$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfe26e43-7fe3-33bd-a08c-b8a50952ef1a.roa File: dfe26e43-7fe3-33bd-a08c-b8a50952ef1a.roa (raw, json) Hash identifier: G8YU2lfAq4AVKYNSPNjj3PvWosWa/Bt62j8F9owrCTA= Subject key identifier: 89:C0:E1:C7:C7:A6:4C:EB:8D:FB:C8:D0:87:99:14:32:11:8E:B2:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC228BEB1BDBB546A6053C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfe26e43-7fe3-33bd-a08c-b8a50952ef1a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 68.38.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:28:be:b1:bd:bb:54:6a:60:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=143bcaf0-0f82-4e09-af3e-1ea6f44ee0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:70:3c:70:92:70:aa:c5:ef:bf:22:6e:fd: 49:8f:24:bb:17:fd:09:0b:06:61:d7:89:a1:c3:f6: 93:7c:25:bd:37:f1:ed:a9:80:a2:49:28:fb:b4:cf: 95:e6:9a:22:0e:70:35:7c:c9:60:10:9d:fb:c4:14: 4a:86:8c:d2:52:d5:b2:84:c5:d2:b2:4b:e0:1d:5a: 99:85:09:57:f5:20:f4:3c:35:b9:87:82:49:b5:45: cf:db:22:76:fd:71:11:5f:0b:53:0e:85:2c:3b:36: 01:58:cd:53:a8:94:5b:4a:f4:4d:4f:d5:85:79:f4: 0d:ca:5e:5b:ed:8b:01:31:ab:31:50:86:01:af:71: e5:81:4e:17:ae:97:b0:2e:de:f1:5c:0a:7d:7f:e3: e9:14:90:78:a7:0e:5e:86:47:78:39:ae:a1:59:2f: 6c:bf:96:21:d1:a0:7c:a4:6b:6e:57:f3:22:e3:3d: cd:f9:0a:76:14:7e:f2:b5:93:a5:ed:ae:9b:c3:75: 5b:11:eb:c8:f9:4c:46:5f:19:9f:c8:f9:19:41:ef: 33:1a:e3:f3:a1:62:6e:d6:ba:b0:c7:1f:19:3e:2a: cf:5e:d1:b9:01:fb:a7:36:e6:89:6a:2b:4e:03:18: d2:98:73:48:45:50:82:21:31:7a:da:a4:b3:02:d4: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C0:E1:C7:C7:A6:4C:EB:8D:FB:C8:D0:87:99:14:32:11:8E:B2:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfe26e43-7fe3-33bd-a08c-b8a50952ef1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:8a:bb:db:fd:51:79:27:2e:81:e4:d2:16:63:cd:45:36:b4: d8:2b:80:91:98:cc:26:70:ca:ca:7c:aa:a6:92:0c:14:e9:0e: 50:fd:5d:93:1a:05:c6:60:2d:65:e2:65:62:4f:99:b0:ce:98: f7:30:b5:ad:0f:45:36:2c:5e:4e:78:7b:56:bb:43:aa:fe:0a: 7c:73:c8:1a:be:f2:d4:75:3b:09:89:9c:a5:24:e3:9a:71:9f: ce:30:75:2e:a1:57:15:ff:8a:25:8d:d3:78:02:7a:7d:af:14: 8b:1d:20:31:53:96:ad:32:98:c0:71:50:1e:76:bb:01:35:fc: f9:db:3e:88:6b:1b:5d:da:81:60:b1:e0:1a:85:a7:dc:3e:11: 4b:35:2f:e6:23:76:bb:d8:56:f1:8a:4c:34:d8:3f:3d:8c:ff: 3c:a8:61:6c:35:71:f4:d7:54:7c:7d:3e:65:2e:3f:84:28:dd: 1a:07:11:6d:09:d1:bb:1f:33:c0:d2:4c:b5:75:05:b1:10:e6: e4:b6:96:17:5f:1a:35:f2:30:fa:4d:b2:b9:46:ca:7b:76:e0: f2:e2:ff:8c:23:3e:05:7f:a6:9c:e1:fb:18:ad:d3:c6:05:e1: 81:66:27:ad:82:74:90:0a:b6:0e:9e:66:00:c1:ac:93:cb:1f: b1:96:d9:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswii+sb27VGpgU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTQzYmNhZjAtMGY4Mi00ZTA5LWFmM2UtMWVhNmY0NGVlMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKFwPHCScKrF778ibv1JjyS7F/0JCwZh14mh w/aTfCW9N/HtqYCiSSj7tM+V5poiDnA1fMlgEJ37xBRKhozSUtWyhMXSskvgHVqZ hQlX9SD0PDW5h4JJtUXP2yJ2/XERXwtTDoUsOzYBWM1TqJRbSvRNT9WFefQNyl5b 7YsBMasxUIYBr3HlgU4XrpewLt7xXAp9f+PpFJB4pw5ehkd4Oa6hWS9sv5Yh0aB8 pGtuV/Mi4z3N+Qp2FH7ytZOl7a6bw3VbEevI+UxGXxmfyPkZQe8zGuPzoWJu1rqw xx8ZPirPXtG5AfunNuaJaitOAxjSmHNIRVCCITF62qSzAtRXfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInA4cfHpkzrjfvI0IeZFDIRjrItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZlMjZlNDMtN2ZlMy0z M2JkLWEwOGMtYjhhNTA5NTJlZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANWKu9v9UXknLoHk0hZjzUU2tNgrgJGYzCZwysp8qqaSDBTpDlD9XZMa BcZgLWXiZWJPmbDOmPcwta0PRTYsXk54e1a7Q6r+CnxzyBq+8tR1OwmJnKUk45px n84wdS6hVxX/iiWN03gCen2vFIsdIDFTlq0ymMBxUB52uwE1/PnbPohrG13agWCx 4BqFp9w+EUs1L+YjdrvYVvGKTDTYPz2M/zyoYWw1cfTXVHx9PmUuP4Qo3RoHEW0J 0bsfM8DSTLV1BbEQ5uS2lhdfGjXyMPpNsrlGynt24PLi/4wjPgV/ppzh+xit08YF 4YFmJ62CdJAKtg6eZgDBrJPLH7GW2Qc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:18:52 2025 by rpki-client