$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36510b2e-0d6d-3707-88da-2f64e516dbce.roa File: 36510b2e-0d6d-3707-88da-2f64e516dbce.roa (raw, json) Hash identifier: cyyI/8euMB3AwPs3bGhqYbbXvc63xGonjDuGfPfsxWE= Subject key identifier: CA:D4:F4:41:30:C0:02:C5:54:BF:F3:B4:9B:97:78:20:7C:C0:B8:29 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B374833BCEF5B57AA2B1ACB80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36510b2e-0d6d-3707-88da-2f64e516dbce.roa Signing time: Tue 16 Sep 2025 17:42:38 +0000 ROA not before: Tue 16 Sep 2025 17:42:38 +0000 ROA not after: Mon 15 Dec 2025 18:42:38 +0000 asID: 23473 IP address blocks: 68.234.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:48:33:bc:ef:5b:57:aa:2b:1a:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 16 17:42:38 2025 GMT Not After : Dec 15 18:42:38 2025 GMT Subject: CN=aa53dd23-307c-488c-9a19-59e502c9bc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:7c:c7:28:94:4f:b7:d4:89:3d:7c:6d:16: 15:a9:ba:cd:26:83:1e:4a:86:ef:2a:8e:b0:5c:6e: 77:56:fb:c4:49:7c:ec:e3:01:8d:5e:69:52:0f:fb: 1e:22:7b:4f:12:e2:8a:80:21:b3:75:68:3f:cc:4f: 42:7d:5c:1f:16:9d:01:64:5c:82:f7:04:e1:05:ce: 4f:ae:a7:2c:f9:36:86:4a:c7:21:2a:65:96:df:49: 77:51:41:51:15:01:f5:34:b7:cb:09:6b:eb:60:ff: 87:62:58:b8:d9:d7:34:ef:02:a7:eb:32:43:00:21: e3:08:b9:fb:90:e0:ba:a2:a5:b5:8d:49:a1:21:12: 22:e6:3b:24:d1:ed:f8:29:68:c1:44:c1:bc:ad:70: 00:90:5e:17:cf:36:46:80:5c:65:80:c5:36:b6:cb: 58:a2:39:5d:d9:25:05:05:a0:1b:ef:b6:a2:85:26: 40:e5:b1:9a:aa:d2:22:1b:ac:38:a5:67:f9:a6:ca: 45:3e:ae:61:f4:77:27:a7:0d:ef:74:a3:71:ef:dd: dc:40:70:db:4b:ac:7c:76:0e:8e:5b:62:d3:08:a7: 21:c5:83:69:4e:73:28:c2:1a:8f:ce:b3:71:6a:8c: 0b:21:90:2a:34:4a:c0:06:e2:65:f4:09:46:93:8c: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D4:F4:41:30:C0:02:C5:54:BF:F3:B4:9B:97:78:20:7C:C0:B8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36510b2e-0d6d-3707-88da-2f64e516dbce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e0:d8:3c:63:a1:24:31:9d:c1:f2:1e:57:ea:b0:23:aa:d3: fd:36:79:9d:a2:77:17:50:e1:37:74:7b:f6:26:2f:d5:4a:fc: cc:6a:2e:4e:b3:e0:79:cb:bc:ab:95:0b:7a:61:a1:3c:60:ee: 21:66:a0:51:78:32:75:a2:da:21:7c:fb:49:4e:e8:87:80:8b: 40:11:17:c6:95:5a:6d:1f:3e:38:0f:dc:2e:fe:06:1b:89:10: 8c:27:b4:a0:28:07:13:a8:27:f9:70:5b:ba:8a:fc:d9:ba:1f: b8:74:64:f8:db:69:01:2e:46:ab:f2:75:02:d6:0d:0b:95:e5: fe:2f:68:4c:e4:d3:d7:9d:05:20:56:18:1c:9b:68:ef:3d:4d: 56:c4:d8:57:7d:88:c0:aa:0e:03:b1:aa:9c:a3:48:65:74:03: 0e:bf:5a:23:03:36:d4:da:74:36:0a:91:76:dd:43:9c:69:10: 7b:d2:7a:14:24:7f:fb:ad:12:2d:da:d2:96:7a:cb:24:a2:e5: 54:f5:8f:23:59:28:34:88:1e:a0:11:9d:85:00:3e:b0:6d:bb: f2:0b:b1:5c:2b:58:9d:64:88:4d:d5:44:d4:0a:12:63:f2:ac: e6:06:cc:5f:99:56:64:28:c5:53:c2:21:d6:4e:04:9c:76:6e: 80:62:7e:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs3SDO871tXqisay4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNjE3NDIzOFoXDTI1MTIxNTE4NDIzOFowLzEtMCsGA1UEAxMk YWE1M2RkMjMtMzA3Yy00ODhjLTlhMTktNTllNTAyYzliYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEN8xyiUT7fUiT18bRYVqbrNJoMeSobvKo6w XG53VvvESXzs4wGNXmlSD/seIntPEuKKgCGzdWg/zE9CfVwfFp0BZFyC9wThBc5P rqcs+TaGSschKmWW30l3UUFRFQH1NLfLCWvrYP+HYli42dc07wKn6zJDACHjCLn7 kOC6oqW1jUmhIRIi5jsk0e34KWjBRMG8rXAAkF4XzzZGgFxlgMU2tstYojld2SUF BaAb77aihSZA5bGaqtIiG6w4pWf5pspFPq5h9Hcnpw3vdKNx793cQHDbS6x8dg6O W2LTCKchxYNpTnMowhqPzrNxaowLIZAqNErABuJl9AlGk4wHswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrU9EEwwALFVL/ztJuXeCB8wLgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzY1MTBiMmUtMGQ2ZC0z NzA3LTg4ZGEtMmY2NGU1MTZkYmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROr+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDg2DxjoSQxncHyHlfqsCOq0/02eZ2idxdQ4Td0e/YmL9VK/MxqLk6z 4HnLvKuVC3phoTxg7iFmoFF4MnWi2iF8+0lO6IeAi0ARF8aVWm0fPjgP3C7+BhuJ EIwntKAoBxOoJ/lwW7qK/Nm6H7h0ZPjbaQEuRqvydQLWDQuV5f4vaEzk09edBSBW GBybaO89TVbE2Fd9iMCqDgOxqpyjSGV0Aw6/WiMDNtTadDYKkXbdQ5xpEHvSehQk f/utEi3a0pZ6yySi5VT1jyNZKDSIHqARnYUAPrBtu/ILsVwrWJ1kiE3VRNQKEmPy rOYGzF+ZVmQoxVPCIdZOBJx2boBifog= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:26 2025 by rpki-client