$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1f9475f-12e5-3b89-a981-78a48392e1ea.roa File: f1f9475f-12e5-3b89-a981-78a48392e1ea.roa (raw, json) Hash identifier: QQNNaWylThRBRg2r4DaYP6BSILKrSrT9rVldKk+ZsB0= Subject key identifier: 87:78:F5:D3:83:6B:19:1B:26:A2:2C:4D:AD:E7:7E:AC:BC:43:E1:50 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B3445F5CC92CEC6FBE71A7C80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1f9475f-12e5-3b89-a981-78a48392e1ea.roa Signing time: Mon 15 Sep 2025 15:50:42 +0000 ROA not before: Mon 15 Sep 2025 15:50:42 +0000 ROA not after: Sun 14 Dec 2025 16:50:42 +0000 asID: 23473 IP address blocks: 68.234.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:45:f5:cc:92:ce:c6:fb:e7:1a:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 15 15:50:42 2025 GMT Not After : Dec 14 16:50:42 2025 GMT Subject: CN=f19a4936-de26-4bd9-bad9-e65a31aabf25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:8f:be:45:5d:47:66:2c:dc:3a:7b:d9:56: 40:8d:bf:6c:71:f5:4e:d5:44:5b:7a:a9:8f:1e:d2: ff:fa:22:c1:ef:8a:26:f6:ee:d3:b2:39:af:fa:70: 28:09:46:2b:cf:23:23:48:7b:04:fe:d2:3a:cb:e3: 15:aa:f9:53:e2:ee:96:86:55:e0:cb:73:9e:eb:fe: 59:6b:2b:99:77:df:24:c8:d6:f7:0f:dd:4a:30:5a: 80:8b:9a:ab:cd:3d:5d:da:20:58:db:45:77:d8:a4: d6:77:87:d6:f0:16:3f:99:28:56:7d:b8:dd:87:ec: a6:0e:c6:86:72:f5:d0:95:df:a2:42:a4:5b:62:69: aa:b7:81:42:d0:f3:4f:79:c7:93:cf:8a:b9:9a:41: 91:55:36:9c:78:43:7b:d2:8d:ad:23:e5:99:ff:9f: 3c:fa:87:05:b7:86:4f:04:7d:c5:1a:cb:8d:95:24: 27:21:c2:ea:42:7d:27:ab:97:fc:aa:10:14:fb:5c: 8d:3a:59:7c:67:a5:34:b6:c6:65:6e:36:37:80:62: 19:1c:32:82:7a:44:01:8a:a3:46:0a:14:a3:cc:1c: 68:83:94:67:35:dd:77:a9:68:6e:bd:af:08:a7:94: df:53:56:cb:5e:79:8f:aa:51:c1:6a:7c:e6:50:8c: a2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:78:F5:D3:83:6B:19:1B:26:A2:2C:4D:AD:E7:7E:AC:BC:43:E1:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1f9475f-12e5-3b89-a981-78a48392e1ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d6:04:74:9b:e5:cf:cf:93:9a:de:5b:f1:6b:9d:f4:d8:02: 64:a9:63:4c:10:4b:d4:cf:08:b5:20:29:e8:8e:f3:ae:22:75: 5f:19:bb:a1:6d:97:19:ab:a6:e1:81:ab:2f:34:a2:5b:9f:6c: fa:44:b1:48:5a:28:9f:60:3c:48:c4:3d:ad:4e:0e:a2:35:55: 94:11:70:62:73:3d:e3:25:42:41:b3:7c:3a:30:43:48:d1:e1: 49:a5:fa:3c:29:b1:67:79:93:05:76:fe:4d:7b:77:bb:59:ab: c0:b5:18:03:a2:6f:c3:59:19:fb:09:96:c3:05:88:18:43:3e: 85:72:63:19:bd:0f:9d:a5:0c:e3:18:4a:58:3d:3f:1f:b4:5c: c3:16:c8:bb:69:43:fa:fa:fa:f4:35:e2:e1:88:10:02:9e:1a: 38:f5:fb:83:71:34:c7:a0:b2:53:79:80:26:91:38:d7:fb:0a: e3:00:d0:ab:69:3b:f8:ec:6e:2f:79:5b:f9:8d:21:9d:e4:ee: 40:15:a0:ad:e8:79:23:03:85:9b:b2:7c:44:d7:37:d2:ab:22: e7:ab:93:c8:9a:94:6e:3d:5e:40:9e:8c:f9:dc:a0:a8:58:45: f6:3c:04:5d:c1:97:dd:71:54:53:ea:fd:47:39:4f:b1:73:7f: 1b:88:1d:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0RfXMks7G++cafIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxNTE1NTA0MloXDTI1MTIxNDE2NTA0MlowLzEtMCsGA1UEAxMk ZjE5YTQ5MzYtZGUyNi00YmQ5LWJhZDktZTY1YTMxYWFiZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOePvkVdR2Ys3Dp72VZAjb9scfVO1URbeqmP HtL/+iLB74om9u7Tsjmv+nAoCUYrzyMjSHsE/tI6y+MVqvlT4u6WhlXgy3Oe6/5Z ayuZd98kyNb3D91KMFqAi5qrzT1d2iBY20V32KTWd4fW8BY/mShWfbjdh+ymDsaG cvXQld+iQqRbYmmqt4FC0PNPeceTz4q5mkGRVTaceEN70o2tI+WZ/588+ocFt4ZP BH3FGsuNlSQnIcLqQn0nq5f8qhAU+1yNOll8Z6U0tsZlbjY3gGIZHDKCekQBiqNG ChSjzBxog5RnNd13qWhuva8Ip5TfU1bLXnmPqlHBanzmUIyioQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId49dODaxkbJqIsTa3nfqy8Q+FQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjFmOTQ3NWYtMTJlNS0z Yjg5LWE5ODEtNzhhNDgzOTJlMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfWBHSb5c/Pk5reW/FrnfTYAmSpY0wQS9TPCLUgKeiO864idV8Zu6Ft lxmrpuGBqy80olufbPpEsUhaKJ9gPEjEPa1ODqI1VZQRcGJzPeMlQkGzfDowQ0jR 4Uml+jwpsWd5kwV2/k17d7tZq8C1GAOib8NZGfsJlsMFiBhDPoVyYxm9D52lDOMY Slg9Px+0XMMWyLtpQ/r6+vQ14uGIEAKeGjj1+4NxNMegslN5gCaRONf7CuMA0Ktp O/jsbi95W/mNIZ3k7kAVoK3oeSMDhZuyfETXN9KrIuerk8ialG49XkCejPncoKhY RfY8BF3Bl91xVFPq/Uc5T7FzfxuIHc8= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:41 2025 by rpki-client