$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb87f211-fbb1-3a0e-a6e4-a34c8426fb66.roa File: bb87f211-fbb1-3a0e-a6e4-a34c8426fb66.roa (raw, json) Hash identifier: J1VcqEJ+GIq83mL/fJ4UsqNP7/qvVzW5qPEC+o9+91c= Subject key identifier: 58:07:BE:3A:3E:05:68:00:55:48:ED:81:7A:07:6C:6D:D2:2F:19:EE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B344AF4F55F28AC0DBF19F740 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb87f211-fbb1-3a0e-a6e4-a34c8426fb66.roa Signing time: Mon 15 Sep 2025 16:00:46 +0000 ROA not before: Mon 15 Sep 2025 16:00:46 +0000 ROA not after: Sun 14 Dec 2025 17:00:46 +0000 asID: 23473 IP address blocks: 68.234.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:4a:f4:f5:5f:28:ac:0d:bf:19:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 15 16:00:46 2025 GMT Not After : Dec 14 17:00:46 2025 GMT Subject: CN=09e0aafc-0a67-44d1-9dfb-244e492d483e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:49:0d:30:60:87:3f:44:00:39:50:48:48: 88:9d:fc:01:36:0f:a2:e5:e2:76:35:5c:3a:0a:38: 01:ae:4a:6d:15:7e:34:ab:34:0f:b1:f5:11:0d:cf: f6:fb:38:7e:c5:c2:c5:2a:c9:7f:d6:f8:61:10:43: 7a:6f:0a:95:dc:2a:93:63:6e:fd:55:ad:a2:50:47: b7:3f:1c:07:d2:0a:65:6b:99:d8:84:c0:bb:ac:f9: 4d:87:87:7b:ce:c5:83:5c:f3:59:2f:3d:f9:d6:b8: 5d:83:28:7a:cc:33:64:1b:c5:de:91:de:83:58:f5: 38:f0:ea:ea:c3:80:b8:ca:a7:48:76:40:61:8d:02: 66:66:eb:03:a9:8e:fc:40:44:0e:31:bf:d3:01:03: 64:c9:7f:ab:69:50:6d:3d:90:7c:54:38:00:60:b4: 0e:e5:13:48:46:84:e1:c0:5a:3e:97:60:bf:83:0c: b2:cd:81:b3:4d:e0:6e:78:48:24:38:13:b8:50:12: 20:c6:22:30:00:df:58:e4:80:be:d8:dc:a8:7c:19: fa:a3:b5:33:e5:be:60:e1:96:61:eb:31:90:2b:fc: 7c:67:77:a8:c4:8a:2f:9c:35:4a:c8:62:bc:6c:af: 4f:c1:03:47:2c:7c:f1:1c:e6:07:a2:bd:d7:31:89: 3c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:07:BE:3A:3E:05:68:00:55:48:ED:81:7A:07:6C:6D:D2:2F:19:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb87f211-fbb1-3a0e-a6e4-a34c8426fb66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a9:c0:ab:56:d2:80:3f:7c:fd:b2:94:72:c0:32:de:00:35: bd:4b:12:0c:08:f0:5b:f4:e0:e4:28:82:9e:c1:42:66:4e:b6: 3a:a9:90:4a:45:c8:07:38:4c:d4:88:f2:78:34:a7:32:7a:49: e2:71:94:41:c6:c2:f8:62:ad:a7:0a:bb:33:fe:8f:01:64:92: b1:a5:53:50:7c:ac:a8:b8:97:e1:b8:30:38:a7:e1:9e:57:c6: c5:56:c6:44:88:f3:33:72:bd:aa:18:ee:b8:c4:71:fd:94:67: 0e:3f:10:12:76:9f:fb:b0:05:93:22:b3:ec:48:71:cc:35:e5: 07:b1:7a:41:f3:47:ea:12:19:3a:0e:86:2e:62:87:fd:18:c7: 42:d4:47:89:34:ef:ea:19:f6:38:ad:ae:79:4f:66:db:4d:08: f0:a1:42:b5:45:e3:4e:88:e2:66:2a:3e:ac:a6:7b:83:45:35: f6:79:5b:4c:3f:b1:6c:b2:e5:9d:92:c8:a1:e7:83:32:f8:5c: 54:c2:62:f8:e7:85:4e:96:20:5a:26:01:2c:a3:c9:00:db:05: 9e:12:d8:31:75:8a:d2:3f:28:8e:72:5a:6d:30:7f:e3:90:3c: 1f:12:f4:0b:ca:ee:3c:f6:aa:09:6b:cf:71:ce:72:53:92:b0: 52:be:bb:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0SvT1XyisDb8Z90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNTE2MDA0NloXDTI1MTIxNDE3MDA0NlowLzEtMCsGA1UEAxMk MDllMGFhZmMtMGE2Ny00NGQxLTlkZmItMjQ0ZTQ5MmQ0ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLJJDTBghz9EADlQSEiInfwBNg+i5eJ2NVw6 CjgBrkptFX40qzQPsfURDc/2+zh+xcLFKsl/1vhhEEN6bwqV3CqTY279Va2iUEe3 PxwH0gpla5nYhMC7rPlNh4d7zsWDXPNZLz351rhdgyh6zDNkG8Xekd6DWPU48Orq w4C4yqdIdkBhjQJmZusDqY78QEQOMb/TAQNkyX+raVBtPZB8VDgAYLQO5RNIRoTh wFo+l2C/gwyyzYGzTeBueEgkOBO4UBIgxiIwAN9Y5IC+2NyofBn6o7Uz5b5g4ZZh 6zGQK/x8Z3eoxIovnDVKyGK8bK9PwQNHLHzxHOYHor3XMYk80QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgHvjo+BWgAVUjtgXoHbG3SLxnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmI4N2YyMTEtZmJiMS0z YTBlLWE2ZTQtYTM0Yzg0MjZmYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6pwKtW0oA/fP2ylHLAMt4ANb1LEgwI8Fv04OQogp7BQmZOtjqpkEpF yAc4TNSI8ng0pzJ6SeJxlEHGwvhiracKuzP+jwFkkrGlU1B8rKi4l+G4MDin4Z5X xsVWxkSI8zNyvaoY7rjEcf2UZw4/EBJ2n/uwBZMis+xIccw15QexekHzR+oSGToO hi5ih/0Yx0LUR4k07+oZ9jitrnlPZttNCPChQrVF406I4mYqPqyme4NFNfZ5W0w/ sWyy5Z2SyKHngzL4XFTCYvjnhU6WIFomASyjyQDbBZ4S2DF1itI/KI5yWm0wf+OQ PB8S9AvK7jz2qglrz3HOclOSsFK+u3c= -----END CERTIFICATE-----Generated at Fri Oct 10 03:58:30 2025 by rpki-client