:02:9e:a3:62: 53:2c:b7:fa:a7:ae:6c:93:6f:fa:c3:a7:97:93:d0: 1c:fe:6e:ff:d8:77:49:88:89:49:ab:c1:da:99:7c: 66:41:53:34:b6:83:12:ae:87:39:bd:07:ca:b7:f9: 6c:86:ee:30:06:42:a4:f7:c4:f7:b3:6d:89:61:45: 38:84:05:b9:d8:88:89:11:6d:5e:e6:9c:81:d1:5b: 81:f8:da:c6:5e:b4:24:09:8e:99:d1:b4:77:1d:09: 79:d9:c1:63:0f:4b:f7:8a:dc:af:16:86:6e:a8:95: 69:11:e1:a5:f6:d7:37:84:20:94:1c:60:a3:56:e5: 45:33:84:08:20:ff:5e:92:87:1c:b1:f2:67:e2:19: 6b:77:3c:19:4a:68:6e:0c:7d:a7:d7:08:01:6b:52: 2d:f7:44:2b:8a:18:f4:36:4f:25:f3:61:47:11:84: cc:7f:1e:83:58:1b:04:08:38:a9:94:59:25:f2:cf: 22:4e:2f:ee:a1:51:b3:e8:4f:87:a2:26:e0:60:b8: c9:41:96:29:cd:2a:14:1c:dc:51:d0:f2:43:e8:29: 07:0e:6d:b9:10:db:a7:e7:64:03:e1:55:9e:c4:4a: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4A:D8:91:29:A6:23:2F:EF:F5:0F:C3:02:3F:7E:6D:BF:08:9F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4b9cf9-f35a-3d5b-8232-8298f788f3e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.35.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1c:a6:1b:9f:b3:16:88:43:f6:d0:0c:02:f4:1f:7a:8c:d6: c8:f0:9a:4f:85:77:47:85:72:7c:19:a1:38:26:2d:11:0c:2d: 4c:82:42:12:5f:01:b8:80:2d:a2:da:71:c6:e4:f4:cd:98:47: c8:b9:80:ef:c2:b8:f6:21:29:78:df:2b:31:6c:0d:75:f0:66: 58:c8:70:11:73:cb:83:8f:cc:3c:3e:c8:14:a1:71:bc:24:24: 08:31:e7:39:76:ad:58:bd:03:c6:bc:9d:eb:c9:32:a5:20:21: ae:9b:23:0a:f3:7b:86:39:a6:42:c3:40:8c:5c:4d:d4:b0:fe: 91:eb:cb:ba:8b:c2:f1:2e:2a:90:fa:36:67:df:a9:7b:4d:b0: 99:9f:78:8d:87:f3:7d:bc:ae:c7:d2:91:59:cc:79:76:f4:74: d8:e2:28:13:01:2b:de:eb:54:16:62:34:22:70:55:5d:11:f9: 4b:e6:1f:8e:ab:6d:c4:f7:8d:f7:68:cc:a3:e4:39:c1:9d:8b: b4:57:82:b3:0f:16:1f:16:cb:4b:68:89:64:63:0d:c1:e0:bc: 32:fe:ea:cd:ac:0c:ce:66:bc:82:a4:8c:4f:dc:7b:c4:c0:c9: e5:00:31:b0:2d:0b:c7:ac:f9:74:0d:42:86:3c:9f:f6:9b:cb: e0:35:88:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC4Amowj2yVNeBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZGY2ZDBiZGQtNDdmZS00MzExLWIzNWUtODdjMmQzMTFiY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueXguGYyKyv1fZQO3X/keEBuzMCSOurLdgKe o2JTLLf6p65sk2/6w6eXk9Ac/m7/2HdJiIlJq8HamXxmQVM0toMSroc5vQfKt/ls hu4wBkKk98T3s22JYUU4hAW52IiJEW1e5pyB0VuB+NrGXrQkCY6Z0bR3HQl52cFj D0v3ityvFoZuqJVpEeGl9tc3hCCUHGCjVuVFM4QIIP9ekoccsfJn4hlrdzwZSmhu DH2n1wgBa1It90Qrihj0Nk8l82FHEYTMfx6DWBsECDiplFkl8s8iTi/uoVGz6E+H oibgYLjJQZYpzSoUHNxR0PJD6CkHDm25ENun52QD4VWexEoPxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5K2JEppiMv7/UPwwI/fm2/CJ9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E0YjljZjktZjM1YS0z ZDViLTgyMzItODI5OGY3ODhmM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCNyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUcphufsxaIQ/bQDAL0H3qM1sjwmk+Fd0eFcnwZoTgmLREMLUyCQhJf AbiALaLaccbk9M2YR8i5gO/CuPYhKXjfKzFsDXXwZljIcBFzy4OPzDw+yBShcbwk JAgx5zl2rVi9A8a8nevJMqUgIa6bIwrze4Y5pkLDQIxcTdSw/pHry7qLwvEuKpD6 NmffqXtNsJmfeI2H8328rsfSkVnMeXb0dNjiKBMBK97rVBZiNCJwVV0R+UvmH46r bcT3jfdozKPkOcGdi7RXgrMPFh8Wy0toiWRjDcHgvDL+6s2sDM5mvIKkjE/ce8TA yeUAMbAtC8es+XQNQoY8n/aby+A1iHY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:16:12 2025 by rpki-client