$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d67387b8-be32-34cb-abd0-892966691294.roa File: d67387b8-be32-34cb-abd0-892966691294.roa (raw, json) Hash identifier: qoOcQioHbsAkDBZ4likCe6a6ZSopPsnHvzGuNB6XSRA= Subject key identifier: 38:7C:18:8C:E2:A1:98:B2:95:10:DB:B2:FA:4B:CC:2A:E4:5A:48:60 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B373443CC999B0DB70330F500 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d67387b8-be32-34cb-abd0-892966691294.roa Signing time: Tue 16 Sep 2025 17:02:28 +0000 ROA not before: Tue 16 Sep 2025 17:02:28 +0000 ROA not after: Mon 15 Dec 2025 18:02:28 +0000 asID: 23473 IP address blocks: 68.234.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:34:43:cc:99:9b:0d:b7:03:30:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 16 17:02:28 2025 GMT Not After : Dec 15 18:02:28 2025 GMT Subject: CN=9934d119-c4ed-46f6-aeb5-a52e870669dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4e:d4:0c:55:e8:a1:e7:48:40:b6:88:b7:f8: 3c:c9:17:47:e9:6c:25:12:12:c2:ed:0e:06:7a:f5: b0:0f:f5:03:ff:f7:6a:92:60:2d:36:13:7d:d5:b1: 4e:9c:a3:34:42:e0:aa:2e:8a:34:c8:ae:79:04:e6: 85:7d:90:b6:3d:1d:4c:5d:43:e1:25:6d:bc:0d:b1: 72:a5:77:10:c5:0f:4c:b1:ec:a8:e8:8a:a3:4d:ca: 48:0a:66:1c:69:0d:e2:09:fa:56:91:37:6b:e2:38: 8c:2e:91:18:e3:56:66:ba:c8:39:ab:fa:7f:c2:29: 56:1a:c9:02:dc:b9:d6:e7:6e:ba:18:be:78:23:83: 36:cc:d8:66:70:58:ae:5e:4d:ed:1c:eb:b6:23:a6: b2:54:4e:98:80:b3:27:4e:5e:8f:1a:27:e2:f3:8a: 5d:1a:44:ee:79:5b:4d:08:c3:61:8a:74:56:46:62: ef:ce:ad:5f:42:d1:6a:e8:00:5a:64:39:ba:20:6d: 95:8f:4a:3a:de:7b:31:d6:cb:b2:1e:cb:ed:ea:d3: 0e:32:3e:8b:b3:24:c9:6f:4d:09:35:e0:13:3a:62: aa:6b:4d:bf:7f:39:d7:26:53:05:44:ea:25:91:a2: fa:42:68:4e:81:79:aa:86:da:1a:11:8a:73:cd:ce: 8c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7C:18:8C:E2:A1:98:B2:95:10:DB:B2:FA:4B:CC:2A:E4:5A:48:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d67387b8-be32-34cb-abd0-892966691294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:56:fc:e6:c7:6a:f8:ac:27:f3:73:df:dc:ad:ef:27:b4:1e: 40:af:06:36:bc:5b:a7:28:d3:26:30:a3:01:02:56:38:24:68: 25:18:7c:cd:72:d6:cf:1b:91:23:11:d5:7e:77:ae:96:02:09: 7f:f4:44:59:3a:6c:60:a9:04:ac:7c:65:71:85:69:d2:24:77: d8:31:8b:0e:31:75:06:22:57:2c:67:c0:9e:9b:fb:c2:16:07: 50:37:bf:b5:a2:77:e4:b5:6c:0c:32:1c:93:6d:5f:8a:9c:d0: a8:8d:0f:3a:52:95:e4:c4:28:ed:7b:d5:ab:07:97:12:bc:40: 3c:6c:48:e6:8d:3c:2c:33:e6:36:99:cc:95:ef:49:4f:49:95: c7:85:e2:11:4b:8f:36:b6:fe:36:7a:38:b3:62:d6:78:70:9a: a5:6c:39:8a:85:9c:ef:ea:51:02:61:6a:e6:86:fb:0b:26:4a: aa:26:4f:82:df:d2:b4:06:e9:4c:6c:42:ca:48:67:c3:86:3b: 79:dd:64:43:6e:16:4c:b3:fc:9e:8b:98:f9:89:68:6d:61:06: 6f:0b:5f:47:11:29:80:9a:b0:59:fe:f4:f7:3a:53:c6:72:2d: f7:d6:bf:31:56:22:4b:b9:b6:6b:60:48:05:f9:96:2b:21:35: d1:98:e3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs3NEPMmZsNtwMw9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNjE3MDIyOFoXDTI1MTIxNTE4MDIyOFowLzEtMCsGA1UEAxMk OTkzNGQxMTktYzRlZC00NmY2LWFlYjUtYTUyZTg3MDY2OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E7UDFXooedIQLaIt/g8yRdH6WwlEhLC7Q4G evWwD/UD//dqkmAtNhN91bFOnKM0QuCqLoo0yK55BOaFfZC2PR1MXUPhJW28DbFy pXcQxQ9Mseyo6IqjTcpICmYcaQ3iCfpWkTdr4jiMLpEY41Zmusg5q/p/wilWGskC 3LnW5266GL54I4M2zNhmcFiuXk3tHOu2I6ayVE6YgLMnTl6PGifi84pdGkTueVtN CMNhinRWRmLvzq1fQtFq6ABaZDm6IG2Vj0o63nsx1suyHsvt6tMOMj6LsyTJb00J NeATOmKqa02/fznXJlMFROolkaL6QmhOgXmqhtoaEYpzzc6MCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh8GIzioZiylRDbsvpLzCrkWkhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDY3Mzg3YjgtYmUzMi0z NGNiLWFiZDAtODkyOTY2NjkxMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBW/ObHavisJ/Nz39yt7ye0HkCvBja8W6co0yYwowECVjgkaCUYfM1y 1s8bkSMR1X53rpYCCX/0RFk6bGCpBKx8ZXGFadIkd9gxiw4xdQYiVyxnwJ6b+8IW B1A3v7Wid+S1bAwyHJNtX4qc0KiNDzpSleTEKO171asHlxK8QDxsSOaNPCwz5jaZ zJXvSU9JlceF4hFLjza2/jZ6OLNi1nhwmqVsOYqFnO/qUQJhauaG+wsmSqomT4Lf 0rQG6UxsQspIZ8OGO3ndZENuFkyz/J6LmPmJaG1hBm8LX0cRKYCasFn+9Pc6U8Zy LffWvzFWIku5tmtgSAX5lishNdGY48M= -----END CERTIFICATE-----Generated at Fri Oct 10 03:50:51 2025 by rpki-client