$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44b9c7e1-4a3a-37ab-85ee-6f9656aa09ac.roa File: 44b9c7e1-4a3a-37ab-85ee-6f9656aa09ac.roa (raw, json) Hash identifier: 02DclL2QkmnGq0pV4EaCHJMlG/eLqu7zPod6dCfnrl4= Subject key identifier: AF:58:D6:68:CB:82:C7:42:18:00:1D:C9:66:3E:49:C5:16:06:81:90 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B344A6C1A7D02A94B885D3700 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44b9c7e1-4a3a-37ab-85ee-6f9656aa09ac.roa Signing time: Mon 15 Sep 2025 15:59:41 +0000 ROA not before: Mon 15 Sep 2025 15:59:41 +0000 ROA not after: Sun 14 Dec 2025 16:59:41 +0000 asID: 23473 IP address blocks: 68.234.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:4a:6c:1a:7d:02:a9:4b:88:5d:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 15 15:59:41 2025 GMT Not After : Dec 14 16:59:41 2025 GMT Subject: CN=9f3248cc-7341-4933-a28b-1c091bceff4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:ab:9f:b6:10:17:e6:9d:d5:8b:f2:a4:86: cc:5a:ce:84:64:33:40:5b:91:fc:23:09:31:05:90: 1b:08:44:99:8f:28:40:fe:22:f9:ea:4a:72:4c:19: 38:ef:90:12:34:6b:cf:17:16:52:00:b6:83:1d:90: 60:0d:60:a5:e2:c9:c8:9d:cc:78:3e:b9:65:0f:94: 6e:a1:e1:35:d9:80:bb:8f:ca:20:00:07:2b:b2:f5: 3e:b7:7b:87:cf:fe:30:1c:43:4e:17:34:3f:11:a5: 74:f6:c0:26:82:46:2e:d3:c3:5f:ba:6a:b8:2f:55: 40:18:52:e8:f9:8d:c6:0e:82:e3:09:1c:d0:28:77: f9:39:e7:ac:85:ce:83:94:27:bb:20:e9:48:36:87: a9:44:e8:4c:33:0a:e3:dc:c4:8b:ef:52:1a:d6:c7: a3:5b:47:77:bc:0b:13:58:af:67:61:47:1e:aa:c9: bb:e4:28:12:3b:9a:30:59:6d:e9:61:2a:d4:20:b5: 09:33:16:05:12:ea:35:b8:27:0f:ff:a4:4a:3f:9e: 83:c5:ce:18:e9:dd:1a:ca:54:6e:9f:ce:d7:10:44: 42:2a:07:a8:25:b8:1b:0d:d3:0e:22:72:2d:a1:4c: 6c:1c:14:b0:fa:8f:88:8f:ba:31:4f:26:64:8a:58: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:58:D6:68:CB:82:C7:42:18:00:1D:C9:66:3E:49:C5:16:06:81:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44b9c7e1-4a3a-37ab-85ee-6f9656aa09ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:13:c5:c1:bc:c8:84:a8:2d:8a:e3:16:80:82:68:98:a2:96: ca:72:06:28:c7:6e:58:6d:aa:d9:3c:8a:28:58:c0:87:39:e6: 38:94:7a:2d:5e:ce:69:24:50:a3:b4:40:31:44:0d:54:16:37: cc:7d:da:58:1f:e3:66:f3:f0:ad:26:51:da:21:35:85:de:34: 1c:42:8f:d9:c6:97:2e:39:5f:ea:8a:aa:15:64:a2:fe:59:e8: 46:e3:13:80:86:de:bd:67:10:42:21:c5:ea:ee:ce:d5:1b:17: 24:c0:c7:3d:9c:27:47:e2:86:73:b6:1c:41:94:36:b6:74:b7: 69:94:3d:61:45:14:b9:32:47:b0:24:48:05:af:12:28:94:05: 79:53:5d:ed:02:30:71:ed:b0:6e:b8:92:99:9a:c0:a4:7d:87: 2f:5e:71:01:16:f4:60:11:36:a8:8b:7a:a4:32:47:63:4a:5e: ef:f6:49:3a:b0:d1:9e:18:68:26:04:25:2b:d7:55:5c:8b:d9: f0:69:11:15:d7:37:77:08:4d:88:bd:12:62:b1:19:2c:6b:d9: 76:8f:c6:0a:4f:f5:f0:aa:0d:6d:1a:69:b0:a3:14:67:48:37: f2:40:bb:3e:42:e4:8f:8d:cd:75:23:b5:45:47:1d:64:a4:1d: d8:5e:93:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0SmwafQKpS4hdNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNTE1NTk0MVoXDTI1MTIxNDE2NTk0MVowLzEtMCsGA1UEAxMk OWYzMjQ4Y2MtNzM0MS00OTMzLWEyOGItMWMwOTFiY2VmZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIern7YQF+ad1YvypIbMWs6EZDNAW5H8Iwkx BZAbCESZjyhA/iL56kpyTBk475ASNGvPFxZSALaDHZBgDWCl4snIncx4PrllD5Ru oeE12YC7j8ogAAcrsvU+t3uHz/4wHENOFzQ/EaV09sAmgkYu08Nfumq4L1VAGFLo +Y3GDoLjCRzQKHf5Oeeshc6DlCe7IOlINoepROhMMwrj3MSL71Ia1sejW0d3vAsT WK9nYUceqsm75CgSO5owWW3pYSrUILUJMxYFEuo1uCcP/6RKP56Dxc4Y6d0aylRu n87XEERCKgeoJbgbDdMOInItoUxsHBSw+o+Ij7oxTyZkiljJTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9Y1mjLgsdCGAAdyWY+ScUWBoGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDRiOWM3ZTEtNGEzYS0z N2FiLTg1ZWUtNmY5NjU2YWEwOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUTxcG8yISoLYrjFoCCaJiilspyBijHblhtqtk8iihYwIc55jiUei1e zmkkUKO0QDFEDVQWN8x92lgf42bz8K0mUdohNYXeNBxCj9nGly45X+qKqhVkov5Z 6EbjE4CG3r1nEEIhxeruztUbFyTAxz2cJ0fihnO2HEGUNrZ0t2mUPWFFFLkyR7Ak SAWvEiiUBXlTXe0CMHHtsG64kpmawKR9hy9ecQEW9GARNqiLeqQyR2NKXu/2STqw 0Z4YaCYEJSvXVVyL2fBpERXXN3cITYi9EmKxGSxr2XaPxgpP9fCqDW0aabCjFGdI N/JAuz5C5I+NzXUjtUVHHWSkHdhek/E= -----END CERTIFICATE-----Generated at Fri Oct 10 03:49:31 2025 by rpki-client