$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfec3e59-4d84-38b8-9095-a042b6c8f79c.roa File: bfec3e59-4d84-38b8-9095-a042b6c8f79c.roa (raw, json) Hash identifier: gYxNUmoBW0AkQ5btRbcByIe1pceKfXdELEOuuFYb7gA= Subject key identifier: 21:CE:60:2B:D0:62:D7:A1:72:C4:71:72:69:1A:C8:D9:9D:0E:6E:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB86D85C73458EC47877300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfec3e59-4d84-38b8-9095-a042b6c8f79c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 68.86.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:6d:85:c7:34:58:ec:47:87:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=94128721-6a11-416d-9556-2542adb0a558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:8d:99:86:e7:87:3b:3e:cd:06:03:a3:38: b5:b6:86:41:d2:e0:31:21:d6:78:70:b0:65:b9:8c: 3a:0d:42:4a:4a:3e:80:03:5b:00:35:f2:b7:08:14: b2:b4:66:b1:0a:bd:e3:69:3b:97:8b:10:25:54:b0: 8e:52:09:a2:7f:d9:af:a5:5e:c6:a0:43:64:5c:75: 21:ec:10:0f:8f:93:6a:34:4d:0d:70:96:15:37:64: c5:53:f0:08:e8:ef:41:9a:93:70:ee:c3:0b:5f:55: 6b:34:a8:e0:e8:60:fb:0f:7d:9a:ad:b9:00:9f:09: ae:55:70:c4:07:c0:97:89:73:52:3a:56:77:a9:b7: d7:61:9d:d8:08:a6:3e:07:0b:c4:22:8a:d5:aa:8a: 60:65:93:fa:82:01:8d:4c:81:11:d3:49:ac:ef:87: 3b:23:f3:c0:e8:19:c3:a7:10:83:5f:36:40:a3:4a: 95:30:af:31:bc:93:b2:05:ee:56:ba:ca:d4:31:aa: 74:8c:8a:97:90:84:59:8e:27:d4:67:09:3c:d5:74: 89:ec:ea:bc:31:84:63:ab:cf:75:cb:95:ae:c7:77: 10:ab:e9:a4:4f:b2:80:46:e9:42:a4:14:33:43:2f: 7b:51:bf:a7:f2:c5:36:e5:ba:1a:ff:fd:d8:c3:32: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CE:60:2B:D0:62:D7:A1:72:C4:71:72:69:1A:C8:D9:9D:0E:6E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfec3e59-4d84-38b8-9095-a042b6c8f79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:51:3a:cc:da:9b:81:46:06:38:2c:16:01:3a:16:a8:bf:1b: f1:fa:b7:17:58:c1:e6:1d:7d:07:41:5e:a1:f4:9a:1e:b0:8b: 12:23:a8:0c:55:82:7d:32:cb:8c:7d:0a:e1:d1:05:65:be:6c: 24:35:d5:e6:e3:b1:1d:7d:d3:37:73:db:fb:ff:b3:73:64:94: 25:03:ca:dc:51:74:c1:d6:6f:dd:97:31:28:5b:4b:fe:63:b5: 29:61:87:a9:97:9d:83:d8:c2:46:5d:52:d3:ff:85:af:0b:98: b2:6f:50:88:24:97:99:b1:f7:bd:5c:f5:d2:c4:fe:b2:2c:fd: 0f:bc:71:18:2b:78:9e:35:1f:a3:67:46:b9:26:6a:d4:6f:f1: 69:b1:df:67:b1:ec:14:87:02:cf:72:cf:64:85:85:a8:33:82: 80:ce:cb:f5:4f:fe:b5:e9:c0:97:ca:61:db:3c:72:30:df:bd: 36:90:ae:2e:ef:3d:47:99:4f:56:03:aa:b1:e4:f5:5e:c4:b3: c9:66:13:9a:45:0b:94:95:ca:d6:56:b6:75:9d:64:ad:c1:e4: 50:08:48:03:a9:29:14:d8:18:55:90:4a:88:ad:fa:67:7e:46: 19:f9:80:1d:0c:e6:3e:2e:4c:6e:84:91:6c:26:b3:c7:6c:ec: 84:93:ab:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uG2FxzRY7EeHcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTQxMjg3MjEtNmExMS00MTZkLTk1NTYtMjU0MmFkYjBhNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYeNmYbnhzs+zQYDozi1toZB0uAxIdZ4cLBl uYw6DUJKSj6AA1sANfK3CBSytGaxCr3jaTuXixAlVLCOUgmif9mvpV7GoENkXHUh 7BAPj5NqNE0NcJYVN2TFU/AI6O9BmpNw7sMLX1VrNKjg6GD7D32arbkAnwmuVXDE B8CXiXNSOlZ3qbfXYZ3YCKY+BwvEIorVqopgZZP6ggGNTIER00ms74c7I/PA6BnD pxCDXzZAo0qVMK8xvJOyBe5WusrUMap0jIqXkIRZjifUZwk81XSJ7Oq8MYRjq891 y5Wux3cQq+mkT7KARulCpBQzQy97Ub+n8sU25boa//3YwzItxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHOYCvQYtehcsRxcmkayNmdDm4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZlYzNlNTktNGQ4NC0z OGI4LTkwOTUtYTA0MmI2YzhmNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANlROszam4FGBjgsFgE6Fqi/G/H6txdYweYdfQdBXqH0mh6wixIjqAxV gn0yy4x9CuHRBWW+bCQ11ebjsR190zdz2/v/s3NklCUDytxRdMHWb92XMShbS/5j tSlhh6mXnYPYwkZdUtP/ha8LmLJvUIgkl5mx971c9dLE/rIs/Q+8cRgreJ41H6Nn RrkmatRv8Wmx32ex7BSHAs9yz2SFhagzgoDOy/VP/rXpwJfKYds8cjDfvTaQri7v PUeZT1YDqrHk9V7Es8lmE5pFC5SVytZWtnWdZK3B5FAISAOpKRTYGFWQSoit+md+ Rhn5gB0M5j4uTG6EkWwms8ds7ISTq3A= -----END CERTIFICATE-----Generated at Tue Nov 4 23:20:39 2025 by rpki-client