$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fb211c31-0e12-3ad1-8068-72e6ddb15ef5.roa File: fb211c31-0e12-3ad1-8068-72e6ddb15ef5.roa (raw, json) Hash identifier: eRBslohzW1+nQWlNQjg9LH3nM3wAvmeH6hAueZm6HhA= Subject key identifier: CF:65:2F:01:D0:87:CD:75:6A:9A:9C:EB:F7:61:18:46:E2:72:4A:2B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B240AE60E979D075E9D0E7900 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fb211c31-0e12-3ad1-8068-72e6ddb15ef5.roa Signing time: Tue 09 Sep 2025 20:18:46 +0000 ROA not before: Tue 09 Sep 2025 20:18:46 +0000 ROA not after: Mon 08 Dec 2025 21:18:46 +0000 asID: 23473 IP address blocks: 68.180.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:0a:e6:0e:97:9d:07:5e:9d:0e:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 9 20:18:46 2025 GMT Not After : Dec 8 21:18:46 2025 GMT Subject: CN=d95a0635-ab4e-48e7-b73f-7ce8ab7251c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0b:5e:87:d1:e3:c9:63:f6:1a:cd:e7:cc:25: 12:a5:ea:61:b1:ae:c1:6d:92:d9:ca:dc:d3:2d:eb: 11:85:bd:38:67:a1:c7:39:b3:30:34:ec:76:38:a9: 0a:53:15:99:94:f0:75:c2:84:e2:cb:42:f5:2e:c4: 30:44:b0:90:18:b4:b2:1e:bb:0f:4c:c0:d2:81:6c: ed:cc:ba:d6:ab:b6:7e:2a:7a:da:0c:05:aa:b5:15: b1:fa:b5:c0:50:99:a9:67:ea:97:ba:bc:5a:62:47: 18:27:9f:97:af:f7:55:a5:ac:5e:2b:4b:8e:39:f8: 23:51:e7:62:0c:db:8e:54:e8:7b:0e:74:19:bb:9f: fa:ff:ea:b0:ab:b3:b2:f5:10:29:18:8e:b9:78:59: 04:d7:7b:da:dd:1c:ca:3a:b7:86:ae:e3:96:74:9a: d2:fb:8a:bd:62:c0:ab:26:46:b7:bc:c0:f7:96:dd: 9b:16:8f:9c:42:f7:8f:ec:4d:d2:6c:11:78:65:40: 3f:55:02:60:8f:a3:23:71:e5:4a:e8:b4:23:0f:e6: 74:8d:a3:69:c6:ae:bd:b1:93:86:0a:14:fe:cd:c7: 5c:cc:3a:86:cc:38:45:c4:2a:0a:1c:b3:fb:2c:ea: 67:75:10:33:7e:67:17:34:c7:59:bf:00:f6:85:4b: 13:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:65:2F:01:D0:87:CD:75:6A:9A:9C:EB:F7:61:18:46:E2:72:4A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fb211c31-0e12-3ad1-8068-72e6ddb15ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:14:99:e8:93:86:ba:36:0f:2b:f0:a5:90:97:66:1d:c4:67: 44:71:ea:57:67:cc:45:6b:44:b7:b0:19:32:12:8f:fe:6e:d8: 28:23:61:03:68:23:20:3f:ee:f8:f4:ab:03:f5:b7:24:88:d7: ab:aa:90:be:b7:41:49:71:72:0e:da:60:af:53:97:50:3b:2c: e6:5b:4e:77:d7:09:9f:9d:6d:ca:2e:07:6f:cd:2f:dd:a0:da: fe:c2:0a:f8:f2:ae:09:d4:2b:54:60:f5:15:d1:e3:22:7f:2c: c1:e6:45:89:ce:04:07:36:44:4d:43:19:6a:1e:1b:5f:20:71: 71:5b:26:51:0b:49:a9:5f:73:97:95:c9:06:0f:bc:5a:06:07: ff:ec:11:26:3d:cc:6f:67:e0:8b:9e:65:62:f3:7d:c5:bd:58: 8b:34:9a:78:39:c5:b4:1e:37:3f:07:bf:11:20:22:89:e5:93: 3c:7d:fd:2e:94:1f:a2:4a:5f:ca:ad:19:1f:4d:84:84:42:66: 73:76:0d:d9:e9:4f:35:2e:7c:f0:b7:c1:96:22:db:3d:ad:33: 9c:4e:be:67:3e:01:ce:1d:0c:c7:eb:ba:b1:7c:5b:a3:85:c0: a3:f9:52:37:d1:4a:5b:2d:92:ab:f9:2b:fc:c3:44:7f:e8:aa: fc:8c:b6:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskCuYOl50HXp0OeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkwOTIwMTg0NloXDTI1MTIwODIxMTg0NlowLzEtMCsGA1UEAxMk ZDk1YTA2MzUtYWI0ZS00OGU3LWI3M2YtN2NlOGFiNzI1MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwteh9HjyWP2Gs3nzCUSpephsa7BbZLZytzT LesRhb04Z6HHObMwNOx2OKkKUxWZlPB1woTiy0L1LsQwRLCQGLSyHrsPTMDSgWzt zLrWq7Z+KnraDAWqtRWx+rXAUJmpZ+qXurxaYkcYJ5+Xr/dVpaxeK0uOOfgjUedi DNuOVOh7DnQZu5/6/+qwq7Oy9RApGI65eFkE13va3RzKOreGruOWdJrS+4q9YsCr Jka3vMD3lt2bFo+cQveP7E3SbBF4ZUA/VQJgj6MjceVK6LQjD+Z0jaNpxq69sZOG ChT+zcdczDqGzDhFxCoKHLP7LOpndRAzfmcXNMdZvwD2hUsT8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9lLwHQh811apqc6/dhGEbickorMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZmIyMTFjMzEtMGUxMi0z YWQxLTgwNjgtNzJlNmRkYjE1ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYUmeiThro2DyvwpZCXZh3EZ0Rx6ldnzEVrRLewGTISj/5u2CgjYQNo IyA/7vj0qwP1tySI16uqkL63QUlxcg7aYK9Tl1A7LOZbTnfXCZ+dbcouB2/NL92g 2v7CCvjyrgnUK1Rg9RXR4yJ/LMHmRYnOBAc2RE1DGWoeG18gcXFbJlELSalfc5eV yQYPvFoGB//sESY9zG9n4IueZWLzfcW9WIs0mng5xbQeNz8HvxEgIonlkzx9/S6U H6JKX8qtGR9NhIRCZnN2DdnpTzUufPC3wZYi2z2tM5xOvmc+Ac4dDMfrurF8W6OF wKP5UjfRSlstkqv5K/zDRH/oqvyMtiU= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:35 2025 by rpki-client