$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bd47899-33ef-33f4-a0bb-069dad5ea39c.roa File: 4bd47899-33ef-33f4-a0bb-069dad5ea39c.roa (raw, json) Hash identifier: qi4bORR0ALBvHq46l+RCwiztkXPnW6PK88esv+ci6hw= Subject key identifier: 4B:5F:3C:08:C9:9C:54:0D:47:95:A2:E6:2D:9C:2C:0C:47:40:0B:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA5412A2EE578100089A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bd47899-33ef-33f4-a0bb-069dad5ea39c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.36.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:54:12:a2:ee:57:81:00:08:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=84378776-63cf-4941-8741-19f7e542e2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5f:38:07:f2:fe:37:f9:f6:a0:02:89:78:b8: c1:e3:47:66:f0:b8:39:1d:bd:60:4c:a0:2d:89:1f: a1:45:4f:4f:b3:d8:a8:65:35:65:de:c1:11:2c:6a: 9f:ca:ad:43:82:52:e9:5e:3f:8a:ac:e9:93:1c:6e: 66:36:7e:7b:e8:57:3e:fe:89:0a:68:3a:a7:27:0a: ac:93:62:54:db:44:d1:09:93:7a:04:a3:92:68:6c: 17:cc:68:d8:d8:eb:25:f4:89:bf:eb:d0:11:4c:84: c1:44:c9:06:1e:bb:7f:55:59:05:a3:27:a3:c4:fe: b9:e1:90:42:6f:35:23:96:db:61:0b:9b:1c:93:d6: 1b:99:b5:cf:2e:45:2a:25:f4:c1:56:f2:86:8d:ac: 4b:2f:90:77:bd:db:e9:cf:e7:ed:66:cf:45:1a:57: ab:b3:a5:6c:34:a6:48:be:ff:da:f9:50:68:7d:cf: 99:06:3e:2f:a5:69:24:42:23:4f:99:9e:c0:ba:cf: e4:12:1e:0e:87:77:52:aa:d3:19:28:b9:54:84:9f: 3b:51:48:aa:f6:0e:04:d3:e5:e5:23:56:b9:fa:b6: 1d:cb:d7:5c:4b:be:62:6a:86:06:f9:90:7e:7d:71: 9e:b3:2a:95:1f:d9:cb:10:b6:65:6c:ab:3d:7c:6f: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5F:3C:08:C9:9C:54:0D:47:95:A2:E6:2D:9C:2C:0C:47:40:0B:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bd47899-33ef-33f4-a0bb-069dad5ea39c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4f:e4:64:92:75:6e:a9:e3:0b:e8:18:e3:96:f6:df:2a:8b: 6f:82:48:63:35:ae:b1:85:91:f5:04:50:43:f9:9d:a8:02:52: 4c:8c:e2:26:0d:84:72:61:5e:20:f9:55:80:cd:68:4c:6b:c3: db:51:f5:0c:54:4e:42:d5:2e:7d:24:c3:6d:37:fa:19:cd:98: 68:9d:41:85:36:c2:5d:a0:2f:22:3c:4b:43:cb:6e:05:71:61: fc:77:aa:32:85:1c:c4:5a:ed:4b:61:72:0a:2e:9c:9a:1a:4b: 86:18:fe:24:af:55:ed:5b:0a:95:94:72:3c:9e:90:b0:8a:6f: 5e:17:ba:37:5e:d0:79:62:33:b8:4e:38:07:1b:0a:f2:65:ec: a4:3c:a3:6a:7d:73:0c:c6:55:3d:21:96:28:82:f4:da:43:7d: 1d:6b:73:91:be:0d:22:4c:a3:37:1c:59:74:8b:3e:07:42:e0: e8:b6:ee:c9:3f:ef:23:c4:a5:6a:5c:5b:18:b2:af:11:50:08: 51:08:57:0c:51:1c:97:7c:ea:be:86:10:5a:d2:20:02:7a:26: 49:13:03:81:08:08:95:0e:f4:6b:94:8c:ea:9d:ab:ee:fa:80: 1d:10:24:46:f9:7f:1b:d1:da:c2:f4:63:3b:c3:93:e1:28:ad: 71:74:83:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlQSou5XgQAImkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODQzNzg3NzYtNjNjZi00OTQxLTg3NDEtMTlmN2U1NDJlMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF84B/L+N/n2oAKJeLjB40dm8Lg5Hb1gTKAt iR+hRU9Ps9ioZTVl3sERLGqfyq1DglLpXj+KrOmTHG5mNn576Fc+/okKaDqnJwqs k2JU20TRCZN6BKOSaGwXzGjY2Osl9Im/69ARTITBRMkGHrt/VVkFoyejxP654ZBC bzUjltthC5sck9YbmbXPLkUqJfTBVvKGjaxLL5B3vdvpz+ftZs9FGlers6VsNKZI vv/a+VBofc+ZBj4vpWkkQiNPmZ7Aus/kEh4Oh3dSqtMZKLlUhJ87UUiq9g4E0+Xl I1a5+rYdy9dcS75iaoYG+ZB+fXGesyqVH9nLELZlbKs9fG8vRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtfPAjJnFQNR5Wi5i2cLAxHQAvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGJkNDc4OTktMzNlZi0z M2Y0LWEwYmItMDY5ZGFkNWVhMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9P5GSSdW6p4wvoGOOW9t8qi2+CSGM1rrGFkfUEUEP5nagCUkyM4iYN hHJhXiD5VYDNaExrw9tR9QxUTkLVLn0kw203+hnNmGidQYU2wl2gLyI8S0PLbgVx Yfx3qjKFHMRa7UthcgounJoaS4YY/iSvVe1bCpWUcjyekLCKb14Xujde0HliM7hO OAcbCvJl7KQ8o2p9cwzGVT0hliiC9NpDfR1rc5G+DSJMozccWXSLPgdC4Oi27sk/ 7yPEpWpcWxiyrxFQCFEIVwxRHJd86r6GEFrSIAJ6JkkTA4EICJUO9GuUjOqdq+76 gB0QJEb5fxvR2sL0YzvDk+EorXF0g5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 05:21:34 2025 by rpki-client