$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4650e4fc-3542-3171-bbc6-9f13eafa4a61.roa File: 4650e4fc-3542-3171-bbc6-9f13eafa4a61.roa (raw, json) Hash identifier: V/0mtRVJ25VSlc4P9fXDFMxRXPyJiGjedXMFZho1ogc= Subject key identifier: F7:AB:F5:C1:52:F1:07:15:4F:4C:1A:AF:FD:30:DC:30:E0:E9:DB:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA6A938E1944B2193EEE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4650e4fc-3542-3171-bbc6-9f13eafa4a61.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.55.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:6a:93:8e:19:44:b2:19:3e:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8a3dca31-7092-4093-984d-6797980cd4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:f4:4f:25:36:c4:10:c8:f8:90:88:ff:cb: 06:1a:35:7c:ae:51:2d:58:84:62:53:6c:80:04:03: 77:a8:03:d4:16:e7:04:d4:65:20:e6:d3:15:ba:fb: 8f:80:37:e7:a6:be:77:08:ad:c0:4c:5c:c4:f4:56: a6:8e:a4:4c:3e:0d:a0:55:7d:5c:c5:cf:f9:1f:ad: 22:7e:84:30:9b:6a:c3:ef:12:36:27:69:b2:f5:c1: 03:fd:99:be:0e:24:49:15:36:d2:53:93:5a:fc:ca: ce:a9:5d:ba:a8:4e:24:29:0c:ca:46:02:54:71:72: 3e:bf:0e:14:39:e7:b8:0e:f6:e0:28:50:9c:9b:e8: 43:4e:ed:27:1c:61:e1:1b:51:6c:80:fb:53:8f:7a: 43:29:43:b2:44:99:41:e3:9a:36:e1:3b:8e:1a:53: 47:eb:43:42:08:a4:38:a2:f9:13:b9:19:bd:63:ed: f7:e0:dc:ad:7c:3f:24:27:11:cc:24:ff:fd:19:0f: 99:db:ce:ac:e1:92:f3:01:98:03:ef:65:d9:37:3c: 72:f9:d2:70:d8:0f:8e:4f:5d:a0:de:f4:36:60:df: c4:1e:09:48:c8:38:8f:59:5b:9a:0d:e8:fa:af:a3: bd:bb:6b:bc:79:f3:8b:82:29:bb:5b:a9:26:74:43: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AB:F5:C1:52:F1:07:15:4F:4C:1A:AF:FD:30:DC:30:E0:E9:DB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4650e4fc-3542-3171-bbc6-9f13eafa4a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.55.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:55:c9:96:8d:03:90:59:3e:4c:b1:c5:5f:64:9d:91:a5:d5: 0e:75:6e:ea:76:8f:a9:7b:72:fc:48:00:d8:82:ae:2e:37:8c: 5b:e5:c7:27:bb:96:66:91:dc:4e:df:7d:8f:0b:be:8b:55:d1: 22:be:51:c6:7e:e0:ad:25:1d:cb:70:60:6c:05:c4:96:e1:11: 62:3c:a5:56:66:a3:3f:6c:91:55:18:a4:12:6c:d4:d6:26:d6: 18:90:f5:36:7b:9d:40:67:a0:95:2d:c2:eb:d9:3a:50:56:10: f1:a5:56:a7:c5:c4:c7:63:95:4e:ac:b1:ae:a3:3e:65:43:93: a3:d6:45:9e:6c:a4:33:cf:d6:17:c4:2c:81:dd:03:0c:0c:d1: 79:ae:f5:e0:65:64:09:b0:f9:c3:29:82:cf:11:93:fd:ff:2d: 17:77:1c:38:c7:6b:3a:a3:4f:c6:4a:11:e2:15:f7:a6:d3:66: b9:a6:e8:e7:04:0c:c0:75:61:6a:7e:b2:74:ee:ff:ca:82:2e: 68:19:e7:97:bc:b7:48:06:0b:db:1f:10:f0:22:60:3e:ca:bb: ac:a9:a1:8a:79:ee:61:53:89:f8:af:c2:7a:46:a3:4a:3d:80: f5:0f:e8:5a:5c:63:33:a0:a4:0e:f3:db:53:71:85:98:f9:39: 83:58:18:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqmqTjhlEshk+7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGEzZGNhMzEtNzA5Mi00MDkzLTk4NGQtNjc5Nzk4MGNkNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA30TyU2xBDI+JCI/8sGGjV8rlEtWIRiU2yA BAN3qAPUFucE1GUg5tMVuvuPgDfnpr53CK3ATFzE9FamjqRMPg2gVX1cxc/5H60i foQwm2rD7xI2J2my9cED/Zm+DiRJFTbSU5Na/MrOqV26qE4kKQzKRgJUcXI+vw4U Oee4DvbgKFCcm+hDTu0nHGHhG1FsgPtTj3pDKUOyRJlB45o24TuOGlNH60NCCKQ4 ovkTuRm9Y+334NytfD8kJxHMJP/9GQ+Z286s4ZLzAZgD72XZNzxy+dJw2A+OT12g 3vQ2YN/EHglIyDiPWVuaDej6r6O9u2u8efOLgim7W6kmdEMChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPer9cFS8QcVT0war/0w3DDg6dtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDY1MGU0ZmMtMzU0Mi0z MTcxLWJiYzYtOWYxM2VhZmE0YTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNVyZaNA5BZPkyxxV9knZGl1Q51bup2j6l7cvxIANiCri43jFvlxye7 lmaR3E7ffY8LvotV0SK+UcZ+4K0lHctwYGwFxJbhEWI8pVZmoz9skVUYpBJs1NYm 1hiQ9TZ7nUBnoJUtwuvZOlBWEPGlVqfFxMdjlU6ssa6jPmVDk6PWRZ5spDPP1hfE LIHdAwwM0Xmu9eBlZAmw+cMpgs8Rk/3/LRd3HDjHazqjT8ZKEeIV96bTZrmm6OcE DMB1YWp+snTu/8qCLmgZ55e8t0gGC9sfEPAiYD7Ku6ypoYp57mFTifivwnpGo0o9 gPUP6FpcYzOgpA7z21NxhZj5OYNYGCQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:59:14 2025 by rpki-client