$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa File: d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa (raw, json) Hash identifier: quxILBaMDQGIdmibU3YXOWSoClY3Ij2UAv825mPqfqI= Subject key identifier: 7F:1D:71:32:CE:64:C3:78:F4:7C:E5:B9:BB:B6:AB:22:F3:61:96:24 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA5813C64C7B90AF962E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.37.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:58:13:c6:4c:7b:90:af:96:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=27814c8a-799a-41db-922d-ae53cc738b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:a9:5b:b1:10:03:c9:1b:06:7f:94:de:43: 8c:32:44:61:09:40:dc:82:11:b3:e0:07:c9:89:3c: ff:16:76:16:30:ee:68:89:e9:c9:43:13:79:02:df: 9d:e2:1a:87:e3:ca:85:0d:61:c1:80:59:51:4d:ff: d9:c7:55:6c:fb:86:86:89:60:98:3c:e1:e5:4d:c5: ac:d1:ec:cd:cd:63:89:a6:e1:11:20:12:f1:51:6e: 9d:fb:9d:c8:58:27:fa:b9:b5:b7:7b:c5:3f:2c:35: 87:16:12:ed:9e:ff:f7:9a:24:8a:ca:38:1f:73:1e: 39:98:b1:bd:e6:85:61:20:36:c6:8c:d3:1a:a0:ea: b9:50:ba:0a:a9:19:c9:83:9b:8a:42:92:15:8f:57: b9:88:a9:41:c3:e9:de:81:1c:35:1a:ba:36:72:07: b4:d8:dd:f0:ee:72:39:2e:d7:cd:4d:bd:90:9d:c6: 9c:07:ba:87:71:10:6a:13:9e:23:f4:51:90:08:1c: 65:a1:6e:5a:d8:3b:50:e2:d3:ec:69:bc:c0:6a:dc: 6a:fc:83:56:e7:0d:c9:8f:67:50:67:e1:03:a8:c3: b1:57:c7:51:e4:7d:3c:c8:65:21:70:c4:02:bc:8c: 92:c7:ee:c9:9a:59:8b:3b:f4:f9:93:be:9e:42:02: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1D:71:32:CE:64:C3:78:F4:7C:E5:B9:BB:B6:AB:22:F3:61:96:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:90:a3:7a:52:8f:9a:b7:fe:50:1c:47:0f:76:55:66:a2:e6: 52:90:8c:ec:60:6b:f0:51:8b:9b:be:4a:4c:fa:68:94:fc:92: 87:0a:ad:a2:cd:c1:fc:73:a8:84:04:2b:77:97:02:42:88:51: c8:fb:25:e2:73:14:3c:f7:a6:16:05:e2:0e:a5:d6:c3:36:98: 18:53:59:cc:1f:95:df:3c:04:31:59:ed:72:29:39:1b:b1:7c: 07:54:b7:6e:ea:72:d7:82:90:f3:bb:f3:41:2e:34:22:b8:64: b0:f3:d8:e3:c9:8e:09:3f:8f:f6:bc:06:eb:63:7c:fa:b6:61: 21:6d:6e:45:bb:32:4b:3d:b0:f1:f6:00:6b:84:5d:8d:7f:11: 86:fd:6c:c4:9d:c6:f5:bf:7c:eb:a8:eb:b5:b6:05:13:d2:f4: f6:c7:87:b3:c9:0a:c9:33:0e:d7:b6:3a:15:14:49:a8:b5:93: 14:10:8c:7b:90:9e:c5:e0:9d:a8:9a:34:8a:4e:e3:a3:3c:9e: b4:d2:a9:32:0b:5e:0c:fb:b1:a4:45:63:34:f5:3e:ae:42:98: c0:dd:ec:65:a7:69:64:7e:93:f5:96:b1:ef:46:0e:85:e0:3b: eb:a7:ed:33:8e:a7:f6:ae:39:77:19:bd:91:30:e2:ed:7e:db: cc:46:30:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqlgTxkx7kK+WLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Mjc4MTRjOGEtNzk5YS00MWRiLTkyMmQtYWU1M2NjNzM4YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+WpW7EQA8kbBn+U3kOMMkRhCUDcghGz4AfJ iTz/FnYWMO5oienJQxN5At+d4hqH48qFDWHBgFlRTf/Zx1Vs+4aGiWCYPOHlTcWs 0ezNzWOJpuERIBLxUW6d+53IWCf6ubW3e8U/LDWHFhLtnv/3miSKyjgfcx45mLG9 5oVhIDbGjNMaoOq5ULoKqRnJg5uKQpIVj1e5iKlBw+negRw1Gro2cge02N3w7nI5 LtfNTb2QncacB7qHcRBqE54j9FGQCBxloW5a2DtQ4tPsabzAatxq/INW5w3Jj2dQ Z+EDqMOxV8dR5H08yGUhcMQCvIySx+7JmlmLO/T5k76eQgJwzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8dcTLOZMN49Hzlubu2qyLzYZYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDJiODk4MDEtZWMwNC0z ZDA4LTgxMDItOGU1Y2E3ODhiN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByQo3pSj5q3/lAcRw92VWai5lKQjOxga/BRi5u+Skz6aJT8kocKraLN wfxzqIQEK3eXAkKIUcj7JeJzFDz3phYF4g6l1sM2mBhTWcwfld88BDFZ7XIpORux fAdUt27qcteCkPO780EuNCK4ZLDz2OPJjgk/j/a8ButjfPq2YSFtbkW7Mks9sPH2 AGuEXY1/EYb9bMSdxvW/fOuo67W2BRPS9PbHh7PJCskzDte2OhUUSai1kxQQjHuQ nsXgnaiaNIpO46M8nrTSqTILXgz7saRFYzT1Pq5CmMDd7GWnaWR+k/WWse9GDoXg O+un7TOOp/auOXcZvZEw4u1+28xGMIc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:09:00 2025 by rpki-client