$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5969e741-177c-30ad-bd7f-d6a631394312.roa File: 5969e741-177c-30ad-bd7f-d6a631394312.roa (raw, json) Hash identifier: Hq4ejHxRdvQyzZXHEcXYooKevxL2tLOt/8xY/1ML+TI= Subject key identifier: 5A:28:B1:90:88:66:97:19:EC:12:ED:B4:E6:2C:15:CE:F8:4B:56:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7AF852815BBB436204000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5969e741-177c-30ad-bd7f-d6a631394312.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 67.168.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:af:85:28:15:bb:b4:36:20:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4d4fd3a2-ac08-4500-9f24-ade0c322b63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:02:41:91:59:ae:d7:e4:73:a4:f3:f6:e5: 9f:26:a9:77:4a:12:72:e6:b6:18:4a:11:8d:41:54: 0f:5f:1c:af:f6:2a:01:94:ea:f9:fc:fa:f6:42:a0: 2a:94:39:5e:7f:43:fb:97:e5:75:04:da:ee:20:3f: 8f:5e:ef:c7:4e:5c:98:55:bb:f0:66:e3:a4:93:dc: 48:ab:01:64:ca:73:03:22:c7:dd:8a:e4:ba:80:ed: 52:dd:9a:f2:18:19:5d:7e:90:ed:2c:81:9a:ad:6c: 56:da:ee:57:b7:df:60:e9:0c:18:ae:85:f2:f9:d5: cc:d7:80:c5:80:cb:5b:af:ab:73:8c:02:e8:f6:c3: 40:a2:22:2e:fa:93:94:3b:a1:57:4d:39:38:ce:d4: 94:7a:6d:31:f5:46:06:82:25:74:57:da:b7:3f:ed: 1a:79:a4:27:b2:75:d5:82:7b:d3:4a:0b:78:fc:dc: 8e:9e:f5:2f:57:3a:f7:bb:d0:3f:84:a7:be:95:9b: 20:ad:ee:73:ee:a3:f5:94:0d:0b:c2:f3:41:36:0b: 28:0c:05:a0:08:2e:c9:d2:64:4f:ac:ab:d4:be:71: 89:ab:89:59:2d:62:99:b1:29:fd:1d:22:b7:da:34: 10:a0:9a:99:1e:48:16:6e:82:21:79:27:0f:6f:01: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:28:B1:90:88:66:97:19:EC:12:ED:B4:E6:2C:15:CE:F8:4B:56:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5969e741-177c-30ad-bd7f-d6a631394312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.168.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4f:f8:b8:93:59:d4:fd:c5:f8:79:82:ff:85:8a:74:87:6c: ad:1f:7f:00:68:ef:b7:73:11:16:36:f8:6b:17:96:f8:83:10: 4d:9b:08:e8:37:8a:4e:31:8a:4a:21:4c:01:d0:7f:99:45:53: 26:99:7e:d1:00:f9:51:04:16:0c:74:04:86:27:64:ba:36:11: 6c:e9:37:96:6a:82:0b:ca:0f:cf:05:be:cd:7e:ee:c3:7f:e6: 23:54:5f:93:3d:82:03:c3:3f:69:eb:c0:3a:e9:df:5c:4c:9a: a9:3d:8a:94:8c:8d:8c:ef:03:13:88:39:85:c9:99:78:f5:04: a8:65:c0:5a:62:30:9d:97:e4:22:ec:bf:4e:58:3d:06:ed:21: a9:56:a9:5c:3f:0d:98:2d:d4:e7:31:94:06:a4:0a:e6:b2:4f: dd:b9:21:e5:eb:ad:cc:0c:6d:ec:4e:69:66:c8:27:89:a3:cc: 83:79:2e:d5:c4:bf:61:8a:70:60:26:f4:56:44:9c:0e:ec:df: c6:da:bd:eb:c1:74:1c:90:54:26:09:72:ac:b8:81:c7:82:97: 75:a6:8b:a9:52:04:6f:c7:54:a0:14:bf:d9:62:0e:fb:eb:16: 5f:0a:08:81:e3:74:17:97:c2:d0:b0:40:f4:b9:4e:d3:44:fe: 4a:e9:8f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6+FKBW7tDYgQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGQ0ZmQzYTItYWMwOC00NTAwLTlmMjQtYWRlMGMzMjJiNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn40CQZFZrtfkc6Tz9uWfJql3ShJy5rYYShGN QVQPXxyv9ioBlOr5/Pr2QqAqlDlef0P7l+V1BNruID+PXu/HTlyYVbvwZuOkk9xI qwFkynMDIsfdiuS6gO1S3ZryGBldfpDtLIGarWxW2u5Xt99g6QwYroXy+dXM14DF gMtbr6tzjALo9sNAoiIu+pOUO6FXTTk4ztSUem0x9UYGgiV0V9q3P+0aeaQnsnXV gnvTSgt4/NyOnvUvVzr3u9A/hKe+lZsgre5z7qP1lA0LwvNBNgsoDAWgCC7J0mRP rKvUvnGJq4lZLWKZsSn9HSK32jQQoJqZHkgWboIheScPbwGMRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoosZCIZpcZ7BLttOYsFc74S1bjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTk2OWU3NDEtMTc3Yy0z MGFkLWJkN2YtZDZhNjMxMzk0MzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ6jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdP+LiTWdT9xfh5gv+FinSHbK0ffwBo77dzERY2+GsXlviDEE2bCOg3 ik4xikohTAHQf5lFUyaZftEA+VEEFgx0BIYnZLo2EWzpN5ZqggvKD88Fvs1+7sN/ 5iNUX5M9ggPDP2nrwDrp31xMmqk9ipSMjYzvAxOIOYXJmXj1BKhlwFpiMJ2X5CLs v05YPQbtIalWqVw/DZgt1OcxlAakCuayT925IeXrrcwMbexOaWbIJ4mjzIN5LtXE v2GKcGAm9FZEnA7s38bavevBdByQVCYJcqy4gceCl3Wmi6lSBG/HVKAUv9liDvvr Fl8KCIHjdBeXwtCwQPS5TtNE/krpjwY= -----END CERTIFICATE-----Generated at Wed Nov 5 16:10:06 2025 by rpki-client