$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8e279ecb-cbb7-354e-aff4-458131ac9947.roa File: 8e279ecb-cbb7-354e-aff4-458131ac9947.roa (raw, json) Hash identifier: lYKJnYXV9AdScoXcFpKvbeK2eOQZFMjidMXObSY9JtY= Subject key identifier: 5E:D3:96:D2:F0:A3:16:45:78:32:E3:89:5A:78:C7:B2:6B:C0:52:90 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B3727CD328E87D53315773D30 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8e279ecb-cbb7-354e-aff4-458131ac9947.roa Signing time: Tue 16 Sep 2025 16:37:21 +0000 ROA not before: Tue 16 Sep 2025 16:37:21 +0000 ROA not after: Mon 15 Dec 2025 17:37:21 +0000 asID: 23473 IP address blocks: 68.234.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:27:cd:32:8e:87:d5:33:15:77:3d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 16 16:37:21 2025 GMT Not After : Dec 15 17:37:21 2025 GMT Subject: CN=b94adf29-629f-46e8-9f5a-a3a7849f47a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:13:ec:cf:34:17:24:47:c7:4b:f0:79:c7:02: 77:cb:39:3c:16:a2:83:66:e5:99:5c:4b:b1:7b:8a: 1b:e5:bb:1c:e8:a8:a3:69:88:79:61:2a:ee:eb:4a: ce:e6:8a:17:a7:7e:28:ae:62:fa:fb:91:0f:25:a0: 10:3f:54:d5:84:c2:b6:12:4d:87:15:82:1d:fb:87: ad:62:cd:57:f4:33:b0:e2:41:69:da:ec:ea:82:58: 02:09:96:e5:a8:cc:7e:00:de:20:a5:b7:67:59:2f: 8a:eb:f7:df:23:e7:99:64:d4:46:16:c0:62:a6:b4: c0:0a:46:c8:7f:89:cc:79:87:4f:4b:23:46:fe:c8: a3:69:6d:36:a4:84:66:cf:c1:36:a0:77:a6:3c:f0: 4c:b9:5d:b9:0e:8a:2b:43:51:51:df:4f:5b:c4:57: cb:e3:f9:50:c9:d2:49:2b:0b:e3:8c:7e:2d:db:22: a3:db:6d:a7:f0:98:6d:5f:5c:6a:20:2f:d1:01:2a: 3a:28:ca:aa:36:33:d3:fc:4e:de:e0:0e:6c:d5:11: bb:08:2b:28:e7:11:a4:78:49:b4:1d:ef:6e:a4:05: be:14:2c:0c:3d:86:61:89:e4:05:5d:b5:b1:f0:d5: f9:08:1b:11:59:90:3d:60:e9:67:07:82:6e:bf:96: 38:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D3:96:D2:F0:A3:16:45:78:32:E3:89:5A:78:C7:B2:6B:C0:52:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8e279ecb-cbb7-354e-aff4-458131ac9947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:98:41:22:79:45:3a:89:fc:b4:2f:9d:75:33:9d:05:1d:e0: 7f:38:a3:92:b0:bd:0f:bc:60:b5:6d:89:73:72:7d:a5:99:a8: 0c:3e:74:0a:b4:63:18:6f:b9:10:0b:48:e0:a9:9d:d0:f6:36: d3:4d:16:43:b5:77:97:85:68:3f:fb:12:32:df:fb:de:23:b6: 6f:6a:4b:6f:93:8b:e0:9b:95:f0:d0:98:0f:7b:7a:2a:02:b5: 64:46:49:c7:40:68:a7:1c:86:de:ce:d7:07:65:3e:d2:d9:11: 6a:94:6a:88:8d:4e:8e:57:b5:fb:ed:14:84:a3:cb:04:dc:fa: 8e:57:5d:f0:5f:91:6a:81:05:2d:bf:50:cb:1f:f9:2c:ca:98: 4f:7e:ae:5f:d8:60:7f:f4:77:1c:b9:72:16:ad:ff:b3:30:fa: 35:42:bf:28:cf:aa:c0:ee:5a:8c:6c:c9:55:2d:44:53:2b:ff: 6a:d5:f8:ff:1b:f3:94:c1:d8:06:f7:d9:41:91:fe:8a:a6:a1: 99:d1:e5:7d:32:70:34:e8:fb:da:91:23:58:b6:e9:2e:46:d1: 23:18:5e:c6:79:54:23:fe:a3:97:2d:89:5c:1e:f4:f8:61:ce: 2c:79:89:cc:c9:80:d5:f9:a1:c1:fa:52:99:76:6b:3b:19:b6: d1:00:f8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs3J80yjofVMxV3PTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNjE2MzcyMVoXDTI1MTIxNTE3MzcyMVowLzEtMCsGA1UEAxMk Yjk0YWRmMjktNjI5Zi00NmU4LTlmNWEtYTNhNzg0OWY0N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRPszzQXJEfHS/B5xwJ3yzk8FqKDZuWZXEux e4ob5bsc6KijaYh5YSru60rO5ooXp34ormL6+5EPJaAQP1TVhMK2Ek2HFYId+4et Ys1X9DOw4kFp2uzqglgCCZblqMx+AN4gpbdnWS+K6/ffI+eZZNRGFsBiprTACkbI f4nMeYdPSyNG/sijaW02pIRmz8E2oHemPPBMuV25DoorQ1FR309bxFfL4/lQydJJ KwvjjH4t2yKj222n8JhtX1xqIC/RASo6KMqqNjPT/E7e4A5s1RG7CCso5xGkeEm0 He9upAW+FCwMPYZhieQFXbWx8NX5CBsRWZA9YOlnB4Juv5Y4FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7TltLwoxZFeDLjiVp4x7JrwFKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOGUyNzllY2ItY2JiNy0z NTRlLWFmZjQtNDU4MTMxYWM5OTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROq8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiYQSJ5RTqJ/LQvnXUznQUd4H84o5KwvQ+8YLVtiXNyfaWZqAw+dAq0 YxhvuRALSOCpndD2NtNNFkO1d5eFaD/7EjLf+94jtm9qS2+Ti+CblfDQmA97eioC tWRGScdAaKccht7O1wdlPtLZEWqUaoiNTo5XtfvtFISjywTc+o5XXfBfkWqBBS2/ UMsf+SzKmE9+rl/YYH/0dxy5chat/7Mw+jVCvyjPqsDuWoxsyVUtRFMr/2rV+P8b 85TB2Ab32UGR/oqmoZnR5X0ycDTo+9qRI1i26S5G0SMYXsZ5VCP+o5ctiVwe9Phh zix5iczJgNX5ocH6Upl2azsZttEA+BE= -----END CERTIFICATE-----Generated at Fri Oct 10 03:49:30 2025 by rpki-client