$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e382cea-00dd-30b5-b4d5-2dd4c39d3345.roa File: 7e382cea-00dd-30b5-b4d5-2dd4c39d3345.roa (raw, json) Hash identifier: 4lj59kWaB+QbfHDYJgQR7Zk7MueR8AuE7PPpax9IU5I= Subject key identifier: CA:19:8C:23:DE:C2:49:D2:55:59:BD:AF:FC:6B:EE:67:DA:7A:20:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8A2952D7D028AD11EBC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e382cea-00dd-30b5-b4d5-2dd4c39d3345.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.52.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:a2:95:2d:7d:02:8a:d1:1e:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=4539a157-efb2-4a51-a783-5403c2b7166d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:af:9c:a7:6c:8c:57:97:fe:35:a0:8e:3e:68: 2d:1a:85:a8:fe:fb:26:6a:46:0f:d3:27:e1:f6:72: 6d:ec:45:8c:ce:38:45:7f:c8:43:b9:5e:d6:f1:65: 46:2e:fc:17:29:0c:9c:1e:72:b1:02:d3:9b:3c:4c: ac:03:f1:a6:34:7b:6d:cf:73:c9:d6:68:67:54:fb: 40:b9:09:db:b3:3e:5f:31:ec:77:6c:5f:40:dc:64: e7:90:60:ee:7d:94:9a:d2:10:36:21:f0:58:12:bb: 12:91:a9:ef:2b:97:bf:20:ba:22:f8:10:ea:a8:c3: 83:0b:89:97:31:3b:41:d6:03:61:29:20:11:e4:8c: c9:d8:91:b2:b1:c0:48:2d:64:20:cb:61:3d:98:a5: c9:2b:14:3a:c2:ae:9f:f0:4c:17:9f:44:c5:b3:de: 5b:a8:2b:7e:7e:25:2e:8b:8c:ed:68:6c:63:b5:f4: 29:f3:ed:1f:28:b5:cf:ab:51:0d:5d:c4:ed:3e:d2: c9:f0:49:bc:d4:3f:b0:ef:dd:35:ba:23:fd:0d:8e: 9b:8b:50:6f:e9:6d:7e:6a:9d:2e:5b:a8:6a:8f:0c: 7b:40:40:53:a8:8b:a1:66:74:a4:ea:a1:3c:0f:6b: 17:65:fb:66:43:05:77:9d:8a:60:c0:a7:ef:20:aa: 94:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:19:8C:23:DE:C2:49:D2:55:59:BD:AF:FC:6B:EE:67:DA:7A:20:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e382cea-00dd-30b5-b4d5-2dd4c39d3345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e9:9f:0c:d0:41:ea:ac:03:0f:6f:70:60:bc:33:6a:16:72: 94:94:28:8f:bc:7a:09:60:08:72:94:97:17:33:fb:cf:d9:27: 5b:1a:a9:f2:01:f8:59:37:47:bf:66:6f:83:e4:dd:d9:28:0f: 81:45:04:ea:d2:8b:58:8c:37:3d:1a:b0:63:a1:77:3a:73:81: 0c:5f:52:42:7b:77:b9:3a:c3:f8:0f:35:ed:b3:e2:5d:a9:3e: 81:fd:a4:71:f1:ef:3b:c6:80:63:9e:a7:84:24:fc:44:91:a9: 25:1d:b9:4d:a8:78:33:5d:84:f5:7a:d4:d6:2b:87:8b:f4:df: 24:18:e4:4d:44:28:26:81:bd:aa:14:18:df:31:65:28:a5:17: 1d:81:5f:dd:a7:9c:8e:7c:9a:58:00:a6:90:e9:82:ef:cc:42: 5e:32:24:15:68:99:aa:11:a0:b9:b6:da:04:cf:2e:d6:0d:b6: 23:04:eb:0f:d7:41:80:39:d8:ad:40:bb:fc:eb:67:89:f8:03: 80:68:ca:46:b9:73:12:77:7a:69:8a:f9:a6:7c:76:d0:0f:50: a1:0b:5c:78:a0:56:b8:db:a3:48:4a:65:05:11:e7:e1:45:8d: 40:a0:ea:96:0b:5a:5a:bd:29:7b:82:75:09:62:dd:59:c6:56: 6b:a6:e6:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uKKVLX0CitEevIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NDUzOWExNTctZWZiMi00YTUxLWE3ODMtNTQwM2MyYjcxNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq+cp2yMV5f+NaCOPmgtGoWo/vsmakYP0yfh 9nJt7EWMzjhFf8hDuV7W8WVGLvwXKQycHnKxAtObPEysA/GmNHttz3PJ1mhnVPtA uQnbsz5fMex3bF9A3GTnkGDufZSa0hA2IfBYErsSkanvK5e/ILoi+BDqqMODC4mX MTtB1gNhKSAR5IzJ2JGyscBILWQgy2E9mKXJKxQ6wq6f8EwXn0TFs95bqCt+fiUu i4ztaGxjtfQp8+0fKLXPq1ENXcTtPtLJ8Em81D+w7901uiP9DY6bi1Bv6W1+ap0u W6hqjwx7QEBTqIuhZnSk6qE8D2sXZftmQwV3nYpgwKfvIKqUmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoZjCPewknSVVm9r/xr7mfaeiAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2UzODJjZWEtMDBkZC0z MGI1LWI0ZDUtMmRkNGMzOWQzMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHpnwzQQeqsAw9vcGC8M2oWcpSUKI+8eglgCHKUlxcz+8/ZJ1saqfIB +Fk3R79mb4Pk3dkoD4FFBOrSi1iMNz0asGOhdzpzgQxfUkJ7d7k6w/gPNe2z4l2p PoH9pHHx7zvGgGOep4Qk/ESRqSUduU2oeDNdhPV61NYrh4v03yQY5E1EKCaBvaoU GN8xZSilFx2BX92nnI58mlgAppDpgu/MQl4yJBVomaoRoLm22gTPLtYNtiME6w/X QYA52K1Au/zrZ4n4A4Boyka5cxJ3emmK+aZ8dtAPUKELXHigVrjbo0hKZQUR5+FF jUCg6pYLWlq9KXuCdQli3VnGVmum5mY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:25:08 2025 by rpki-client