$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70ffe82a-1f1c-3ead-a1ab-973637a25a9e.roa File: 70ffe82a-1f1c-3ead-a1ab-973637a25a9e.roa (raw, json) Hash identifier: jI8q505sP5WbZmGlCyS561r5p1EePt9YurmZbrAxLB0= Subject key identifier: F6:5E:99:5F:11:94:70:FA:49:71:6B:F0:83:FC:C9:1B:BC:3C:D3:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA6EDCC1F9D939CC5A6B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70ffe82a-1f1c-3ead-a1ab-973637a25a9e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.56.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:6e:dc:c1:f9:d9:39:cc:5a:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d217a3b3-ecb7-443b-a2cf-4369021fb368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:55:6a:4d:75:a6:77:d2:f1:bb:95:8f:ea: e3:3c:0b:74:13:68:06:b3:e1:1d:14:21:26:39:16: de:c6:ae:0d:20:c3:5c:3d:26:c3:fe:41:e8:44:f0: 6d:18:9a:89:25:f5:ea:83:42:4f:a2:be:ce:72:5e: 9a:29:d6:0e:ea:28:21:7c:7e:ae:49:76:40:2c:e8: 89:70:0e:30:c9:4a:c0:da:e6:dd:16:b9:59:5b:69: f2:ae:5a:65:e3:bc:7c:d0:a8:81:f0:dc:f7:85:c8: 2d:af:f0:12:91:a9:f3:f1:cd:14:17:fd:b2:0d:8a: 5f:e9:fa:d6:13:5d:51:be:88:fe:2e:8f:a5:9b:5d: b6:3b:73:03:47:d6:88:e6:61:6b:b5:28:50:13:0b: 33:1b:f6:a6:d8:26:4e:2a:2d:bd:07:53:04:49:fd: e4:42:0c:8a:30:d0:ab:6a:33:b9:ec:de:63:23:cc: 08:04:c2:a4:6c:d0:aa:7b:f6:37:34:b6:6f:81:01: 23:ab:2e:da:67:d4:ac:29:55:88:91:d3:4f:c3:75: b4:ec:25:e7:4c:d2:c5:6d:49:7b:72:10:2e:31:d7: 7d:3b:40:88:da:76:91:e7:9f:fc:56:f7:ff:a0:8e: 26:80:e2:71:28:39:5d:0c:2d:dc:2a:71:b1:93:13: 1c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5E:99:5F:11:94:70:FA:49:71:6B:F0:83:FC:C9:1B:BC:3C:D3:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70ffe82a-1f1c-3ead-a1ab-973637a25a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:e2:33:f9:06:67:f8:b1:9d:20:8c:40:f1:22:4f:e7:76:b3: f9:59:23:d8:b9:67:64:00:bf:0d:be:3b:e4:28:9c:d3:69:15: 89:2e:d0:a0:78:df:79:82:86:3f:ff:02:51:f1:dd:37:9d:48: 59:55:75:a5:cc:77:57:ee:76:11:61:bf:ae:6b:e6:6e:dc:fd: 0e:a1:13:a9:3d:f2:85:da:a7:6b:89:ca:bc:7a:95:9b:f2:84: a1:76:0e:64:04:3c:04:9d:81:eb:6c:63:1d:b4:2d:eb:d0:f9: 22:84:84:21:c4:79:b9:56:0c:c2:3c:54:ea:dd:4c:58:9d:ed: 39:5a:7f:19:0c:2b:e5:20:9d:c5:d7:07:eb:18:24:d5:2d:82: 7f:9e:65:20:90:cb:b9:2a:2c:1f:37:7e:20:36:93:64:91:01: 31:56:14:19:b8:68:ea:ed:c0:e8:63:f3:9d:58:08:98:a6:92: c7:ca:a6:74:72:df:12:ac:5a:90:b8:d8:d0:6f:70:de:85:7c: d8:9c:df:21:8b:b2:ad:a7:29:e2:d1:ad:0b:bf:b1:0b:02:79: 3c:8f:52:f1:0b:e4:c1:34:a2:0f:4b:8f:9a:a7:88:c6:99:7d: 76:c3:d4:e0:4a:ab:28:c4:9b:a9:0f:11:d0:86:f7:26:3b:f0: 48:68:f6:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqm7cwfnZOcxaa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDIxN2EzYjMtZWNiNy00NDNiLWEyY2YtNDM2OTAyMWZiMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG9Vak11pnfS8buVj+rjPAt0E2gGs+EdFCEm ORbexq4NIMNcPSbD/kHoRPBtGJqJJfXqg0JPor7Ocl6aKdYO6ighfH6uSXZALOiJ cA4wyUrA2ubdFrlZW2nyrlpl47x80KiB8Nz3hcgtr/ASkanz8c0UF/2yDYpf6frW E11Rvoj+Lo+lm122O3MDR9aI5mFrtShQEwszG/am2CZOKi29B1MESf3kQgyKMNCr ajO57N5jI8wIBMKkbNCqe/Y3NLZvgQEjqy7aZ9SsKVWIkdNPw3W07CXnTNLFbUl7 chAuMdd9O0CI2naR55/8Vvf/oI4mgOJxKDldDC3cKnGxkxMcDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZemV8RlHD6SXFr8IP8yRu8PNOMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzBmZmU4MmEtMWYxYy0z ZWFkLWExYWItOTczNjM3YTI1YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbiM/kGZ/ixnSCMQPEiT+d2s/lZI9i5Z2QAvw2+O+QonNNpFYku0KB4 33mChj//AlHx3TedSFlVdaXMd1fudhFhv65r5m7c/Q6hE6k98oXap2uJyrx6lZvy hKF2DmQEPASdgetsYx20LevQ+SKEhCHEeblWDMI8VOrdTFid7TlafxkMK+UgncXX B+sYJNUtgn+eZSCQy7kqLB83fiA2k2SRATFWFBm4aOrtwOhj851YCJimksfKpnRy 3xKsWpC42NBvcN6FfNic3yGLsq2nKeLRrQu/sQsCeTyPUvEL5ME0og9Lj5qniMaZ fXbD1OBKqyjEm6kPEdCG9yY78Eho9ow= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:13 2025 by rpki-client