$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/88ae4c46-728f-3e77-a5e6-68cd27b6c870.roa File: 88ae4c46-728f-3e77-a5e6-68cd27b6c870.roa (raw, json) Hash identifier: 93/MIbe4I6lh3ron1P5wNHsNkd02BDU4+ZsyeZ8aSAs= Subject key identifier: D7:AA:00:3A:2F:A6:DF:BE:01:AC:A0:A8:4F:9F:02:73:62:73:7A:C1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B344BD3E904AB2EC661CE84E0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/88ae4c46-728f-3e77-a5e6-68cd27b6c870.roa Signing time: Mon 15 Sep 2025 16:02:31 +0000 ROA not before: Mon 15 Sep 2025 16:02:31 +0000 ROA not after: Sun 14 Dec 2025 17:02:31 +0000 asID: 23473 IP address blocks: 68.234.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:4b:d3:e9:04:ab:2e:c6:61:ce:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 15 16:02:31 2025 GMT Not After : Dec 14 17:02:31 2025 GMT Subject: CN=2ade4f9b-768f-4202-917c-01634cdd388d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:e3:90:91:1c:df:0a:22:a3:56:30:2f:5b: 88:d9:8e:d2:bb:a2:ad:d6:ce:38:6f:6e:95:55:f0: d3:a6:b9:cd:82:e5:d6:f1:8a:27:83:3a:ca:c2:f0: 32:56:8a:00:10:b4:72:a9:83:30:a6:c2:43:1d:00: df:e5:6f:4b:56:fb:62:86:06:58:cb:a3:12:7e:30: f0:e2:0a:1f:25:59:33:0f:a3:60:bd:e3:f4:64:64: be:d9:37:4f:0a:5e:9d:15:d6:0e:c7:1b:0a:bd:8d: bc:c7:2f:d2:df:38:50:ec:79:61:44:4a:ef:c7:3c: 08:79:e6:2c:8f:fc:80:d2:e5:09:7b:d5:5b:7f:b0: 03:96:52:b6:90:04:aa:b9:63:f0:0c:d9:50:59:1d: b6:63:20:22:39:2a:f0:1e:b8:93:53:a7:5a:08:91: f3:5e:fc:85:34:8b:d7:84:ce:b2:9a:89:8b:51:48: 69:6d:2c:b4:fd:50:f1:63:22:68:23:f9:47:b7:00: df:51:75:6a:b5:ab:88:36:a5:3d:e7:6d:dd:45:41: e8:cf:a7:40:ba:ce:c7:11:53:0d:70:ff:ae:51:f1: de:b1:5c:23:c7:1a:92:01:1e:8e:46:d8:73:b4:1f: 77:27:d1:b6:46:00:70:fa:53:d6:cd:7b:e2:8d:e1: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AA:00:3A:2F:A6:DF:BE:01:AC:A0:A8:4F:9F:02:73:62:73:7A:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/88ae4c46-728f-3e77-a5e6-68cd27b6c870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f2:66:fa:59:2e:2e:bf:ec:5e:ad:61:86:4b:e6:08:1d:3f: ce:d7:85:87:62:da:92:70:ab:27:5c:ab:8c:7c:7f:e5:6e:73: d0:78:97:2d:85:2e:aa:f9:b4:6f:61:a3:8b:9a:04:bd:b3:5c: c7:2c:05:a2:d2:54:aa:1b:db:4d:e5:b3:0f:10:97:53:f8:da: ca:f7:4d:33:0d:70:c6:69:42:bd:e5:e6:67:7a:22:1d:e1:01: 2a:bf:31:ff:c8:7c:c2:61:b5:31:5a:6d:92:f2:c1:4c:05:0c: dc:6b:7f:26:8f:ae:5a:ca:80:3f:96:f5:63:9d:27:55:69:a7: ab:91:bc:54:95:90:69:da:a8:57:35:5e:fe:ab:a5:db:24:9a: 33:6e:b8:bb:02:7f:15:a8:d4:14:d9:03:87:28:51:1a:00:d2: 6d:39:8b:95:bb:97:63:7c:8e:3d:eb:ad:d1:a3:c4:7e:f4:03: ed:72:0b:ef:a5:78:9b:d9:5c:be:94:40:ab:8a:08:02:99:d9: 4d:af:2c:02:58:98:39:3b:9b:02:a9:7f:4c:6e:a5:d5:75:04: 7b:0e:b3:61:f4:7b:2f:39:76:64:a3:62:87:aa:d6:9b:a6:6e: 11:7a:1e:25:ba:2a:ca:cc:be:45:13:bd:4c:6f:57:b5:23:af: d3:54:23:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0S9PpBKsuxmHOhOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNTE2MDIzMVoXDTI1MTIxNDE3MDIzMVowLzEtMCsGA1UEAxMk MmFkZTRmOWItNzY4Zi00MjAyLTkxN2MtMDE2MzRjZGQzODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi23jkJEc3woio1YwL1uI2Y7Su6Kt1s44b26V VfDTprnNguXW8YongzrKwvAyVooAELRyqYMwpsJDHQDf5W9LVvtihgZYy6MSfjDw 4gofJVkzD6NgveP0ZGS+2TdPCl6dFdYOxxsKvY28xy/S3zhQ7HlhRErvxzwIeeYs j/yA0uUJe9Vbf7ADllK2kASquWPwDNlQWR22YyAiOSrwHriTU6daCJHzXvyFNIvX hM6ymomLUUhpbSy0/VDxYyJoI/lHtwDfUXVqtauINqU9523dRUHoz6dAus7HEVMN cP+uUfHesVwjxxqSAR6ORthztB93J9G2RgBw+lPWzXvijeFl7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeqADovpt++AaygqE+fAnNic3rBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODhhZTRjNDYtNzI4Zi0z ZTc3LWE1ZTYtNjhjZDI3YjZjODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPyZvpZLi6/7F6tYYZL5ggdP87XhYdi2pJwqydcq4x8f+Vuc9B4ly2F Lqr5tG9ho4uaBL2zXMcsBaLSVKob203lsw8Ql1P42sr3TTMNcMZpQr3l5md6Ih3h ASq/Mf/IfMJhtTFabZLywUwFDNxrfyaPrlrKgD+W9WOdJ1Vpp6uRvFSVkGnaqFc1 Xv6rpdskmjNuuLsCfxWo1BTZA4coURoA0m05i5W7l2N8jj3rrdGjxH70A+1yC++l eJvZXL6UQKuKCAKZ2U2vLAJYmDk7mwKpf0xupdV1BHsOs2H0ey85dmSjYoeq1pum bhF6HiW6KsrMvkUTvUxvV7Ujr9NUI6M= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:41 2025 by rpki-client