$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0d5fbfe-8622-3e08-8f47-e958c984f01b.roa File: e0d5fbfe-8622-3e08-8f47-e958c984f01b.roa (raw, json) Hash identifier: z0cDNHu/zlkqWeOG3JFZ8j65qT8qf1uEg9GLYUvO/BU= Subject key identifier: 38:12:E8:3E:1C:DE:12:39:DB:7B:2E:D9:10:6E:AF:A4:A0:74:4A:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB70D9C24709E2E6FD47C40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0d5fbfe-8622-3e08-8f47-e958c984f01b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 68.42.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:0d:9c:24:70:9e:2e:6f:d4:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=79a69b85-150f-4c8c-90a5-371c7971113c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:3a:53:e5:59:3f:f2:87:d1:a8:cf:47:41: 49:c2:0f:4e:67:98:28:73:5e:e0:77:01:4e:39:f0: 7d:68:21:e1:36:db:71:4e:73:42:d0:84:95:73:c3: 79:a9:fc:94:25:44:8b:27:4f:2c:5b:a9:d1:75:06: c3:cf:c2:a2:f5:13:ea:8d:8c:aa:38:be:78:22:5b: bc:10:35:13:59:6f:91:17:5e:3e:69:a2:cb:e6:1d: 56:7a:4c:4f:fa:ae:7a:aa:89:65:d8:2a:ca:39:d0: 1e:41:26:ed:8e:27:00:5d:90:60:f5:30:23:35:25: f9:5c:ca:2b:6f:e2:6e:e9:1d:8d:15:92:a4:f1:43: d9:d7:aa:f8:95:ee:25:6c:30:14:62:c4:59:95:96: 02:f1:9c:28:8a:57:d0:18:be:7a:76:9a:05:40:e7: 8a:99:e0:42:67:ac:74:c6:f0:8d:ba:15:4d:b3:0d: c3:db:48:05:0f:41:5b:e6:51:90:98:ac:ac:ae:b2: f4:1f:30:70:2b:50:bf:b7:73:b6:6e:43:e5:28:25: 21:b7:68:e5:c3:29:dc:6f:50:a9:ea:42:48:21:99: f3:a0:24:62:25:be:5b:48:29:8e:41:c3:4d:d0:1a: 37:3c:a2:08:ec:71:e1:63:20:19:d8:11:13:bc:dc: 3e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:12:E8:3E:1C:DE:12:39:DB:7B:2E:D9:10:6E:AF:A4:A0:74:4A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0d5fbfe-8622-3e08-8f47-e958c984f01b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b4:8c:11:04:09:b9:78:46:bd:2b:a4:9d:52:93:09:4a:68: 51:48:87:7b:e1:f1:48:df:44:d9:1f:7d:5e:9d:bb:98:1d:3d: 82:8a:fc:2d:18:89:f9:3d:3a:cc:19:81:35:8d:13:00:76:4d: c2:5d:2a:67:86:dd:02:56:90:b9:da:a1:35:95:e4:e6:c0:0c: a2:9b:80:1f:72:56:e4:c4:9d:a4:2d:91:d6:5a:88:8d:cb:76: ce:f7:65:e1:f8:ea:64:81:da:8d:3d:60:9c:36:eb:48:37:b7: 04:d5:99:02:20:10:47:ec:12:74:be:76:a9:9d:44:b6:9a:7b: 35:04:a2:7d:f1:9c:11:34:fa:16:17:2b:ab:74:69:86:9c:ac: 72:69:ce:a5:2f:79:dd:8e:58:07:41:44:aa:26:4c:52:e8:3d: 78:74:9f:6e:3a:bb:c7:4c:a7:9e:2c:0e:04:f3:0c:a6:86:4a: eb:43:ca:56:aa:cc:4b:9c:5d:58:cd:f8:eb:db:cc:f6:1f:f7: 44:13:27:1a:56:9d:73:38:ac:ee:c9:ed:b4:b1:be:83:5e:c5: c5:db:8d:63:f6:ba:5c:c0:c2:a0:5f:a9:ca:95:fb:7d:5d:c3: a1:c3:c2:31:b4:80:c0:64:1b:91:84:da:e2:e8:f0:61:5b:0b: 23:0d:19:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tw2cJHCeLm/UfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NzlhNjliODUtMTUwZi00YzhjLTkwYTUtMzcxYzc5NzExMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfE6U+VZP/KH0ajPR0FJwg9OZ5goc17gdwFO OfB9aCHhNttxTnNC0ISVc8N5qfyUJUSLJ08sW6nRdQbDz8Ki9RPqjYyqOL54Ilu8 EDUTWW+RF14+aaLL5h1WekxP+q56qoll2CrKOdAeQSbtjicAXZBg9TAjNSX5XMor b+Ju6R2NFZKk8UPZ16r4le4lbDAUYsRZlZYC8ZwoilfQGL56dpoFQOeKmeBCZ6x0 xvCNuhVNsw3D20gFD0Fb5lGQmKysrrL0HzBwK1C/t3O2bkPlKCUht2jlwyncb1Cp 6kJIIZnzoCRiJb5bSCmOQcNN0Bo3PKII7HHhYyAZ2BETvNw+2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgS6D4c3hI523su2RBur6SgdEpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTBkNWZiZmUtODYyMi0z ZTA4LThmNDctZTk1OGM5ODRmMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+0jBEECbl4Rr0rpJ1SkwlKaFFIh3vh8UjfRNkffV6du5gdPYKK/C0Y ifk9OswZgTWNEwB2TcJdKmeG3QJWkLnaoTWV5ObADKKbgB9yVuTEnaQtkdZaiI3L ds73ZeH46mSB2o09YJw260g3twTVmQIgEEfsEnS+dqmdRLaaezUEon3xnBE0+hYX K6t0aYacrHJpzqUved2OWAdBRKomTFLoPXh0n246u8dMp54sDgTzDKaGSutDylaq zEucXVjN+OvbzPYf90QTJxpWnXM4rO7J7bSxvoNexcXbjWP2ulzAwqBfqcqV+31d w6HDwjG0gMBkG5GE2uLo8GFbCyMNGTs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:06:09 2025 by rpki-client