$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/402cffaa-bbca-33eb-a98a-540eb98f4a91.roa File: 402cffaa-bbca-33eb-a98a-540eb98f4a91.roa (raw, json) Hash identifier: YoFVUZShT9ovfPUuM0OLLOry4+j9gHGGzUa84e4aawE= Subject key identifier: B3:4B:5D:54:7F:78:57:0F:2C:73:55:43:D6:39:1B:3E:00:D9:78:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA71C25801876CF2A27A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/402cffaa-bbca-33eb-a98a-540eb98f4a91.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.60.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:71:c2:58:01:87:6c:f2:a2:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1823e33a-ba7c-4b70-bea2-1453ae2321d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:8c:a6:30:d3:b2:c5:af:38:07:78:2b:62: 24:cd:e3:1e:ee:2e:64:0f:a5:b5:45:72:66:1a:9f: 43:86:0a:8f:41:ab:e5:e5:18:1b:0f:16:12:51:be: 25:88:3c:ac:15:73:3c:6d:52:8a:2c:1b:78:9a:fc: 86:66:80:35:a9:14:17:e9:79:d6:67:1e:cf:4e:d6: 95:98:96:f6:b1:a0:35:6e:ac:f4:44:2e:d0:6d:fb: 43:1e:f0:8e:c4:42:78:c0:22:2a:58:28:07:7c:2a: f7:cc:a4:12:d1:56:f3:65:ea:38:3c:39:df:f8:24: fc:f7:c2:87:a7:0e:27:48:9f:40:94:dc:a9:a6:e5: d1:be:2f:72:fd:38:c9:03:2b:c9:0a:dd:b2:bf:50: ac:c9:49:e5:c7:b1:d2:94:b1:b1:0f:21:cb:f5:88: 33:50:fd:9a:12:f0:47:6e:35:c8:dd:0f:de:0d:a3: 68:1e:03:c6:d7:6c:03:86:e5:20:5c:12:d0:e6:a4: cd:e5:f9:eb:18:4f:eb:88:f1:e6:cc:4e:72:6b:5f: 48:0d:50:c9:4a:bb:ce:53:8f:37:08:8a:38:e4:5d: 99:55:01:ea:ef:be:f8:89:38:dd:df:ab:7c:91:ac: 54:29:a8:bb:f6:73:13:cd:0f:60:38:9c:15:5b:5d: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4B:5D:54:7F:78:57:0F:2C:73:55:43:D6:39:1B:3E:00:D9:78:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/402cffaa-bbca-33eb-a98a-540eb98f4a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6e:e3:cf:50:ab:78:d9:af:61:c2:9a:95:53:cc:3f:32:d3: eb:ba:48:af:d1:98:21:69:a5:d6:ee:03:02:aa:dd:06:4a:80: 32:5d:f1:a3:a2:aa:7f:99:8e:41:ed:37:eb:8e:f4:10:4d:6a: 0c:63:38:65:04:cc:de:e8:18:53:cd:fd:79:a9:24:38:ce:97: 7c:fa:54:1d:99:6a:8d:30:bb:36:77:11:a0:40:f3:87:b7:b1: 1c:be:7c:5b:90:c4:e9:4e:24:b8:84:eb:c0:f7:96:e2:77:82: d7:ac:2c:13:f5:39:a7:16:b0:9d:97:fd:dd:58:ef:bb:9b:f5: 2d:25:21:2c:fa:56:4f:b2:1b:c2:3a:d2:68:35:ca:2e:22:ad: 2e:d7:a4:b6:34:88:a6:c2:36:b3:cf:e8:f7:d8:a4:1c:36:eb: e1:dc:88:39:f2:58:19:5c:b0:ff:9d:60:05:b7:c8:fe:cf:15: 4b:39:a5:b2:86:b3:e2:8e:3b:76:f4:9e:f2:99:68:51:54:5a: 2e:11:2b:ad:62:ea:d3:00:4e:66:23:1c:46:2e:03:4e:43:90: 43:a4:44:a2:14:b2:7c:c3:36:42:f0:fa:78:1f:d7:4e:57:98: 9a:b3:64:04:c2:c5:76:30:c3:05:e5:a8:a4:9a:91:e3:a1:52: 40:d9:e4:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqnHCWAGHbPKiegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTgyM2UzM2EtYmE3Yy00YjcwLWJlYTItMTQ1M2FlMjMyMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky2MpjDTssWvOAd4K2IkzeMe7i5kD6W1RXJm Gp9DhgqPQavl5RgbDxYSUb4liDysFXM8bVKKLBt4mvyGZoA1qRQX6XnWZx7PTtaV mJb2saA1bqz0RC7QbftDHvCOxEJ4wCIqWCgHfCr3zKQS0VbzZeo4PDnf+CT898KH pw4nSJ9AlNyppuXRvi9y/TjJAyvJCt2yv1CsyUnlx7HSlLGxDyHL9YgzUP2aEvBH bjXI3Q/eDaNoHgPG12wDhuUgXBLQ5qTN5fnrGE/riPHmzE5ya19IDVDJSrvOU483 CIo45F2ZVQHq7774iTjd36t8kaxUKai79nMTzQ9gOJwVW11hBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNLXVR/eFcPLHNVQ9Y5Gz4A2XioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDAyY2ZmYWEtYmJjYS0z M2ViLWE5OGEtNTQwZWI5OGY0YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDw9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhu489Qq3jZr2HCmpVTzD8y0+u6SK/RmCFppdbuAwKq3QZKgDJd8aOi qn+ZjkHtN+uO9BBNagxjOGUEzN7oGFPN/XmpJDjOl3z6VB2Zao0wuzZ3EaBA84e3 sRy+fFuQxOlOJLiE68D3luJ3gtesLBP1OacWsJ2X/d1Y77ub9S0lISz6Vk+yG8I6 0mg1yi4irS7XpLY0iKbCNrPP6PfYpBw26+HciDnyWBlcsP+dYAW3yP7PFUs5pbKG s+KOO3b0nvKZaFFUWi4RK61i6tMATmYjHEYuA05DkEOkRKIUsnzDNkLw+ngf105X mJqzZATCxXYwwwXlqKSakeOhUkDZ5KE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:20:01 2025 by rpki-client