$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9f3a15d-6be2-36f8-9810-a6b0ae674189.roa File: a9f3a15d-6be2-36f8-9810-a6b0ae674189.roa (raw, json) Hash identifier: VTpXZ8Tj2xfl45uuk4GGDOvzHKs/S+tTQ5FwqHkIBtk= Subject key identifier: D9:F2:D6:1B:D4:7B:7E:C1:10:AF:1D:32:55:66:EC:83:23:D7:83:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8D291AABD960108CA1A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9f3a15d-6be2-36f8-9810-a6b0ae674189.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.60.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:d2:91:aa:bd:96:01:08:ca:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=14b02a6d-efb6-4a17-acda-397a36d5ddc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:11:53:4b:05:40:c3:d2:48:ed:25:c7:67: 0b:f9:d1:aa:46:e3:5b:c0:0c:2a:97:4e:9b:fc:0d: 35:e7:10:be:a3:36:b5:c4:55:ea:f6:15:6f:40:93: b3:84:52:7d:92:ec:a0:6f:81:dd:4c:a6:df:12:93: 9e:1d:c1:08:61:6a:27:9f:b9:4f:34:c1:80:4c:87: 4d:01:84:90:2a:c1:b8:0b:e7:c3:3d:83:97:40:55: e8:ae:74:a6:2f:af:3a:1e:d4:55:32:23:e8:d4:35: ea:80:5d:26:c3:99:24:03:8b:86:99:03:93:bd:96: b0:62:d2:22:16:d3:33:cb:6c:e3:81:ac:e1:92:4c: df:85:b3:81:a8:17:9d:e9:3e:30:23:76:d0:cd:81: 31:ae:48:dd:14:d2:be:a4:6e:1f:ac:89:3b:1a:71: 83:75:37:df:13:0d:46:6c:46:ea:3b:a2:69:9e:37: 7a:51:8e:32:59:16:09:94:a1:19:a3:64:b6:f7:6f: 05:b7:8c:4f:ae:79:fa:09:31:1e:99:3c:91:ad:a8: 16:bf:6c:d2:b0:df:42:a0:4c:d7:0e:8d:35:63:09: 10:ea:37:7c:bf:28:e7:15:18:9b:d0:b2:5d:86:56: 3c:8d:7f:7f:7d:60:9b:77:96:68:03:39:8f:de:1a: a6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F2:D6:1B:D4:7B:7E:C1:10:AF:1D:32:55:66:EC:83:23:D7:83:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9f3a15d-6be2-36f8-9810-a6b0ae674189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4c:4d:91:1f:7b:55:d9:18:0a:17:95:c0:c4:01:c6:af:51: 88:e5:88:80:74:ee:7c:f9:d5:62:22:79:b9:42:18:5e:bd:0e: a1:9d:ff:98:f7:f9:f1:e8:9f:1b:63:e2:78:c1:bb:35:39:7b: 95:12:c5:db:74:62:4c:6b:6f:a4:84:8d:39:b7:77:c2:48:e5: 28:42:d4:47:23:a0:fc:7d:7c:2d:7c:08:d9:7a:f3:ef:5e:4a: b9:de:0b:c0:84:12:83:e5:4a:30:bf:d7:ce:a6:d0:32:c5:09: 29:d6:9e:6e:47:37:b7:52:88:05:78:5c:51:b9:0b:f4:2f:c8: 64:fc:15:a3:6e:cb:28:d9:60:8d:52:34:ae:a7:3c:c3:ca:ba: 6b:83:17:c7:07:a5:f0:c6:d1:5e:d6:b3:d3:7a:5e:f7:6d:86: 00:fa:97:b1:ee:e6:83:a5:0e:31:61:8f:bc:f3:21:1b:45:6a: 52:fd:79:48:19:94:ee:39:e0:4e:61:1c:3c:cb:1b:75:5c:c7: 56:77:43:da:5b:62:9f:49:02:9d:d5:5c:a8:85:d2:35:2c:99: 03:ee:f4:88:e1:20:c3:82:a3:93:58:ec:d5:30:cd:9f:39:69: bd:c3:2c:f0:94:02:06:81:0c:ac:cf:14:c2:a0:89:e4:93:f1: be:c9:f6:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqNKRqr2WAQjKGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTRiMDJhNmQtZWZiNi00YTE3LWFjZGEtMzk3YTM2ZDVkZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvMRU0sFQMPSSO0lx2cL+dGqRuNbwAwql06b /A015xC+oza1xFXq9hVvQJOzhFJ9kuygb4HdTKbfEpOeHcEIYWonn7lPNMGATIdN AYSQKsG4C+fDPYOXQFXornSmL686HtRVMiPo1DXqgF0mw5kkA4uGmQOTvZawYtIi FtMzy2zjgazhkkzfhbOBqBed6T4wI3bQzYExrkjdFNK+pG4frIk7GnGDdTffEw1G bEbqO6Jpnjd6UY4yWRYJlKEZo2S2928Ft4xPrnn6CTEemTyRragWv2zSsN9CoEzX Do01YwkQ6jd8vyjnFRib0LJdhlY8jX9/fWCbd5ZoAzmP3hqmxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNny1hvUe37BEK8dMlVm7IMj14OrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTlmM2ExNWQtNmJlMi0z NmY4LTk4MTAtYTZiMGFlNjc0MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1MTZEfe1XZGAoXlcDEAcavUYjliIB07nz51WIieblCGF69DqGd/5j3 +fHonxtj4njBuzU5e5USxdt0Ykxrb6SEjTm3d8JI5ShC1EcjoPx9fC18CNl68+9e SrneC8CEEoPlSjC/186m0DLFCSnWnm5HN7dSiAV4XFG5C/QvyGT8FaNuyyjZYI1S NK6nPMPKumuDF8cHpfDG0V7Ws9N6XvdthgD6l7Hu5oOlDjFhj7zzIRtFalL9eUgZ lO454E5hHDzLG3Vcx1Z3Q9pbYp9JAp3VXKiF0jUsmQPu9IjhIMOCo5NY7NUwzZ85 ab3DLPCUAgaBDKzPFMKgieST8b7J9jw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:13 2025 by rpki-client