$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa File: a10965b1-15bc-387b-be67-ebfa65ef6972.roa (raw, json) Hash identifier: oED9l3Spa+9hcz8FPKFByLilozkmMQ/TxFj955Of73I= Subject key identifier: DA:86:9B:FF:24:15:94:F4:E6:D6:EE:0B:1D:50:5E:31:26:E2:45:E1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B372FFD4477A105ED5BA0E380 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa Signing time: Tue 16 Sep 2025 16:53:51 +0000 ROA not before: Tue 16 Sep 2025 16:53:51 +0000 ROA not after: Mon 15 Dec 2025 17:53:51 +0000 asID: 23473 IP address blocks: 68.234.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:2f:fd:44:77:a1:05:ed:5b:a0:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 16 16:53:51 2025 GMT Not After : Dec 15 17:53:51 2025 GMT Subject: CN=8e2cf7a1-41d9-4b75-9c89-0f8e9cc75f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:8a:37:5c:ef:7c:76:3f:15:18:59:8c:cc: be:c2:46:e2:69:41:3e:ee:26:3e:5f:71:2a:23:83: 4f:01:08:b4:87:0f:6f:c1:ed:95:a8:15:4d:22:42: eb:39:66:f5:f8:7d:77:f4:99:87:ed:16:5e:80:30: 0a:6e:31:30:77:7b:fc:2c:9f:4d:61:2f:c4:89:2d: 03:d3:81:12:4e:43:7f:49:25:8a:58:1b:92:3f:e9: ce:c5:11:b3:48:9b:b8:eb:a6:6c:43:c8:b0:8c:ed: 2c:49:e1:0d:6f:cf:cf:14:60:52:2e:5e:bf:02:8f: 1d:2b:b9:bd:7a:1d:a4:bc:d2:c0:47:32:b6:c3:4b: 36:b8:7e:e3:4e:d7:de:53:09:d7:3c:9a:9e:f5:41: 42:fc:71:c4:b3:37:64:ab:a6:1a:1c:ff:00:f1:07: ef:1e:74:e6:04:99:f4:24:7b:ca:54:df:45:33:be: 70:ef:fb:73:a0:1e:dc:c6:3c:83:ee:5b:b3:af:13: 6b:73:ac:dd:a3:3a:2f:c8:aa:a7:89:51:3a:28:f0: 78:8a:9d:5a:06:4b:24:ea:7e:da:0b:24:cd:a0:60: af:2e:04:5b:60:d4:2c:97:89:ed:14:bf:a8:83:91: f6:b3:2f:7c:b2:11:d2:26:0a:85:11:f6:c9:67:f5: ba:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:86:9B:FF:24:15:94:F4:E6:D6:EE:0B:1D:50:5E:31:26:E2:45:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9e:7a:4c:af:e4:e1:6f:d4:65:28:14:21:ab:3f:3e:e3:52: aa:0b:74:95:8f:4d:98:0d:31:ea:47:93:30:06:17:d1:58:f2: 9f:56:d0:6b:02:6a:ab:c1:0c:9f:00:72:7f:9b:b7:12:06:28: f2:4a:18:84:62:c6:6d:d3:6e:8c:94:ac:2f:ac:36:0f:54:21: 57:6c:51:f7:e6:1c:82:b5:6e:9d:01:26:07:cc:d9:3c:32:b4: 87:ec:da:ba:49:4f:2d:74:8d:82:26:cb:c9:99:6d:42:c1:47: 45:34:c6:59:39:f0:a7:00:77:10:26:33:72:5c:77:5c:cc:ea: 9c:85:69:13:c8:f8:39:ac:f2:a4:ae:c3:b8:64:1f:2b:e6:31: 98:20:ea:c1:79:c9:58:cb:12:7d:a6:23:cc:c4:1e:57:2a:25: e1:6f:07:b8:98:ca:97:42:d7:69:73:bf:c3:bd:ca:c0:3f:81: 13:3a:a4:cc:ee:80:e5:5a:cc:ea:3d:84:11:b5:d2:ed:bd:61: e1:a7:58:68:17:fd:9b:b3:e7:55:e6:2a:c4:e8:c5:ad:f9:da: 2e:0b:1c:93:e7:b5:0b:d0:bc:22:c6:8c:68:f9:03:c4:5f:ac: 3f:c8:0a:c6:77:b6:76:75:e7:b8:16:37:9b:24:2f:1d:e2:9e: 74:a2:63:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs3L/1Ed6EF7Vug44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNjE2NTM1MVoXDTI1MTIxNTE3NTM1MVowLzEtMCsGA1UEAxMk OGUyY2Y3YTEtNDFkOS00Yjc1LTljODktMGY4ZTljYzc1ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJeKN1zvfHY/FRhZjMy+wkbiaUE+7iY+X3Eq I4NPAQi0hw9vwe2VqBVNIkLrOWb1+H139JmH7RZegDAKbjEwd3v8LJ9NYS/EiS0D 04ESTkN/SSWKWBuSP+nOxRGzSJu466ZsQ8iwjO0sSeENb8/PFGBSLl6/Ao8dK7m9 eh2kvNLARzK2w0s2uH7jTtfeUwnXPJqe9UFC/HHEszdkq6YaHP8A8QfvHnTmBJn0 JHvKVN9FM75w7/tzoB7cxjyD7luzrxNrc6zdozovyKqniVE6KPB4ip1aBksk6n7a CyTNoGCvLgRbYNQsl4ntFL+og5H2sy98shHSJgqFEfbJZ/W6bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqGm/8kFZT05tbuCx1QXjEm4kXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTEwOTY1YjEtMTViYy0z ODdiLWJlNjctZWJmYTY1ZWY2OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6eekyv5OFv1GUoFCGrPz7jUqoLdJWPTZgNMepHkzAGF9FY8p9W0GsC aqvBDJ8Acn+btxIGKPJKGIRixm3TboyUrC+sNg9UIVdsUffmHIK1bp0BJgfM2Twy tIfs2rpJTy10jYImy8mZbULBR0U0xlk58KcAdxAmM3Jcd1zM6pyFaRPI+Dms8qSu w7hkHyvmMZgg6sF5yVjLEn2mI8zEHlcqJeFvB7iYypdC12lzv8O9ysA/gRM6pMzu gOVazOo9hBG10u29YeGnWGgX/Zuz51XmKsToxa352i4LHJPntQvQvCLGjGj5A8Rf rD/ICsZ3tnZ157gWN5skLx3innSiYzM= -----END CERTIFICATE-----Generated at Fri Oct 10 03:49:38 2025 by rpki-client