$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/638e2ea3-588f-384c-aec2-21d9767e3fef.roa File: 638e2ea3-588f-384c-aec2-21d9767e3fef.roa (raw, json) Hash identifier: FPtFUO7mCOZKBFP7qGik8Oocjwp66SjlZ+RIoeztTYs= Subject key identifier: C3:EC:AD:34:63:8A:C3:E0:2B:75:36:BF:53:93:2A:A1:B7:AF:D8:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB91E58457171A37151A960 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/638e2ea3-588f-384c-aec2-21d9767e3fef.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33489 IP address blocks: 68.86.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:1e:58:45:71:71:a3:71:51:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=96b6075a-ffc6-40bd-a463-f1bcb69e0fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:eb:d6:a0:f6:ae:ec:da:a5:c0:8d:c7:0d: 41:60:97:0e:66:86:df:2c:3e:c0:50:d8:ed:6f:5d: 22:25:8c:1c:13:44:8d:6e:be:99:b0:0a:75:8e:70: ca:2a:84:77:45:f7:32:dd:7b:10:1d:64:45:89:5e: 42:bf:5c:76:56:98:e1:2f:58:a0:7f:70:b9:be:f2: ff:b5:b5:67:46:f8:79:d7:36:92:10:62:8e:0a:1a: 30:a3:91:ec:5e:59:35:f2:df:c4:21:4b:26:a7:61: 3f:fa:1a:4b:d4:38:d0:76:8b:96:e0:78:c0:bc:cc: 07:be:94:14:b0:31:0b:cb:6b:7a:86:5a:66:8c:c2: da:ba:f9:90:c2:84:c5:79:a3:d6:62:8d:d3:fb:93: 30:c2:47:22:6f:1d:05:39:07:e1:90:37:a7:26:94: 2e:a7:6b:86:26:5d:bc:5f:76:e3:a3:03:ab:cb:dd: 5e:97:a0:d8:9c:bf:9f:7b:e7:08:78:68:ae:5d:d3: 0b:1e:93:db:09:06:5a:77:d4:f0:6a:6a:7f:68:5a: cd:c5:e8:dc:97:08:2b:01:72:d9:9c:40:f1:c0:77: 61:18:10:d0:1d:6f:8c:95:b0:47:57:ea:a7:1e:07: 90:bf:5d:1f:0f:69:76:20:62:df:7a:50:a6:3c:12: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EC:AD:34:63:8A:C3:E0:2B:75:36:BF:53:93:2A:A1:B7:AF:D8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/638e2ea3-588f-384c-aec2-21d9767e3fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:4f:00:39:db:e0:93:55:a5:01:4b:0b:e0:9e:09:ca:e6:73: 70:91:c0:93:3c:e7:84:c3:49:7d:6d:57:9b:ed:62:56:e0:9d: b5:ff:cd:13:16:6f:34:dc:b2:79:8c:d3:43:47:cf:df:0e:0e: 0c:bb:63:14:dc:3d:15:45:e6:8c:ce:a7:89:4a:c9:c8:fc:66: 02:8b:87:76:61:a9:c6:53:33:d5:59:8e:dd:78:85:cb:8b:f2: c1:d6:d4:86:b7:67:94:c1:62:3b:c6:ac:9b:78:0f:3e:c6:8a: 67:65:6a:44:13:e5:95:a3:25:ec:70:e9:ee:00:e4:c0:d5:e8: 28:c0:14:89:eb:41:fa:a6:9d:ef:e4:af:fe:72:fa:c8:b7:ce: 1d:5c:23:ba:6d:93:cc:a4:1d:44:44:69:62:96:f0:a8:77:30: ad:71:5f:b6:09:00:34:84:0c:c7:43:ba:47:f3:45:85:77:81: bf:2a:8a:18:d8:db:27:8c:c4:ba:1d:05:9a:dc:bb:ef:df:93: e3:36:dc:c4:8a:b3:73:5e:9d:ef:56:a8:95:1b:8f:dc:ee:5c: 99:49:84:e4:44:b4:b5:af:8d:fc:ef:35:0c:24:b2:f4:ee:7e: 42:7f:10:98:87:de:ff:1f:26:e6:47:34:52:04:22:36:18:91: b6:a1:81:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uR5YRXFxo3FRqWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTZiNjA3NWEtZmZjNi00MGJkLWE0NjMtZjFiY2I2OWUwZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF/r1qD2ruzapcCNxw1BYJcOZobfLD7AUNjt b10iJYwcE0SNbr6ZsAp1jnDKKoR3Rfcy3XsQHWRFiV5Cv1x2VpjhL1igf3C5vvL/ tbVnRvh51zaSEGKOChowo5HsXlk18t/EIUsmp2E/+hpL1DjQdouW4HjAvMwHvpQU sDELy2t6hlpmjMLauvmQwoTFeaPWYo3T+5Mwwkcibx0FOQfhkDenJpQup2uGJl28 X3bjowOry91el6DYnL+fe+cIeGiuXdMLHpPbCQZad9Twamp/aFrNxejclwgrAXLZ nEDxwHdhGBDQHW+MlbBHV+qnHgeQv10fD2l2IGLfelCmPBLuwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPsrTRjisPgK3U2v1OTKqG3r9g0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjM4ZTJlYTMtNTg4Zi0z ODRjLWFlYzItMjFkOTc2N2UzZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFPADnb4JNVpQFLC+CeCcrmc3CRwJM854TDSX1tV5vtYlbgnbX/zRMW bzTcsnmM00NHz98ODgy7YxTcPRVF5ozOp4lKycj8ZgKLh3ZhqcZTM9VZjt14hcuL 8sHW1Ia3Z5TBYjvGrJt4Dz7GimdlakQT5ZWjJexw6e4A5MDV6CjAFInrQfqmne/k r/5y+si3zh1cI7ptk8ykHUREaWKW8Kh3MK1xX7YJADSEDMdDukfzRYV3gb8qihjY 2yeMxLodBZrcu+/fk+M23MSKs3Nene9WqJUbj9zuXJlJhOREtLWvjfzvNQwksvTu fkJ/EJiH3v8fJuZHNFIEIjYYkbahgRQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:08 2025 by rpki-client