$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/06377d45-c869-35fd-a7e4-ece02dd7df92.roa File: 06377d45-c869-35fd-a7e4-ece02dd7df92.roa (raw, json) Hash identifier: poYyVRjqrAciXPVMFs48YfnQFbRJJ0BSZGv4rIVAtoo= Subject key identifier: CC:1D:A9:2A:71:D7:A5:2E:7A:67:32:56:F2:49:E6:3C:AC:4E:D0:A8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B372B6A2DBA5F35204FA73DCE Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/06377d45-c869-35fd-a7e4-ece02dd7df92.roa Signing time: Tue 16 Sep 2025 16:44:38 +0000 ROA not before: Tue 16 Sep 2025 16:44:38 +0000 ROA not after: Mon 15 Dec 2025 17:44:38 +0000 asID: 23473 IP address blocks: 68.234.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:2b:6a:2d:ba:5f:35:20:4f:a7:3d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 16 16:44:38 2025 GMT Not After : Dec 15 17:44:38 2025 GMT Subject: CN=115159a4-b324-462f-86d4-8261699497f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:32:6f:f0:55:a8:cc:e2:ac:52:57:31:f0: 5a:7c:6f:5c:66:96:af:c8:0f:4a:2f:f4:6a:aa:36: 13:f1:e3:e5:28:f9:48:d9:ee:68:1c:30:ce:bf:3c: fe:34:f2:7e:46:fb:02:4f:f5:9d:56:6a:81:bb:e8: bd:d7:e4:03:13:8e:88:23:c3:77:64:f5:c7:de:21: 9d:6b:6f:d1:81:70:ad:b9:6a:51:b7:e6:52:c1:80: 08:5a:a1:32:81:46:5d:3d:6c:c2:62:68:b6:51:ca: 94:75:eb:bb:a8:ed:b7:7b:1c:8d:a8:10:37:1d:e5: 2d:b7:8f:e4:8b:a2:2a:3c:57:ec:70:49:23:ba:ed: e6:e0:4b:cf:cd:b8:a3:28:5b:32:dc:0c:f3:dd:bf: 3d:a0:17:de:4d:52:a2:4a:03:20:92:9c:35:77:71: b6:fa:af:df:4c:1a:0f:69:81:e9:da:14:c9:06:ae: d6:3a:68:13:38:b8:47:d0:0c:eb:6a:a5:b4:45:1e: c7:e3:a2:48:5f:9a:6f:14:e5:26:91:45:3e:de:ee: e3:39:3a:70:7b:bf:42:4d:87:6b:71:86:10:5a:60: bc:0f:58:b4:2c:74:91:61:d1:de:c9:72:62:4c:10: c8:f3:9a:23:5b:a4:51:77:48:c1:ca:21:b2:8c:2e: 3d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:A9:2A:71:D7:A5:2E:7A:67:32:56:F2:49:E6:3C:AC:4E:D0:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/06377d45-c869-35fd-a7e4-ece02dd7df92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7d:49:3b:86:e8:39:59:d0:40:f4:8a:80:23:48:1a:dc:e9: 71:b4:7a:0a:31:c5:ad:6a:00:84:1e:dd:65:40:72:90:51:b0: c4:18:29:88:f0:99:72:9b:c4:54:a2:81:71:21:d6:2f:67:55: 21:7e:e2:8d:2f:41:42:5d:17:b3:d9:2c:4e:51:39:ae:47:33: 54:ac:26:bc:a2:fb:5d:82:e8:a6:85:58:07:f1:9c:fa:a1:48: 94:28:81:db:0f:0f:d1:31:c5:b6:9f:41:66:44:84:ad:bd:b9: e6:10:47:63:08:f8:3b:d0:23:61:ca:6b:b9:dc:7f:5c:44:9a: 83:fb:be:00:e7:3b:ee:71:c6:75:c3:ef:dc:0c:58:e8:2b:fe: 34:db:ae:29:52:1e:65:7f:63:2a:d0:a9:ce:bb:3e:78:ca:c1: 4d:b7:a6:64:d1:b0:41:03:f3:ed:2d:3a:64:6a:7a:a0:35:de: 6d:42:b4:8a:31:ca:41:d9:92:5b:70:2b:ba:50:20:31:cc:93: 70:39:ab:9e:87:b9:f7:6a:fe:9b:59:07:43:50:86:ff:a4:0b: eb:93:25:d5:14:e7:d8:f9:41:e8:73:65:d9:68:b2:64:8c:0d: 41:57:1a:d4:ed:40:b7:11:10:0a:f8:ef:e3:b7:aa:4f:aa:83: fc:74:c3:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs3K2otul81IE+nPc4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNjE2NDQzOFoXDTI1MTIxNTE3NDQzOFowLzEtMCsGA1UEAxMk MTE1MTU5YTQtYjMyNC00NjJmLTg2ZDQtODI2MTY5OTQ5N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMkyb/BVqMzirFJXMfBafG9cZpavyA9KL/Rq qjYT8ePlKPlI2e5oHDDOvzz+NPJ+RvsCT/WdVmqBu+i91+QDE46II8N3ZPXH3iGd a2/RgXCtuWpRt+ZSwYAIWqEygUZdPWzCYmi2UcqUdeu7qO23exyNqBA3HeUtt4/k i6IqPFfscEkjuu3m4EvPzbijKFsy3Azz3b89oBfeTVKiSgMgkpw1d3G2+q/fTBoP aYHp2hTJBq7WOmgTOLhH0AzraqW0RR7H46JIX5pvFOUmkUU+3u7jOTpwe79CTYdr cYYQWmC8D1i0LHSRYdHeyXJiTBDI85ojW6RRd0jByiGyjC49IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwdqSpx16UuemcyVvJJ5jysTtCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDYzNzdkNDUtYzg2OS0z NWZkLWE3ZTQtZWNlMDJkZDdkZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl9STuG6DlZ0ED0ioAjSBrc6XG0egoxxa1qAIQe3WVAcpBRsMQYKYjw mXKbxFSigXEh1i9nVSF+4o0vQUJdF7PZLE5ROa5HM1SsJryi+12C6KaFWAfxnPqh SJQogdsPD9ExxbafQWZEhK29ueYQR2MI+DvQI2HKa7ncf1xEmoP7vgDnO+5xxnXD 79wMWOgr/jTbrilSHmV/YyrQqc67PnjKwU23pmTRsEED8+0tOmRqeqA13m1CtIox ykHZkltwK7pQIDHMk3A5q56Hufdq/ptZB0NQhv+kC+uTJdUU59j5QehzZdlosmSM DUFXGtTtQLcREAr47+O3qk+qg/x0w04= -----END CERTIFICATE-----Generated at Fri Oct 10 03:58:23 2025 by rpki-client