$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdbfa9a1-3569-33a5-a0b9-aba993043615.roa File: fdbfa9a1-3569-33a5-a0b9-aba993043615.roa (raw, json) Hash identifier: ynyB3qD/HfEXkZHmAhzwJfWWyWZQ6WkgE5baRykseNQ= Subject key identifier: 12:CF:96:B2:7C:77:F3:3D:4A:2F:7D:A5:50:90:34:D9:D7:24:68:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA74DF4181AC588FF70500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdbfa9a1-3569-33a5-a0b9-aba993043615.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.62.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:74:df:41:81:ac:58:8f:f7:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=58fd414d-57c8-4ebc-ae49-04bcf8ec5b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:ae:c2:4c:d9:9f:c1:db:bb:28:78:84:cc: 47:32:33:05:ad:70:83:25:94:8f:5a:84:67:e7:6f: 39:58:64:8a:a9:ed:2c:b8:25:66:82:31:84:19:d9: f7:2b:6a:e4:71:56:09:2b:2a:64:0e:59:70:18:ad: f2:69:3e:72:d2:3f:40:b8:d3:b8:b1:7b:62:fb:49: 03:d3:5f:c7:de:81:63:4a:14:f4:41:cd:ea:04:62: 7a:df:53:47:da:ac:9b:d6:19:a9:67:58:f2:63:e8: 79:a3:ab:d5:99:17:84:bf:fc:03:60:2e:b0:1e:45: e6:ec:c1:db:ae:c9:e2:62:5e:d7:4a:9d:40:cf:41: f7:0d:17:ea:fb:af:d0:54:36:79:54:f7:ff:44:c0: fa:2a:e2:39:a9:73:73:1c:6c:ed:2e:89:f4:05:70: 34:e4:dc:bf:59:68:58:f6:17:97:40:ec:ce:ca:7e: ef:e9:dc:cc:c0:93:84:fb:60:83:8c:09:ca:31:6a: b1:04:c7:25:6b:c1:b1:cd:eb:5e:74:79:25:48:f1: 67:20:67:80:98:43:54:38:65:4f:4f:8a:6d:e9:bd: 58:cd:29:2e:22:1a:f8:f8:91:67:c9:75:33:f8:f7: 27:9d:c4:3a:07:5a:b0:1f:7c:bc:a8:66:f8:49:95: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CF:96:B2:7C:77:F3:3D:4A:2F:7D:A5:50:90:34:D9:D7:24:68:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdbfa9a1-3569-33a5-a0b9-aba993043615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.62.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:4b:f4:09:b4:ed:af:f4:25:4a:bb:f1:cb:23:a3:df:a0:48: 4d:fa:66:9c:a5:2f:68:8a:aa:ce:6f:08:e9:63:a0:d4:53:83: 75:32:e2:36:16:c6:5a:89:e3:be:c6:10:b0:66:9b:98:69:4c: 99:03:7a:21:8a:b8:e7:55:e3:d0:13:b2:38:86:19:fe:17:8a: 4a:4d:77:7c:f9:49:f8:16:a3:b0:71:ee:03:1c:df:5c:27:c2: 66:52:20:64:b3:01:32:5b:59:0d:b1:25:5b:a8:0e:5a:ec:87: 1b:ca:f4:25:da:30:68:34:d5:e7:36:7f:7f:06:7e:4e:37:a1: 9d:be:ea:5d:8f:8c:2c:1f:6c:a5:b0:58:d0:ab:e4:2a:e5:52: 79:1c:a7:85:fe:34:92:bb:32:90:45:14:99:96:c8:b9:2b:c2: ce:32:8e:7d:0f:a1:8c:05:34:da:dc:00:a3:af:7a:3f:05:b9: 53:c9:83:2c:a3:76:e1:b3:6d:f3:8e:93:42:a7:00:4f:f7:de: 0e:bc:b4:60:55:39:4f:49:e7:5d:24:3c:8b:da:89:e3:43:34: bb:ac:84:33:74:e7:0e:62:5b:be:83:29:2b:3c:3b:8c:11:3f: e1:bd:48:68:cd:a0:55:8c:08:60:ce:56:c4:65:92:4e:e4:d4: 07:a0:90:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqnTfQYGsWI/3BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NThmZDQxNGQtNTdjOC00ZWJjLWFlNDktMDRiY2Y4ZWM1YjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubyuwkzZn8Hbuyh4hMxHMjMFrXCDJZSPWoRn 5285WGSKqe0suCVmgjGEGdn3K2rkcVYJKypkDllwGK3yaT5y0j9AuNO4sXti+0kD 01/H3oFjShT0Qc3qBGJ631NH2qyb1hmpZ1jyY+h5o6vVmReEv/wDYC6wHkXm7MHb rsniYl7XSp1Az0H3DRfq+6/QVDZ5VPf/RMD6KuI5qXNzHGztLon0BXA05Ny/WWhY 9heXQOzOyn7v6dzMwJOE+2CDjAnKMWqxBMcla8GxzetedHklSPFnIGeAmENUOGVP T4pt6b1YzSkuIhr4+JFnyXUz+PcnncQ6B1qwH3y8qGb4SZXVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLPlrJ8d/M9Si99pVCQNNnXJGgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmRiZmE5YTEtMzU2OS0z M2E1LWEwYjktYWJhOTkzMDQzNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARD5hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhL9Am07a/0JUq78csjo9+gSE36ZpylL2iKqs5vCOljoNRTg3Uy4jYW xlqJ477GELBmm5hpTJkDeiGKuOdV49ATsjiGGf4XikpNd3z5SfgWo7Bx7gMc31wn wmZSIGSzATJbWQ2xJVuoDlrshxvK9CXaMGg01ec2f38Gfk43oZ2+6l2PjCwfbKWw WNCr5CrlUnkcp4X+NJK7MpBFFJmWyLkrws4yjn0PoYwFNNrcAKOvej8FuVPJgyyj duGzbfOOk0KnAE/33g68tGBVOU9J510kPIvaieNDNLushDN05w5iW76DKSs8O4wR P+G9SGjNoFWMCGDOVsRlkk7k1AegkOI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:17:24 2025 by rpki-client