$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68e86b56-87f4-319b-b780-0d5300f56e8f.roa File: 68e86b56-87f4-319b-b780-0d5300f56e8f.roa (raw, json) Hash identifier: wQJhcrZ03Lj02QnaJpEfzXQfab4Dr5PK+csyzIHhtcs= Subject key identifier: AA:51:B3:67:86:6B:A9:7C:82:03:EF:13:90:6A:C2:A3:F4:A2:90:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B99AD1B3AB04190F9BC60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68e86b56-87f4-319b-b780-0d5300f56e8f.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 73.237.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:99:ad:1b:3a:b0:41:90:f9:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=2d007d91-1070-41ac-bac7-79443c6b2cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:eb:3b:31:f4:ff:cb:3f:74:46:1a:d1:7f: 95:5a:14:f8:cf:9d:4c:9b:e2:67:b8:c9:25:ef:35: ba:80:6b:99:96:b3:b6:63:c9:84:72:8b:a0:00:36: 79:81:c1:8f:37:05:48:25:27:9b:0f:56:ff:a5:48: bd:7c:80:5f:57:e2:69:52:d9:2e:88:c1:bc:7b:99: f9:3e:08:70:8d:2a:06:b1:56:4d:8b:e1:62:5b:8c: f9:91:dc:50:f5:bf:c5:23:c9:86:f9:48:a5:9b:5a: 29:41:dd:02:eb:85:24:43:01:1d:e5:9e:67:e9:d2: fa:af:e4:31:11:63:39:eb:ef:54:b2:f4:54:ef:e5: 3f:52:52:92:45:54:8d:c0:e4:b9:43:1b:56:99:e8: f6:71:52:67:06:1d:08:30:cc:4b:be:54:80:9a:1c: 6c:4b:a2:a4:53:af:f4:4a:f1:57:c5:dc:ae:a5:95: 41:57:11:88:f1:a4:71:f1:13:43:2e:f6:b6:40:29: c9:42:0b:39:96:73:3d:71:6c:a7:4f:7c:08:77:fc: 1a:d1:8e:6d:2b:5f:1a:f5:ff:0e:36:c6:6a:be:16: 30:64:1f:b4:32:65:58:d9:4e:a7:28:49:35:70:7d: 94:b8:f9:a6:d9:a3:43:17:af:e1:2f:cc:42:bd:6a: 59:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:51:B3:67:86:6B:A9:7C:82:03:EF:13:90:6A:C2:A3:F4:A2:90:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68e86b56-87f4-319b-b780-0d5300f56e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.237.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9a:1c:ec:f7:47:59:2d:0b:29:9d:29:2b:2f:77:79:18:5a: 97:2f:38:43:70:8d:53:9d:05:7c:1a:5c:ab:76:7e:6e:db:1d: c5:d8:fd:7e:b3:a9:e8:10:08:db:eb:65:be:93:0c:13:5a:3f: 61:33:ce:12:54:0b:4a:3a:00:bd:d4:e8:d2:e4:5a:45:eb:e0: 45:b6:61:54:ca:b7:43:d9:d8:37:3c:e9:bf:6e:03:08:8a:e5: 62:50:07:38:4f:dd:60:c0:d9:f6:1e:c6:e3:93:43:51:51:cf: f7:7a:db:fd:3c:d8:3b:5b:08:f9:c3:d8:ef:80:7e:20:e9:2f: ca:79:ba:11:50:dd:ab:99:cc:16:4f:c0:c6:1f:3b:ba:ca:09: 70:76:51:eb:69:79:69:af:6b:fe:c0:55:da:e7:6b:b4:9b:70: 68:61:bf:86:77:61:05:2e:91:93:95:39:34:7e:21:e1:d0:e7: b7:c2:65:3b:ac:56:3f:55:64:7c:ee:cf:92:43:31:44:66:a3: d9:74:58:5b:da:58:6a:72:40:ac:f9:c7:97:c1:36:0a:bb:91: 7e:c9:78:02:9e:a8:1b:f2:5b:33:b8:3d:6b:e3:cd:0e:de:c2: 3a:55:7d:1d:5c:80:a5:3d:69:8d:96:90:17:48:d4:58:ce:7a: e8:09:42:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC5mtGzqwQZD5vGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MmQwMDdkOTEtMTA3MC00MWFjLWJhYzctNzk0NDNjNmIyY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2DrOzH0/8s/dEYa0X+VWhT4z51Mm+JnuMkl 7zW6gGuZlrO2Y8mEcougADZ5gcGPNwVIJSebD1b/pUi9fIBfV+JpUtkuiMG8e5n5 PghwjSoGsVZNi+FiW4z5kdxQ9b/FI8mG+Uilm1opQd0C64UkQwEd5Z5n6dL6r+Qx EWM56+9UsvRU7+U/UlKSRVSNwOS5QxtWmej2cVJnBh0IMMxLvlSAmhxsS6KkU6/0 SvFXxdyupZVBVxGI8aRx8RNDLva2QCnJQgs5lnM9cWynT3wId/wa0Y5tK18a9f8O NsZqvhYwZB+0MmVY2U6nKEk1cH2UuPmm2aNDF6/hL8xCvWpZaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpRs2eGa6l8ggPvE5BqwqP0opA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhlODZiNTYtODdmNC0z MTliLWI3ODAtMGQ1MzAwZjU2ZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSe0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKaHOz3R1ktCymdKSsvd3kYWpcvOENwjVOdBXwaXKt2fm7bHcXY/X6z qegQCNvrZb6TDBNaP2EzzhJUC0o6AL3U6NLkWkXr4EW2YVTKt0PZ2Dc86b9uAwiK 5WJQBzhP3WDA2fYexuOTQ1FRz/d62/082DtbCPnD2O+AfiDpL8p5uhFQ3auZzBZP wMYfO7rKCXB2UetpeWmva/7AVdrna7SbcGhhv4Z3YQUukZOVOTR+IeHQ57fCZTus Vj9VZHzuz5JDMURmo9l0WFvaWGpyQKz5x5fBNgq7kX7JeAKeqBvyWzO4PWvjzQ7e wjpVfR1cgKU9aY2WkBdI1FjOeugJQuE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:54:36 2025 by rpki-client