$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7d17113f-f9aa-3bfe-ae6a-a69e04b7a063.roa File: 7d17113f-f9aa-3bfe-ae6a-a69e04b7a063.roa (raw, json) Hash identifier: N8u3PPmeYtFvudGFkfnUj9IzlRMGVPDhngYd+dWfJEo= Subject key identifier: 8C:45:63:5A:06:89:07:FE:3A:C6:08:8E:84:AD:D7:D0:0D:A9:B9:AC Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B374788CF15F2D7258E05D140 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7d17113f-f9aa-3bfe-ae6a-a69e04b7a063.roa Signing time: Tue 16 Sep 2025 17:41:18 +0000 ROA not before: Tue 16 Sep 2025 17:41:18 +0000 ROA not after: Mon 15 Dec 2025 18:41:18 +0000 asID: 23473 IP address blocks: 68.234.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:47:88:cf:15:f2:d7:25:8e:05:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 16 17:41:18 2025 GMT Not After : Dec 15 18:41:18 2025 GMT Subject: CN=b40f10b9-e8f8-450a-9bd5-44c71079b4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:92:98:55:f2:a4:9f:60:3d:54:0c:df:d3: 8f:cd:28:0f:57:e9:ce:3f:5b:88:1e:94:a0:db:43: fe:5d:51:38:23:4f:37:bc:51:65:ac:cd:f8:c2:1f: 17:76:a7:4c:1b:d8:9b:b2:c7:14:be:80:0d:e9:9f: 72:ff:46:39:c2:62:4e:47:53:b8:4e:72:95:22:6c: be:96:b8:43:69:a8:b9:d3:6f:98:77:4c:b3:40:c4: 9a:e1:53:f3:2c:6a:c3:a1:51:d7:ec:a7:0e:08:c4: 64:6e:d0:7d:e9:81:a2:fe:63:c5:55:bb:54:71:7b: 74:fb:02:e7:dd:11:c1:06:9b:5a:ac:b5:ef:45:89: 38:02:ac:fe:e8:0a:94:28:fa:49:1a:be:8f:a5:55: 20:37:20:88:ed:15:f1:50:46:fe:d1:f7:ae:86:fc: 31:ac:d0:40:7e:77:66:29:c6:f0:51:54:85:ac:2e: a1:fb:69:60:6e:f2:d7:cc:0d:85:a5:a8:db:6c:ad: 0a:75:6b:d7:7a:6c:e6:57:91:70:77:3f:5c:c6:88: d3:5a:1f:e1:40:c0:b7:37:09:41:7c:2c:99:07:7f: eb:6b:04:7c:36:be:66:9a:1f:09:d5:88:3b:7f:36: 3f:c1:71:44:e7:d9:92:0b:e4:d8:28:33:17:7f:9a: 9a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:45:63:5A:06:89:07:FE:3A:C6:08:8E:84:AD:D7:D0:0D:A9:B9:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7d17113f-f9aa-3bfe-ae6a-a69e04b7a063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9e:3c:79:e3:28:87:04:72:a2:2c:c2:84:5f:35:70:5c:0c: 74:6a:94:b6:5a:68:35:76:45:0f:bc:47:5b:a5:02:88:55:ca: 69:59:d1:24:94:cd:03:ea:79:65:38:12:5b:0b:78:e2:2f:38: 35:21:62:96:a6:70:ad:57:30:2c:c8:1f:1b:7c:fe:2c:dd:15: b3:be:83:0a:03:34:12:36:ab:fe:96:93:7e:97:7a:26:6e:73: fd:60:3e:ac:76:87:a9:62:8d:01:22:20:d9:0f:87:17:9c:ab: 48:7d:8e:df:ac:21:59:60:dc:ec:4a:c8:92:78:14:7b:ad:48: b4:35:7f:60:0c:49:5d:c1:5a:e5:19:4b:8f:60:74:e0:d8:93: 9a:3f:bd:a8:29:6b:62:25:fc:9c:0c:64:d1:1d:bb:70:87:64: 89:6c:95:1e:3f:78:4a:5f:8c:ff:07:95:20:2e:b2:1a:1a:37: 24:ff:c3:9d:6d:ea:a9:ba:7a:96:d9:e7:d5:9f:89:4f:fe:cb: 44:c3:d6:97:22:bc:9a:4a:3d:15:3e:cd:06:04:2e:bc:50:03: a8:3e:51:30:48:e8:93:b6:ca:f1:2a:5d:c5:26:95:dc:65:f2: 5d:d0:0a:a8:89:81:0c:84:c8:c9:48:4a:65:1c:4a:96:a0:44: 2e:ce:ad:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs3R4jPFfLXJY4F0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNjE3NDExOFoXDTI1MTIxNTE4NDExOFowLzEtMCsGA1UEAxMk YjQwZjEwYjktZThmOC00NTBhLTliZDUtNDRjNzEwNzliNGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuySmFXypJ9gPVQM39OPzSgPV+nOP1uIHpSg 20P+XVE4I083vFFlrM34wh8XdqdMG9ibsscUvoAN6Z9y/0Y5wmJOR1O4TnKVImy+ lrhDaai502+Yd0yzQMSa4VPzLGrDoVHX7KcOCMRkbtB96YGi/mPFVbtUcXt0+wLn 3RHBBptarLXvRYk4Aqz+6AqUKPpJGr6PpVUgNyCI7RXxUEb+0feuhvwxrNBAfndm KcbwUVSFrC6h+2lgbvLXzA2FpajbbK0KdWvXemzmV5Fwdz9cxojTWh/hQMC3NwlB fCyZB3/rawR8Nr5mmh8J1Yg7fzY/wXFE59mSC+TYKDMXf5qaOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxFY1oGiQf+OsYIjoSt19ANqbmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvN2QxNzExM2YtZjlhYS0z YmZlLWFlNmEtYTY5ZTA0YjdhMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROr9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqePHnjKIcEcqIswoRfNXBcDHRqlLZaaDV2RQ+8R1ulAohVymlZ0SSU zQPqeWU4ElsLeOIvODUhYpamcK1XMCzIHxt8/izdFbO+gwoDNBI2q/6Wk36XeiZu c/1gPqx2h6lijQEiINkPhxecq0h9jt+sIVlg3OxKyJJ4FHutSLQ1f2AMSV3BWuUZ S49gdODYk5o/vagpa2Il/JwMZNEdu3CHZIlslR4/eEpfjP8HlSAushoaNyT/w51t 6qm6epbZ59WfiU/+y0TD1pcivJpKPRU+zQYELrxQA6g+UTBI6JO2yvEqXcUmldxl 8l3QCqiJgQyEyMlISmUcSpagRC7OrY4= -----END CERTIFICATE-----Generated at Fri Oct 10 03:58:19 2025 by rpki-client