$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa401283-e0dd-350c-9de6-4fd53805f78e.roa File: aa401283-e0dd-350c-9de6-4fd53805f78e.roa (raw, json) Hash identifier: YmirIJ1j9kF/0J8bWC1JGYn7pyRG02XCecrZG9hz1fA= Subject key identifier: 77:BD:8F:41:3C:32:DB:61:08:27:41:4D:0C:9C:9F:4F:8E:DD:28:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1D038B5D5690F48A55A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa401283-e0dd-350c-9de6-4fd53805f78e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 68.83.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:d0:38:b5:d5:69:0f:48:a5:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b8769c06-9201-438a-9739-d703703976fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:06:84:db:3a:4a:19:f4:7d:7f:5b:5e:68: 5a:c8:56:de:22:cc:48:26:36:f5:9b:5f:19:e4:75: 2b:1f:c7:3d:b0:5c:ba:62:9a:41:d9:b3:63:e1:88: 99:f7:90:7a:90:d1:8d:d3:05:ed:d7:2c:bd:97:c9: fb:5f:bc:98:05:b3:20:7b:e7:91:90:9c:58:5a:8a: a8:d3:04:12:cb:79:ca:79:88:be:d4:cd:37:4d:9e: 7a:d1:1e:10:c7:a1:09:91:a4:d5:d0:50:2e:aa:27: 10:32:78:97:b7:13:a0:25:c9:9f:25:54:e4:a3:48: 16:a0:e7:08:11:50:72:ef:23:30:8c:29:3c:f3:9b: 32:0e:ae:13:7b:66:40:4d:c9:90:c4:f6:03:43:b0: 85:b2:a0:0b:17:3b:aa:dd:28:35:a7:95:99:dd:13: 81:bf:e1:88:5e:eb:ac:bb:80:8b:ee:83:13:31:b0: d4:30:50:9a:a9:6d:4e:1c:db:f6:83:19:b8:38:74: 6d:a2:76:b8:5c:d2:48:e5:a4:40:ad:86:cb:34:ee: 62:52:26:8a:26:2f:73:bb:82:be:44:4d:56:f2:de: 65:7c:9b:5a:bc:67:ed:b2:ce:10:85:89:57:b9:69: 8f:56:48:67:35:1c:e1:5b:9a:c8:b9:d2:e8:d2:71: 6d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BD:8F:41:3C:32:DB:61:08:27:41:4D:0C:9C:9F:4F:8E:DD:28:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa401283-e0dd-350c-9de6-4fd53805f78e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.83.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:74:46:4d:48:b5:22:88:e9:d5:1b:3f:d3:4a:c8:a8:ea:cd: f6:0b:fd:a1:9d:7a:6c:a1:d7:cf:57:e6:f1:3b:58:1a:47:cd: b1:0c:d5:a5:6a:e5:45:c4:85:76:be:56:8b:33:68:ce:be:dc: 5f:02:d7:92:88:bc:4f:f0:d9:ee:62:45:4b:c6:77:ef:da:ee: a6:53:de:12:84:2e:21:42:05:b0:f6:e9:a2:16:c0:f4:58:92: 24:c8:f8:ec:d2:c3:41:3c:cc:53:5e:7a:ee:cf:f7:88:5b:b0: 35:c9:72:56:e8:84:da:79:02:ba:8e:6b:54:de:70:27:25:9a: 78:2c:5c:fb:19:88:a4:36:0d:cc:07:aa:df:f8:5f:dc:d1:16: 02:2b:01:df:82:27:27:77:94:19:b8:7d:57:99:77:ef:f4:d6: c3:c4:3b:c5:9a:55:42:19:ce:32:1a:59:a3:6d:40:05:b8:ca: 8d:17:3b:45:7a:46:f1:1b:5b:99:0c:de:7f:eb:76:6e:bd:5b: 0e:23:b1:67:60:ac:c8:9c:76:36:09:0a:9c:8a:6a:28:12:b1: 3c:f0:9c:31:02:f9:22:29:75:09:b7:ee:97:8f:05:ef:d2:a2: 72:70:f0:08:dc:9c:8e:76:a0:58:0f:68:8d:b8:78:6f:5a:b3: 9c:ee:4d:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswdA4tdVpD0ilWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Yjg3NjljMDYtOTIwMS00MzhhLTk3MzktZDcwMzcwMzk3NmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikQGhNs6Shn0fX9bXmhayFbeIsxIJjb1m18Z 5HUrH8c9sFy6YppB2bNj4YiZ95B6kNGN0wXt1yy9l8n7X7yYBbMge+eRkJxYWoqo 0wQSy3nKeYi+1M03TZ560R4Qx6EJkaTV0FAuqicQMniXtxOgJcmfJVTko0gWoOcI EVBy7yMwjCk885syDq4Te2ZATcmQxPYDQ7CFsqALFzuq3Sg1p5WZ3ROBv+GIXuus u4CL7oMTMbDUMFCaqW1OHNv2gxm4OHRtona4XNJI5aRArYbLNO5iUiaKJi9zu4K+ RE1W8t5lfJtavGftss4QhYlXuWmPVkhnNRzhW5rIudLo0nFtYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHe9j0E8MtthCCdBTQycn0+O3ShMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE0MDEyODMtZTBkZC0z NTBjLTlkZTYtNGZkNTM4MDVmNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV0Rk1ItSKI6dUbP9NKyKjqzfYL/aGdemyh189X5vE7WBpHzbEM1aVq 5UXEhXa+VoszaM6+3F8C15KIvE/w2e5iRUvGd+/a7qZT3hKELiFCBbD26aIWwPRY kiTI+OzSw0E8zFNeeu7P94hbsDXJclbohNp5ArqOa1TecCclmngsXPsZiKQ2DcwH qt/4X9zRFgIrAd+CJyd3lBm4fVeZd+/01sPEO8WaVUIZzjIaWaNtQAW4yo0XO0V6 RvEbW5kM3n/rdm69Ww4jsWdgrMicdjYJCpyKaigSsTzwnDEC+SIpdQm37pePBe/S onJw8AjcnI52oFgPaI24eG9as5zuTco= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:04 2025 by rpki-client