$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b5943ed8-f2ba-334a-900a-2d6f021e9c81.roa File: b5943ed8-f2ba-334a-900a-2d6f021e9c81.roa (raw, json) Hash identifier: jvYNZmz1RaIggRymE0GvIXYnMX29STyAkcwoRoXDH7c= Subject key identifier: 8E:F0:46:4D:CC:DD:22:5D:38:F2:9C:41:E8:73:B6:4A:D7:A9:06:C1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B3449EAF29F65EAB5B2ED3300 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b5943ed8-f2ba-334a-900a-2d6f021e9c81.roa Signing time: Mon 15 Sep 2025 15:58:40 +0000 ROA not before: Mon 15 Sep 2025 15:58:40 +0000 ROA not after: Sun 14 Dec 2025 16:58:40 +0000 asID: 23473 IP address blocks: 68.234.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:49:ea:f2:9f:65:ea:b5:b2:ed:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 15 15:58:40 2025 GMT Not After : Dec 14 16:58:40 2025 GMT Subject: CN=01207184-891c-4acc-9ad4-a712b141ab1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:23:ab:f9:41:9c:35:89:6e:2a:58:51:0d:49: dc:b8:ca:26:f6:7b:f0:3d:32:68:e5:f0:73:64:06: 50:c1:b9:0a:a7:84:14:30:81:6f:18:30:6f:cc:3c: 0f:ae:c0:e8:ed:89:99:a6:30:d1:f1:99:76:c6:0b: fa:8d:cf:98:69:3c:ac:f4:9c:80:e4:17:91:5c:a7: e4:97:5d:47:0b:7a:34:d4:09:df:11:e2:9a:97:e1: 8d:b0:61:22:44:2e:f8:c0:9c:1a:9e:6b:1b:30:c4: 0b:3b:85:61:d7:7d:a2:68:11:86:5d:17:6b:fc:c0: 8f:0f:34:58:b6:c4:bd:3a:cd:df:27:53:8b:c3:ac: 9a:24:fa:86:09:13:4e:20:8c:81:3c:72:58:80:74: d4:b3:35:8e:c8:88:a5:e1:28:74:99:16:db:3b:c0: e4:8d:2e:70:65:de:64:c6:00:51:57:07:05:5e:45: 0d:33:29:e0:a0:a2:17:a6:89:fc:29:e1:ac:71:9a: d6:88:cc:d5:da:ed:76:0d:70:45:63:24:2f:a8:81: 27:3b:2c:d5:81:85:cc:0c:17:d2:12:de:cf:79:ff: 37:fd:52:5d:0d:4c:ef:3c:35:8c:0c:ad:8c:f6:44: a3:f0:49:51:21:04:94:5c:97:c3:a3:2c:ac:71:13: 25:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F0:46:4D:CC:DD:22:5D:38:F2:9C:41:E8:73:B6:4A:D7:A9:06:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b5943ed8-f2ba-334a-900a-2d6f021e9c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1a:cb:57:0d:84:86:b1:d0:ed:41:0a:73:89:67:46:fe:c3: b0:8e:8d:66:0b:eb:16:3e:e6:a1:a3:f2:e8:f9:8f:24:c3:e4: 76:91:31:95:1a:6f:40:6a:96:1d:6a:d2:3a:06:56:64:63:c9: b8:fc:05:90:4e:e8:5f:b3:5d:a7:7e:08:35:93:86:d5:21:87: f6:5b:0e:23:59:f8:fe:d3:a4:5f:d6:df:02:a8:0f:63:92:f3: 9a:cc:89:3e:4b:26:9f:d2:e5:f9:20:be:c8:af:44:4f:2e:32: f5:0f:4f:1d:30:cd:8b:cb:0c:c7:3d:74:50:2e:06:74:d8:f1: 2a:b4:1b:f1:a4:f0:b7:36:8d:54:18:71:1f:84:0c:3d:c8:ba: a2:54:d4:ae:f7:11:08:89:eb:de:3f:42:07:cf:02:0d:f3:64: d5:28:73:00:d3:eb:11:bf:cf:e6:be:59:30:5a:a2:de:aa:d2: ef:a7:ea:04:81:4d:a5:34:cb:a4:2b:06:47:2d:0c:1b:be:42: bb:d6:d4:a1:d3:62:30:01:2b:67:e0:5b:a3:52:d2:c8:d7:18: db:ab:e1:42:95:e8:91:1f:9f:ed:f3:39:5c:c7:d3:52:0f:bc: 13:57:24:21:da:b0:09:c1:55:ae:5f:5b:f6:9e:f6:4a:e8:51: df:ad:93:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0Seryn2XqtbLtMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNTE1NTg0MFoXDTI1MTIxNDE2NTg0MFowLzEtMCsGA1UEAxMk MDEyMDcxODQtODkxYy00YWNjLTlhZDQtYTcxMmIxNDFhYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iOr+UGcNYluKlhRDUncuMom9nvwPTJo5fBz ZAZQwbkKp4QUMIFvGDBvzDwPrsDo7YmZpjDR8Zl2xgv6jc+YaTys9JyA5BeRXKfk l11HC3o01AnfEeKal+GNsGEiRC74wJwanmsbMMQLO4Vh132iaBGGXRdr/MCPDzRY tsS9Os3fJ1OLw6yaJPqGCRNOIIyBPHJYgHTUszWOyIil4Sh0mRbbO8DkjS5wZd5k xgBRVwcFXkUNMyngoKIXpon8KeGscZrWiMzV2u12DXBFYyQvqIEnOyzVgYXMDBfS Et7Pef83/VJdDUzvPDWMDK2M9kSj8ElRIQSUXJfDoyyscRMluwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7wRk3M3SJdOPKcQehztkrXqQbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYjU5NDNlZDgtZjJiYS0z MzRhLTkwMGEtMmQ2ZjAyMWU5YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQay1cNhIax0O1BCnOJZ0b+w7COjWYL6xY+5qGj8uj5jyTD5HaRMZUa b0Bqlh1q0joGVmRjybj8BZBO6F+zXad+CDWThtUhh/ZbDiNZ+P7TpF/W3wKoD2OS 85rMiT5LJp/S5fkgvsivRE8uMvUPTx0wzYvLDMc9dFAuBnTY8Sq0G/Gk8Lc2jVQY cR+EDD3IuqJU1K73EQiJ694/QgfPAg3zZNUocwDT6xG/z+a+WTBaot6q0u+n6gSB TaU0y6QrBkctDBu+QrvW1KHTYjABK2fgW6NS0sjXGNur4UKV6JEfn+3zOVzH01IP vBNXJCHasAnBVa5fW/ae9kroUd+tkxQ= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:44 2025 by rpki-client