$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad98de84-1a95-3585-a4f0-c059de16d353.roa File: ad98de84-1a95-3585-a4f0-c059de16d353.roa (raw, json) Hash identifier: IDHVKPg3MPIuFX6mE2FOhzixT9MfSyKJ1yNMvOGl20Y= Subject key identifier: 41:EE:F2:09:10:3C:45:F9:61:15:84:4D:F0:2F:2D:B3:0B:76:4B:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA5EF2E0F2EC04971C1500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad98de84-1a95-3585-a4f0-c059de16d353.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.42.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:5e:f2:e0:f2:ec:04:97:1c:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=0a5f6223-4e0e-4eb3-95f5-774570154a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a4:d3:f9:7b:77:fb:bd:0f:cb:a2:c7:98:93: 45:e0:68:65:05:c0:42:50:08:d7:8f:06:39:75:f1: cf:b2:7d:ca:67:13:db:dd:67:8f:d3:1d:5a:fb:c3: 27:d5:04:5d:3e:dc:f5:87:9f:dc:8c:e6:32:84:44: bb:1d:ed:06:60:13:8a:be:ce:89:c9:22:5a:de:03: b8:64:a4:1f:2e:25:e7:b2:e5:9e:d0:90:2d:40:1a: 7e:56:30:fc:32:2b:3f:a3:59:ee:69:20:46:9d:5a: 1e:d9:a2:ac:3b:8d:47:e7:ae:53:9a:c9:0a:61:fd: cc:cf:f3:49:55:9e:ad:a8:e3:a9:bb:ab:9c:80:8f: 31:d3:ff:14:5c:1a:f5:c5:d8:d8:8f:97:e0:a0:c8: b9:7c:cb:e4:10:c3:74:de:15:6a:cb:c5:f3:6b:55: 07:94:09:6e:89:14:9f:68:7c:72:f7:0b:56:69:a5: 26:fc:d3:3f:36:68:29:b1:31:05:5b:8f:98:37:da: d6:c2:e6:7f:67:d3:3b:13:0a:1e:d6:1e:c1:cc:e6: 41:60:34:bc:cc:28:53:e7:4b:45:95:00:21:8f:43: d6:91:ab:b7:22:d1:a8:0b:41:de:36:9e:cd:eb:d2: d3:08:31:2b:43:d6:26:46:95:1f:47:dc:51:a1:c6: 80:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EE:F2:09:10:3C:45:F9:61:15:84:4D:F0:2F:2D:B3:0B:76:4B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad98de84-1a95-3585-a4f0-c059de16d353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:8a:c8:6d:46:6f:73:2f:e3:c2:58:4f:3e:e5:e2:b3:a8:89: 68:cf:df:1a:df:51:35:21:e5:38:40:77:78:12:f9:d1:18:65: 43:62:96:63:35:b2:8c:c2:52:c0:7f:98:39:f3:df:f0:cd:b8: eb:39:17:df:ba:f6:ed:d5:9b:3e:97:40:0e:53:c8:4d:49:5c: 67:48:ee:83:26:f4:2a:87:4d:0e:92:90:de:02:7e:42:11:bc: aa:d1:ce:00:ca:38:c2:13:49:66:05:83:6b:e8:c0:0e:a3:01: 27:42:f2:15:83:c8:f3:c2:44:37:12:80:72:b8:31:a4:d2:14: 35:f5:cc:9c:eb:b4:0c:f8:32:5f:d6:3b:ad:7a:e8:cb:e9:76: 0c:2e:73:24:7e:94:26:29:02:86:01:f8:f7:12:1b:67:9a:ad: 96:2a:46:f2:a2:67:db:06:a5:b3:13:7c:a8:a6:ac:a0:81:29: a8:84:dc:da:19:ef:4d:4c:55:fd:b8:4d:2f:6d:79:3b:22:a9: 9c:41:6f:15:98:3c:86:36:40:95:6d:1e:82:0f:f2:57:55:3e: 47:35:45:0a:a8:f9:8a:1f:99:e6:3e:bf:1b:8c:e5:da:88:24: 9e:16:f7:ab:d1:10:24:f0:bf:c6:96:21:58:3d:32:3e:57:35: d2:1c:af:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVql7y4PLsBJccFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MGE1ZjYyMjMtNGUwZS00ZWIzLTk1ZjUtNzc0NTcwMTU0YTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaTT+Xt3+70Py6LHmJNF4GhlBcBCUAjXjwY5 dfHPsn3KZxPb3WeP0x1a+8Mn1QRdPtz1h5/cjOYyhES7He0GYBOKvs6JySJa3gO4 ZKQfLiXnsuWe0JAtQBp+VjD8Mis/o1nuaSBGnVoe2aKsO41H565TmskKYf3Mz/NJ VZ6tqOOpu6ucgI8x0/8UXBr1xdjYj5fgoMi5fMvkEMN03hVqy8Xza1UHlAluiRSf aHxy9wtWaaUm/NM/NmgpsTEFW4+YN9rWwuZ/Z9M7Ewoe1h7BzOZBYDS8zChT50tF lQAhj0PWkau3ItGoC0HeNp7N69LTCDErQ9YmRpUfR9xRocaA2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHu8gkQPEX5YRWETfAvLbMLdkuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQ5OGRlODQtMWE5NS0z NTg1LWE0ZjAtYzA1OWRlMTZkMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuKyG1Gb3Mv48JYTz7l4rOoiWjP3xrfUTUh5ThAd3gS+dEYZUNilmM1 sozCUsB/mDnz3/DNuOs5F9+69u3Vmz6XQA5TyE1JXGdI7oMm9CqHTQ6SkN4CfkIR vKrRzgDKOMITSWYFg2vowA6jASdC8hWDyPPCRDcSgHK4MaTSFDX1zJzrtAz4Ml/W O6166MvpdgwucyR+lCYpAoYB+PcSG2earZYqRvKiZ9sGpbMTfKimrKCBKaiE3NoZ 701MVf24TS9teTsiqZxBbxWYPIY2QJVtHoIP8ldVPkc1RQqo+YofmeY+vxuM5dqI JJ4W96vRECTwv8aWIVg9Mj5XNdIcr6w= -----END CERTIFICATE-----Generated at Wed Nov 5 13:25:12 2025 by rpki-client