$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8b781a-7797-3f8b-9f8f-64c6dac34786.roa File: 8d8b781a-7797-3f8b-9f8f-64c6dac34786.roa (raw, json) Hash identifier: JMNTevhiqKl0G+qadM2oKOKb3qOjulXw0ZIf1I2ZEAs= Subject key identifier: 86:89:A5:B3:F5:C0:77:E7:F5:FC:14:37:2A:F9:7B:62:ED:57:35:88 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA52DD9CFCA79ACE4F3700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8b781a-7797-3f8b-9f8f-64c6dac34786.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.34.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:52:dd:9c:fc:a7:9a:ce:4f:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f7e58ac7-4d61-43b1-bdb5-d2a67f1a45fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:51:d1:34:b9:47:21:32:e5:34:2c:ab:1a: 82:7e:39:8e:9a:f9:92:eb:7e:a0:c3:96:85:99:98: 2d:e0:76:19:ac:ef:a0:30:36:f4:ab:5f:e1:50:08: 65:cf:ab:3e:c7:cc:c1:ec:06:5c:d6:3c:d3:db:cf: 8a:3b:77:3a:51:38:15:15:6f:e7:c0:cf:fb:1b:4d: 7f:22:ac:af:c2:83:67:66:ff:60:8b:21:31:5f:a7: 27:4b:31:34:9c:fb:da:62:52:f8:e7:86:a7:c2:f5: cc:2b:d5:23:3f:17:32:c4:c7:0e:5c:dd:15:02:e3: 1e:75:c3:a1:d2:14:b9:24:0c:c3:1e:a5:64:00:e1: 8e:2b:00:7c:67:6d:31:28:37:01:bd:c5:ca:20:32: 0e:48:b9:b2:05:76:2f:13:7c:bb:6a:3b:df:f8:6c: 4e:4b:d0:eb:7a:7c:64:fb:d1:a5:25:ef:a8:aa:cb: 3c:2a:5c:0c:31:dd:9c:85:a6:b9:54:64:d9:e7:3a: 4f:10:c2:10:5f:c8:1c:cc:a4:8e:82:94:d0:e2:1e: 8e:48:c0:7a:84:15:85:72:11:57:00:d0:3f:e4:cb: 85:5f:f4:65:9b:23:01:3a:49:34:df:0e:d9:4e:67: e3:92:f5:b7:3e:cb:cd:94:11:04:30:91:98:cb:fc: c2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:89:A5:B3:F5:C0:77:E7:F5:FC:14:37:2A:F9:7B:62:ED:57:35:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d8b781a-7797-3f8b-9f8f-64c6dac34786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:2b:60:75:98:7d:eb:bd:05:03:53:e6:9b:c5:99:53:72:cb: 6b:43:25:1a:49:3a:2a:b3:9e:f7:ee:ac:7e:f0:67:7c:f2:6d: cf:54:86:9a:b7:29:78:c0:dc:d9:59:e4:d0:22:9b:4e:9c:a1: 1c:c9:a8:4c:5d:b4:d4:ea:97:a6:03:76:e4:f4:79:1a:b0:69: 33:30:c8:18:38:5e:9c:b0:10:16:60:db:65:48:2a:90:a0:2d: 88:27:25:d0:a2:c3:7c:37:a4:72:a6:2f:22:77:40:02:72:77: 81:4d:73:f4:41:77:73:3d:ea:8f:79:e0:77:97:f2:2e:e3:2b: 33:2c:70:ac:aa:86:e5:e5:f5:0b:6a:5d:07:71:2f:6d:5e:67: f7:46:79:17:82:88:66:a4:1d:24:3d:dc:77:0b:57:54:65:81: fa:76:ba:be:5a:d3:b7:54:25:a5:81:9d:4c:1e:44:d9:b2:03: 9d:fe:18:fa:f0:40:94:66:d7:a1:fe:d6:d9:d1:2e:aa:e7:c0: 5c:eb:9c:08:b9:ce:57:54:19:23:41:0e:5b:98:13:66:e6:5e: 16:3b:5c:70:29:dd:1f:71:bd:28:d4:ba:3d:f8:14:c2:06:23: fc:ef:00:43:af:d5:88:7c:81:0a:89:70:00:72:9b:ab:a3:5e: 19:93:3b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlLdnPynms5PNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjdlNThhYzctNGQ2MS00M2IxLWJkYjUtZDJhNjdmMWE0NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8lR0TS5RyEy5TQsqxqCfjmOmvmS636gw5aF mZgt4HYZrO+gMDb0q1/hUAhlz6s+x8zB7AZc1jzT28+KO3c6UTgVFW/nwM/7G01/ IqyvwoNnZv9giyExX6cnSzE0nPvaYlL454anwvXMK9UjPxcyxMcOXN0VAuMedcOh 0hS5JAzDHqVkAOGOKwB8Z20xKDcBvcXKIDIOSLmyBXYvE3y7ajvf+GxOS9Drenxk +9GlJe+oqss8KlwMMd2chaa5VGTZ5zpPEMIQX8gczKSOgpTQ4h6OSMB6hBWFchFX ANA/5MuFX/RlmyMBOkk03w7ZTmfjkvW3PsvNlBEEMJGYy/zCeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaJpbP1wHfn9fwUNyr5e2LtVzWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ4Yjc4MWEtNzc5Ny0z ZjhiLTlmOGYtNjRjNmRhYzM0Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCJKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYrYHWYfeu9BQNT5pvFmVNyy2tDJRpJOiqznvfurH7wZ3zybc9Uhpq3 KXjA3NlZ5NAim06coRzJqExdtNTql6YDduT0eRqwaTMwyBg4XpywEBZg22VIKpCg LYgnJdCiw3w3pHKmLyJ3QAJyd4FNc/RBd3M96o954HeX8i7jKzMscKyqhuXl9Qtq XQdxL21eZ/dGeReCiGakHSQ93HcLV1Rlgfp2ur5a07dUJaWBnUweRNmyA53+GPrw QJRm16H+1tnRLqrnwFzrnAi5zldUGSNBDluYE2bmXhY7XHAp3R9xvSjUuj34FMIG I/zvAEOv1Yh8gQqJcABym6ujXhmTOyo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:43:27 2025 by rpki-client