$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4103a0e-41ce-3205-a20d-1c3b5868a40f.roa File: a4103a0e-41ce-3205-a20d-1c3b5868a40f.roa (raw, json) Hash identifier: fIjoeggKj5+etM7RSM/Rktul32Ntt14ZI/GrREgHJgU= Subject key identifier: E4:15:B6:28:91:EC:91:1B:78:5F:B8:68:3F:08:52:4D:2B:D6:3F:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC22C1D33E55F9A58F68D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4103a0e-41ce-3205-a20d-1c3b5868a40f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.39.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:2c:1d:33:e5:5f:9a:58:f6:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1c025608-b587-46d7-82df-5b5864dbb6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:80:08:22:e7:00:12:42:fa:ec:59:41:e6:d8: 11:51:75:20:6a:88:5f:c6:7e:04:d7:3e:86:af:a8: 28:f6:54:13:9f:e3:9f:cc:e1:6c:d8:16:88:54:5b: 91:db:08:fd:d0:98:1a:28:ea:97:16:24:62:15:4a: 49:fc:70:6c:02:8c:ef:18:12:d1:96:fb:8e:44:b7: 6a:f0:75:8a:22:06:76:a1:ee:6f:e9:bd:07:43:bf: 63:5e:c5:3a:1a:a8:00:18:4e:76:c4:c0:b4:77:3c: e3:6a:b0:10:9b:dd:69:72:19:16:22:58:13:4d:b1: 99:ed:aa:b5:74:c4:24:4d:94:a0:0b:9c:d3:b5:b0: a9:b8:16:65:15:6d:23:d6:aa:b2:b7:76:20:89:b8: 16:12:47:53:34:75:dd:a1:e5:96:f6:d7:44:b9:b0: d7:b3:06:c7:da:5b:82:4f:d4:e5:ce:a7:c4:9b:0f: e6:d4:83:96:7e:1b:af:94:13:4d:65:21:e2:5d:b1: a2:84:e1:4e:8d:3a:43:50:01:32:c5:73:63:3f:a9: e2:26:a3:d4:b4:88:8f:f3:9d:07:b3:70:88:83:0c: 36:05:0f:b2:70:fa:ed:30:49:0a:26:4f:1a:63:b7: af:4b:5d:00:cf:de:b0:f3:63:01:20:72:0f:7c:39: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:15:B6:28:91:EC:91:1B:78:5F:B8:68:3F:08:52:4D:2B:D6:3F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4103a0e-41ce-3205-a20d-1c3b5868a40f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e8:54:fc:c5:c0:54:f1:e4:14:7f:50:6f:5e:3a:ff:d1:35: 8a:ef:2f:6f:3d:45:af:89:3f:de:dc:d3:b1:5d:e5:fc:29:e1: 39:fe:da:ce:8a:0f:03:ae:e2:05:30:8b:e7:0c:9b:ed:3b:ba: 4e:23:cc:d2:27:73:84:67:6f:5f:f7:61:5b:6f:a5:76:8e:11: b9:ae:27:20:bf:ae:58:76:de:93:67:1b:38:0a:8d:16:48:41: 10:6c:5d:4b:5a:1a:19:d2:3d:5d:1c:45:4d:43:87:2e:8b:e0: 0c:82:d8:64:79:54:94:c9:2f:0c:7a:39:66:2e:8f:c5:c3:61: e1:10:77:6e:5d:5c:25:a0:d9:7b:ab:19:26:61:fb:95:08:32: 74:5a:a3:22:75:d9:c5:1f:2d:69:39:26:60:30:38:b0:1d:99: aa:48:f7:d9:a1:f3:bb:45:d0:4f:d5:74:f6:25:36:f7:a5:f7: 1c:53:6e:24:a4:8e:03:19:0c:8f:a6:0c:c3:bc:b4:25:43:0d: a3:ed:b5:45:51:2a:17:d1:24:b7:06:9c:90:8a:5f:ed:cb:79: 56:37:c5:14:02:39:7d:fc:87:25:bc:64:1b:84:e4:46:5a:1c: 8c:9a:08:e1:66:b2:01:73:fa:0d:cb:83:6f:9c:a7:a3:26:e1: 80:94:7a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswiwdM+Vfmlj2jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWMwMjU2MDgtYjU4Ny00NmQ3LTgyZGYtNWI1ODY0ZGJiNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4AIIucAEkL67FlB5tgRUXUgaohfxn4E1z6G r6go9lQTn+OfzOFs2BaIVFuR2wj90JgaKOqXFiRiFUpJ/HBsAozvGBLRlvuORLdq 8HWKIgZ2oe5v6b0HQ79jXsU6GqgAGE52xMC0dzzjarAQm91pchkWIlgTTbGZ7aq1 dMQkTZSgC5zTtbCpuBZlFW0j1qqyt3YgibgWEkdTNHXdoeWW9tdEubDXswbH2luC T9TlzqfEmw/m1IOWfhuvlBNNZSHiXbGihOFOjTpDUAEyxXNjP6niJqPUtIiP850H s3CIgww2BQ+ycPrtMEkKJk8aY7evS10Az96w82MBIHIPfDnFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQVtiiR7JEbeF+4aD8IUk0r1j/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQxMDNhMGUtNDFjZS0z MjA1LWEyMGQtMWMzYjU4NjhhNDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHoVPzFwFTx5BR/UG9eOv/RNYrvL289Ra+JP97c07Fd5fwp4Tn+2s6K DwOu4gUwi+cMm+07uk4jzNInc4Rnb1/3YVtvpXaOEbmuJyC/rlh23pNnGzgKjRZI QRBsXUtaGhnSPV0cRU1Dhy6L4AyC2GR5VJTJLwx6OWYuj8XDYeEQd25dXCWg2Xur GSZh+5UIMnRaoyJ12cUfLWk5JmAwOLAdmapI99mh87tF0E/VdPYlNvel9xxTbiSk jgMZDI+mDMO8tCVDDaPttUVRKhfRJLcGnJCKX+3LeVY3xRQCOX38hyW8ZBuE5EZa HIyaCOFmsgFz+g3Lg2+cp6Mm4YCUelM= -----END CERTIFICATE-----Generated at Wed Nov 5 00:43:09 2025 by rpki-client