$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9f7ff29-5629-32e3-8244-da816c6f206a.roa File: d9f7ff29-5629-32e3-8244-da816c6f206a.roa (raw, json) Hash identifier: fxcDTRDtN6VTP4kUymyOCpRiEHSmo/jIKuXYMjhy6Jc= Subject key identifier: C1:71:62:49:D7:EF:D8:CD:15:D1:25:35:3E:9C:89:77:99:67:D1:D8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B637C48693DCD354B38348A80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9f7ff29-5629-32e3-8244-da816c6f206a.roa Signing time: Thu 02 Oct 2025 13:43:08 +0000 ROA not before: Thu 02 Oct 2025 13:43:08 +0000 ROA not after: Wed 31 Dec 2025 14:43:08 +0000 asID: 23473 IP address blocks: 104.145.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:7c:48:69:3d:cd:35:4b:38:34:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 2 13:43:08 2025 GMT Not After : Dec 31 14:43:08 2025 GMT Subject: CN=ea661d87-1c28-4303-be75-da92db60fd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:05:b1:38:53:87:0f:ac:ce:28:cf:32:b8: b0:d7:4a:72:df:73:b8:c7:48:e0:d6:ba:5d:27:72: 69:ef:7e:97:4e:3c:af:5b:c6:dd:0c:41:c7:7f:d5: c7:c8:c9:cf:6d:3e:1a:09:32:61:0d:07:ff:20:3c: ec:dd:49:28:a1:a7:93:7e:68:e5:ff:65:10:99:b3: 9b:ec:74:7a:9f:bf:f6:87:f3:2b:dd:31:80:82:42: 1b:11:6c:0f:b9:05:e7:af:6f:21:07:88:54:fc:90: be:b0:b1:89:fb:f7:42:b6:0c:45:7a:61:8d:06:d7: 71:97:22:0c:30:49:d7:37:4b:17:63:71:e4:0a:56: bb:50:7c:5b:4c:42:9b:ad:2b:c6:ae:6e:49:04:e6: d9:a9:5f:1a:f2:21:b5:92:f4:b7:7f:74:4c:e8:ec: 3a:9f:ce:19:2d:2d:ff:17:14:19:1e:f8:49:d3:cd: 91:f4:33:25:fb:be:67:55:25:89:5a:75:56:3f:58: 5e:7b:69:9f:ea:4b:a6:de:a2:30:be:92:ac:13:19: 98:f1:21:a9:d5:02:fc:4f:54:6c:49:e6:a0:ed:7e: 4b:04:b5:e8:e7:90:6f:fc:49:7c:ea:ea:f2:ea:00: b5:b2:81:19:94:c1:52:cb:f3:85:97:ee:8e:cf:38: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:71:62:49:D7:EF:D8:CD:15:D1:25:35:3E:9C:89:77:99:67:D1:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9f7ff29-5629-32e3-8244-da816c6f206a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 104.145.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:be:27:24:dc:10:ce:25:c8:96:5b:17:1f:b3:94:9c:9b:49: 6e:ec:68:39:1c:6b:98:a6:38:3d:b9:ba:bf:d2:db:e0:52:33: 2d:7f:a3:87:8e:d8:99:f6:76:e5:9d:6d:b5:90:f9:01:ec:8f: 33:9e:ac:9c:c2:b8:54:8f:62:8c:4e:01:63:54:66:b3:4f:8e: d6:2c:05:35:d6:ce:66:fd:d7:0c:1f:a0:72:f5:a1:d4:39:c8: 3c:8a:3e:e8:8b:f4:67:92:51:3b:38:ff:b5:ec:2e:1e:63:89: ed:d5:83:df:c1:e4:7a:13:db:28:ae:1b:a3:a5:e4:c8:88:48: 29:95:af:55:2c:ff:9c:16:09:a4:b0:a6:67:0c:61:d8:f5:6d: b3:d8:f8:a8:55:b6:93:b7:74:d6:3b:e7:88:c8:e9:ef:df:cc: 83:b8:04:cf:c4:4f:5b:a4:0a:fc:1e:4f:b5:16:11:ef:12:ff: de:33:36:4a:1b:ca:3c:7d:4f:58:83:0d:a2:66:a9:89:ae:3e: a9:81:50:c1:2c:e9:0e:6a:5f:14:56:e2:45:51:e8:c8:2a:87: 53:ae:86:b1:96:32:0c:14:31:b4:50:5a:55:03:38:3d:30:fb: 66:56:b7:af:12:b0:65:3b:8b:cb:68:0d:58:f4:c0:b0:8c:be: d7:de:74:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjfEhpPc01Szg0ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwMjEzNDMwOFoXDTI1MTIzMTE0NDMwOFowLzEtMCsGA1UEAxMk ZWE2NjFkODctMWMyOC00MzAzLWJlNzUtZGE5MmRiNjBmZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1YFsThThw+szijPMriw10py33O4x0jg1rpd J3Jp736XTjyvW8bdDEHHf9XHyMnPbT4aCTJhDQf/IDzs3UkooaeTfmjl/2UQmbOb 7HR6n7/2h/Mr3TGAgkIbEWwPuQXnr28hB4hU/JC+sLGJ+/dCtgxFemGNBtdxlyIM MEnXN0sXY3HkCla7UHxbTEKbrSvGrm5JBObZqV8a8iG1kvS3f3RM6Ow6n84ZLS3/ FxQZHvhJ082R9DMl+75nVSWJWnVWP1hee2mf6kum3qIwvpKsExmY8SGp1QL8T1Rs Seag7X5LBLXo55Bv/El86ury6gC1soEZlMFSy/OFl+6OzziDbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFxYknX79jNFdElNT6ciXeZZ9HYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDlmN2ZmMjktNTYyOS0z MmUzLTgyNDQtZGE4MTZjNmYyMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD++JyTcEM4lyJZbFx+zlJybSW7saDkca5imOD25ur/S2+BSMy1/o4eO 2Jn2duWdbbWQ+QHsjzOerJzCuFSPYoxOAWNUZrNPjtYsBTXWzmb91wwfoHL1odQ5 yDyKPuiL9GeSUTs4/7XsLh5jie3Vg9/B5HoT2yiuG6Ol5MiISCmVr1Us/5wWCaSw pmcMYdj1bbPY+KhVtpO3dNY754jI6e/fzIO4BM/ET1ukCvweT7UWEe8S/94zNkob yjx9T1iDDaJmqYmuPqmBUMEs6Q5qXxRW4kVR6Mgqh1OuhrGWMgwUMbRQWlUDOD0w +2ZWt68SsGU7i8toDVj0wLCMvtfedCU= -----END CERTIFICATE-----Generated at Fri Oct 10 03:50:47 2025 by rpki-client