$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aa965c21-050a-3186-99c2-2b87accd1db1.roa File: aa965c21-050a-3186-99c2-2b87accd1db1.roa (raw, json) Hash identifier: YCaHpXI3ROFlgcqDUggiwzqudEK2Kkxc5ywiDV6TL/k= Subject key identifier: BC:30:93:55:25:CE:D5:B4:D5:C4:4A:BF:DE:47:5B:2F:19:8C:67:21 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B23EF233C0B4198C90C28F980 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aa965c21-050a-3186-99c2-2b87accd1db1.roa Signing time: Tue 09 Sep 2025 19:22:49 +0000 ROA not before: Tue 09 Sep 2025 19:22:49 +0000 ROA not after: Mon 08 Dec 2025 20:22:49 +0000 asID: 23473 IP address blocks: 68.180.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:ef:23:3c:0b:41:98:c9:0c:28:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 9 19:22:49 2025 GMT Not After : Dec 8 20:22:49 2025 GMT Subject: CN=8b6ffd02-a44e-48ec-9e81-54345247b4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:37:85:ec:03:a5:66:50:bc:08:83:24:61:1a: af:64:0d:2d:23:d7:f4:bf:28:a9:ab:5d:42:69:94: 3b:ef:53:94:e4:d0:c5:68:d0:e6:36:8d:ed:5a:0c: 0e:2f:b7:fc:77:ed:04:ac:12:80:88:45:7b:97:d2: 5b:d9:62:5e:a4:b3:27:d4:36:02:dd:24:a0:de:0c: 58:9c:d2:94:6d:d7:a7:51:18:41:47:66:cd:c4:68: ed:d5:f6:48:95:8d:52:cc:5d:7f:1e:4f:6f:a1:5d: f9:fa:c9:e8:82:ec:2d:69:98:ee:a8:18:68:35:63: d4:5b:90:34:51:cc:91:17:fd:7c:ff:0b:d9:b9:bd: ad:2d:8e:5d:00:0d:8a:f5:db:d4:f9:f3:12:80:ea: 18:2d:61:0f:f6:7b:5f:c7:ee:60:e0:2d:a3:49:05: 59:72:d9:bc:b3:2e:f6:30:2f:ed:9e:9e:a4:8f:21: a0:b9:89:42:54:b7:da:44:88:98:3c:85:6c:7a:d5: e7:91:48:0c:5a:62:13:66:a8:48:be:09:82:4b:54: 67:fc:bd:16:3b:b1:8e:0f:36:fc:98:3b:0e:c9:67: 72:ea:86:c1:5e:2e:58:1c:64:aa:0d:55:70:17:a3: 8b:b3:58:2b:e8:66:17:70:cb:36:a8:f6:91:a1:1f: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:30:93:55:25:CE:D5:B4:D5:C4:4A:BF:DE:47:5B:2F:19:8C:67:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aa965c21-050a-3186-99c2-2b87accd1db1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:43:52:d3:32:eb:a6:41:64:9e:25:e2:d3:62:73:1f:7b:b2: 39:e6:3b:ad:2c:dd:ee:2e:e6:36:96:ae:67:f6:e4:a0:a4:b0: ae:af:64:cc:c2:a9:8f:c9:e4:62:60:9a:6d:d0:22:6d:02:e4: 83:71:15:22:e9:2b:ce:9a:5f:9b:8f:c9:4e:56:40:e9:b9:a6: 4b:dc:64:56:dc:05:fa:26:ea:9f:43:21:06:a8:34:93:e3:fc: ee:90:6b:7c:9b:42:a4:e6:08:86:6e:fe:7d:30:46:36:cc:60: 6a:21:5c:f9:49:6c:d1:f1:37:9f:51:ed:4a:d4:00:27:66:0c: a9:6a:e2:32:20:36:1d:c7:39:6f:1d:f7:ea:ba:e2:07:4e:cd: a0:44:72:96:78:41:dd:a6:48:73:8e:70:cb:8b:be:94:d6:b0: db:3b:9b:df:9c:39:df:18:d7:cf:b7:ac:39:ac:92:a2:37:45: c5:d7:ba:a2:6a:73:50:dc:00:7c:f0:24:04:2c:23:8b:b9:cb: a4:82:1f:2a:13:3e:d0:ef:56:af:a2:cb:f8:ef:4c:e8:d5:09: 79:7d:c7:54:6a:6c:66:91:57:24:c2:6f:cf:c2:5a:5d:a9:61: 43:48:b2:57:98:45:4d:22:32:de:3d:ad:5e:4e:15:46:71:68: e4:38:2c:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsj7yM8C0GYyQwo+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkwOTE5MjI0OVoXDTI1MTIwODIwMjI0OVowLzEtMCsGA1UEAxMk OGI2ZmZkMDItYTQ0ZS00OGVjLTllODEtNTQzNDUyNDdiNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDeF7AOlZlC8CIMkYRqvZA0tI9f0vyipq11C aZQ771OU5NDFaNDmNo3tWgwOL7f8d+0ErBKAiEV7l9Jb2WJepLMn1DYC3SSg3gxY nNKUbdenURhBR2bNxGjt1fZIlY1SzF1/Hk9voV35+snoguwtaZjuqBhoNWPUW5A0 UcyRF/18/wvZub2tLY5dAA2K9dvU+fMSgOoYLWEP9ntfx+5g4C2jSQVZctm8sy72 MC/tnp6kjyGguYlCVLfaRIiYPIVsetXnkUgMWmITZqhIvgmCS1Rn/L0WO7GODzb8 mDsOyWdy6obBXi5YHGSqDVVwF6OLs1gr6GYXcMs2qPaRoR/I5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwwk1UlztW01cRKv95HWy8ZjGchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWE5NjVjMjEtMDUwYS0z MTg2LTk5YzItMmI4N2FjY2QxZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpDUtMy66ZBZJ4l4tNicx97sjnmO60s3e4u5jaWrmf25KCksK6vZMzC qY/J5GJgmm3QIm0C5INxFSLpK86aX5uPyU5WQOm5pkvcZFbcBfom6p9DIQaoNJPj /O6Qa3ybQqTmCIZu/n0wRjbMYGohXPlJbNHxN59R7UrUACdmDKlq4jIgNh3HOW8d 9+q64gdOzaBEcpZ4Qd2mSHOOcMuLvpTWsNs7m9+cOd8Y18+3rDmskqI3RcXXuqJq c1DcAHzwJAQsI4u5y6SCHyoTPtDvVq+iy/jvTOjVCXl9x1RqbGaRVyTCb8/CWl2p YUNIsleYRU0iMt49rV5OFUZxaOQ4LJo= -----END CERTIFICATE-----Generated at Fri Oct 10 03:49:24 2025 by rpki-client