$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bd375ef-faca-3f8d-8b53-3cd7e321a952.roa File: 5bd375ef-faca-3f8d-8b53-3cd7e321a952.roa (raw, json) Hash identifier: 337sxTLyE1z3q2NQC7R9Trv0uRsyaNWGlUti9ZKOY78= Subject key identifier: 89:5A:9B:26:1D:46:55:3E:AC:9C:F5:23:D3:5F:4F:B8:2A:06:92:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA53DFB065074CE7DCD080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bd375ef-faca-3f8d-8b53-3cd7e321a952.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.36.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:53:df:b0:65:07:4c:e7:dc:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7fe09109-3d6e-42c0-9129-a6ec67364b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:98:47:19:7a:06:e1:51:ae:03:a7:7e:b9:a1: 02:35:46:bd:15:ca:78:a2:b2:de:16:48:b5:1e:c7: 29:43:63:62:82:d4:ae:94:2d:36:3f:bd:3c:f9:73: f7:af:1b:24:9d:3c:77:58:55:4e:d8:a3:d4:45:8d: cd:53:16:1b:20:04:58:77:8d:f8:fe:7a:f2:d5:0e: 0a:ca:44:a2:5f:05:00:55:1c:d2:ee:f5:64:2b:f1: 1f:10:9f:81:f1:c5:88:b7:c1:1e:e5:49:6a:be:25: 0f:6b:b6:4f:e2:45:f9:8f:47:6a:9b:2c:3d:3d:d0: 04:ba:11:37:1d:e5:e6:59:1e:30:d6:ad:40:03:26: a8:4c:d5:12:14:60:12:71:7e:31:b6:fc:db:af:f3: 7c:b6:ac:f3:74:24:6f:e4:5f:8c:bd:d1:ff:28:fa: b6:19:54:70:12:27:13:74:fc:b8:d4:ec:bc:a3:91: 58:01:6d:d3:3a:dd:91:4a:1d:13:5a:58:8a:f0:16: 6d:63:84:0a:2b:a8:65:c3:c6:bb:ac:4d:f0:e8:ab: 88:b3:cc:29:51:ac:ab:17:22:86:10:5d:14:5c:46: d9:f5:65:a1:c1:bf:27:b0:8a:40:57:ae:35:5c:1b: 63:d6:d7:c3:3f:57:62:14:7c:d8:14:0d:8b:fe:f0: 85:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5A:9B:26:1D:46:55:3E:AC:9C:F5:23:D3:5F:4F:B8:2A:06:92:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bd375ef-faca-3f8d-8b53-3cd7e321a952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f8:aa:b7:ee:cf:24:09:8c:e5:67:a9:1d:6c:20:fd:e6:1d: 5c:78:b2:47:3c:01:60:ac:8b:97:e8:e9:b2:54:d0:cb:b4:b8: 22:90:d4:d7:e8:14:ad:58:d0:34:9e:68:f6:da:8d:a5:31:6f: c8:fe:7e:74:c9:99:ea:b0:eb:c7:a6:76:1b:5e:e0:ad:12:fe: c0:ea:b2:b6:49:e0:ef:57:41:af:8c:ae:6b:d9:bc:63:b5:41: ec:8b:ab:8d:64:01:94:f5:eb:03:a4:c1:4b:84:14:65:a2:26: f1:b6:30:b7:42:f1:ae:b9:62:0c:5b:d8:9e:3a:6e:db:36:22: 98:ba:f2:86:4b:b8:b0:bf:2d:ae:f8:b4:4f:1f:20:f9:1f:ea: 69:c9:f8:8e:bb:65:5f:c1:1c:a5:bc:2f:39:13:70:3a:20:b6: 94:90:1f:8f:c4:31:a8:c2:2b:53:c2:93:76:9f:a3:28:08:33: dd:51:d6:28:08:d2:3a:14:44:ae:88:d9:ac:4e:57:c1:84:cb: 2a:8c:9e:42:6b:59:58:60:96:a4:88:ef:9a:cd:2e:23:77:87: 29:87:2c:16:0e:ca:33:ab:cf:95:53:91:3d:9e:49:43:fc:11: f6:60:b9:f6:fb:ec:f1:87:d0:ba:13:c7:aa:3f:6b:e1:bc:f2: aa:b5:ff:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlPfsGUHTOfc0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2ZlMDkxMDktM2Q2ZS00MmMwLTkxMjktYTZlYzY3MzY0YjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5hHGXoG4VGuA6d+uaECNUa9Fcp4orLeFki1 HscpQ2NigtSulC02P708+XP3rxsknTx3WFVO2KPURY3NUxYbIARYd434/nry1Q4K ykSiXwUAVRzS7vVkK/EfEJ+B8cWIt8Ee5UlqviUPa7ZP4kX5j0dqmyw9PdAEuhE3 HeXmWR4w1q1AAyaoTNUSFGAScX4xtvzbr/N8tqzzdCRv5F+MvdH/KPq2GVRwEicT dPy41Oy8o5FYAW3TOt2RSh0TWliK8BZtY4QKK6hlw8a7rE3w6KuIs8wpUayrFyKG EF0UXEbZ9WWhwb8nsIpAV641XBtj1tfDP1diFHzYFA2L/vCF5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlamyYdRlU+rJz1I9NfT7gqBpK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJkMzc1ZWYtZmFjYS0z ZjhkLThiNTMtM2NkN2UzMjFhOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED4qrfuzyQJjOVnqR1sIP3mHVx4skc8AWCsi5fo6bJU0Mu0uCKQ1Nfo FK1Y0DSeaPbajaUxb8j+fnTJmeqw68emdhte4K0S/sDqsrZJ4O9XQa+MrmvZvGO1 QeyLq41kAZT16wOkwUuEFGWiJvG2MLdC8a65Ygxb2J46bts2Ipi68oZLuLC/La74 tE8fIPkf6mnJ+I67ZV/BHKW8LzkTcDogtpSQH4/EMajCK1PCk3afoygIM91R1igI 0joURK6I2axOV8GEyyqMnkJrWVhglqSI75rNLiN3hymHLBYOyjOrz5VTkT2eSUP8 EfZgufb77PGH0LoTx6o/a+G88qq1/08= -----END CERTIFICATE-----Generated at Wed Nov 5 07:36:10 2025 by rpki-client