$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cde99b28-d15f-39e0-b262-4cb952f2077e.roa File: cde99b28-d15f-39e0-b262-4cb952f2077e.roa (raw, json) Hash identifier: upHM0SOkN5n+YEFAdU/XTKq9k/QG3hg7OZIvWSFP2CM= Subject key identifier: E3:1C:D5:9C:42:33:8C:5B:DA:27:FA:9F:5A:37:43:CC:ED:15:CB:50 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B3448A3D483513E812B376000 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cde99b28-d15f-39e0-b262-4cb952f2077e.roa Signing time: Mon 15 Sep 2025 15:56:06 +0000 ROA not before: Mon 15 Sep 2025 15:56:06 +0000 ROA not after: Sun 14 Dec 2025 16:56:06 +0000 asID: 23473 IP address blocks: 68.234.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:48:a3:d4:83:51:3e:81:2b:37:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 15 15:56:06 2025 GMT Not After : Dec 14 16:56:06 2025 GMT Subject: CN=591d48b2-abf4-4c5c-a578-0c3211976f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f1:bf:71:4e:12:db:61:bc:46:1c:25:18:bd: bf:f5:ec:9c:0c:aa:a2:f7:c7:d1:0f:24:69:b8:23: ea:07:f4:aa:a7:87:99:bc:7f:5f:5e:46:e7:71:ba: 9a:c1:15:51:c5:4e:1f:83:ea:5f:24:8b:cd:bc:fd: 81:5d:f5:0b:54:fb:64:12:a3:3c:b4:c9:e7:d5:b9: 25:17:28:fb:fc:cb:a7:85:3b:83:ca:55:26:7a:1c: 0c:ef:ab:9e:43:e1:95:e4:c5:54:a2:ae:38:12:13: 0d:c7:02:06:52:a6:8c:b5:93:3e:66:7e:49:53:0f: cf:9f:5b:b2:18:ec:9f:bd:a7:32:85:99:a5:5d:41: c9:28:52:b8:10:15:9e:fe:aa:24:db:64:73:d5:ca: 04:75:36:e5:1f:41:f7:4a:ff:de:de:61:86:cd:df: 71:d2:62:e0:2e:a2:db:48:78:11:99:7e:a9:2f:f6: 5c:41:9d:c4:70:1d:e7:2a:df:a3:22:ec:30:b1:c8: 77:b2:6f:46:66:91:cf:be:81:04:d2:85:0f:fc:e5: 57:68:49:c9:f2:e8:0d:de:49:20:1b:3a:32:c3:1b: c9:d5:e8:f0:3d:de:47:87:df:12:c0:b9:b0:89:cd: ab:51:35:70:ca:20:cd:45:83:13:33:92:23:99:87: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1C:D5:9C:42:33:8C:5B:DA:27:FA:9F:5A:37:43:CC:ED:15:CB:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cde99b28-d15f-39e0-b262-4cb952f2077e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:43:cc:74:94:c8:61:c8:6e:4d:7f:a2:91:b7:11:b2:18:bb: 08:74:b7:6c:36:8b:50:16:10:a7:5e:37:1a:15:e1:6b:79:5c: 87:14:97:01:d6:6a:c0:4c:4c:11:22:4e:c2:93:5a:ae:b1:a9: 3c:f6:da:20:7d:f8:29:b7:83:be:66:32:0b:e5:95:4d:e2:60: 95:2f:5a:b6:95:75:06:07:98:e3:c6:ef:8f:2a:07:68:16:25: 8b:ae:87:77:ad:7f:2d:38:ff:e1:b4:8a:ae:7d:e2:64:8f:9d: 38:50:e9:cd:89:7c:d4:8c:4e:3d:45:f2:d0:f2:e1:2d:8a:73: 04:81:10:ea:53:eb:cc:18:ce:ce:9e:ca:e8:64:53:05:4a:78: e8:de:da:84:00:91:20:be:6e:ea:01:22:8a:09:ea:d8:57:80: ef:38:53:b3:82:31:6f:c2:da:9f:54:ac:db:d6:20:4d:32:15: 72:9b:25:fa:97:6e:41:4f:18:e4:c4:63:15:a8:89:89:90:e0: ac:50:69:c0:f7:33:97:ab:98:38:a7:2b:4e:ef:c5:69:87:8f: 99:78:11:b0:2f:01:6d:ba:aa:bf:8b:66:24:b9:3c:36:f1:8d: 1b:96:96:8c:c2:1f:a0:16:5c:77:fe:b5:b2:0a:cd:b9:df:5f: 1f:35:17:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0SKPUg1E+gSs3YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNTE1NTYwNloXDTI1MTIxNDE2NTYwNlowLzEtMCsGA1UEAxMk NTkxZDQ4YjItYWJmNC00YzVjLWE1NzgtMGMzMjExOTc2Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fG/cU4S22G8RhwlGL2/9eycDKqi98fRDyRp uCPqB/Sqp4eZvH9fXkbncbqawRVRxU4fg+pfJIvNvP2BXfULVPtkEqM8tMnn1bkl Fyj7/MunhTuDylUmehwM76ueQ+GV5MVUoq44EhMNxwIGUqaMtZM+Zn5JUw/Pn1uy GOyfvacyhZmlXUHJKFK4EBWe/qok22Rz1coEdTblH0H3Sv/e3mGGzd9x0mLgLqLb SHgRmX6pL/ZcQZ3EcB3nKt+jIuwwsch3sm9GZpHPvoEE0oUP/OVXaEnJ8ugN3kkg GzoywxvJ1ejwPd5Hh98SwLmwic2rUTVwyiDNRYMTM5IjmYcsdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMc1ZxCM4xb2if6n1o3Q8ztFctQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2RlOTliMjgtZDE1Zi0z OWUwLWIyNjItNGNiOTUyZjIwNzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1DzHSUyGHIbk1/opG3EbIYuwh0t2w2i1AWEKdeNxoV4Wt5XIcUlwHW asBMTBEiTsKTWq6xqTz22iB9+Cm3g75mMgvllU3iYJUvWraVdQYHmOPG748qB2gW JYuuh3etfy04/+G0iq594mSPnThQ6c2JfNSMTj1F8tDy4S2KcwSBEOpT68wYzs6e yuhkUwVKeOje2oQAkSC+buoBIooJ6thXgO84U7OCMW/C2p9UrNvWIE0yFXKbJfqX bkFPGOTEYxWoiYmQ4KxQacD3M5ermDinK07vxWmHj5l4EbAvAW26qr+LZiS5PDbx jRuWlozCH6AWXHf+tbIKzbnfXx81F/g= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:46 2025 by rpki-client