$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/01b3d09b-c9f6-30bb-bf42-79fe06f66776.roa File: 01b3d09b-c9f6-30bb-bf42-79fe06f66776.roa (raw, json) Hash identifier: 3hVA/5+jf0g0vGS+R2xVu/5pO4EEDcT9VWEEN7OSt68= Subject key identifier: B8:AC:AA:36:87:AC:8B:74:FA:EC:77:72:64:CD:CB:42:D7:9B:E4:82 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F498BD0AAC29C3CCF0AD76680 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/01b3d09b-c9f6-30bb-bf42-79fe06f66776.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 68.234.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:d0:aa:c2:9c:3c:cf:0a:d7:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=858d4174-3e96-468f-8460-94fcc33f98c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:11:9c:cf:60:4b:97:f5:f6:e4:04:86:42: 8a:a3:b7:f6:eb:27:f9:1d:b8:37:aa:ed:4e:4d:3f: 05:f5:39:56:59:e6:93:af:4b:ae:c3:e9:ca:0d:55: f4:9a:e4:a8:dd:af:be:22:57:e9:5a:95:c7:eb:a0: 71:fa:03:06:bd:d0:32:99:d6:ef:f6:f8:19:51:3a: 0d:57:ac:2d:22:9d:bd:23:fe:e9:8c:52:00:28:7e: e0:4d:32:9f:56:9c:d6:0d:30:4d:5b:dd:57:32:20: 45:d9:01:ef:16:26:ca:fc:b3:5b:aa:e6:08:98:df: ed:dd:2e:cc:be:b3:71:8e:0d:e2:ab:23:18:40:a2: 0d:2f:38:12:31:17:34:b8:81:28:fc:4b:a2:ab:ef: 2b:3e:0f:c8:5c:08:51:ed:57:7b:9c:51:34:c9:b0: 6a:02:30:d1:04:cf:1f:61:c8:40:50:94:5e:70:1b: 67:7f:5c:04:59:b9:a9:4a:46:6d:35:87:c7:ae:8e: 7b:fb:8c:a9:bc:b4:d2:91:65:62:84:7d:89:74:b4: 1c:89:f7:f5:ee:a0:fd:9d:aa:d2:dc:fd:0a:54:49: ef:41:f3:95:d7:4d:47:ae:18:28:b6:23:b4:07:b4: 25:ff:f2:a9:16:f4:1e:f1:97:73:0f:36:89:b3:6b: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AC:AA:36:87:AC:8B:74:FA:EC:77:72:64:CD:CB:42:D7:9B:E4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/01b3d09b-c9f6-30bb-bf42-79fe06f66776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a3:41:c5:18:92:0c:29:2f:fd:a6:46:53:2b:68:bb:d1:27: 39:0a:b0:97:09:75:76:0d:cd:0c:d6:13:73:b0:45:5e:74:68: 81:aa:a4:73:ea:14:7b:7c:5a:52:2f:e5:60:82:2a:5e:5b:cf: 9e:8f:6c:2f:e1:a0:11:f7:e2:49:b3:94:2a:41:13:9c:5d:f6: bb:bc:88:69:57:86:c9:23:4c:b1:a2:94:09:ff:a1:29:d3:c9: d9:c5:6e:e9:b0:b5:2a:7b:cf:68:91:76:ea:a1:6d:cb:69:35: 62:6b:65:e1:fb:e7:83:66:c0:38:80:a3:2c:03:4f:b9:84:82: 42:14:ba:63:58:1e:f2:6e:f6:98:67:33:83:5a:63:e5:37:40: 73:8f:ba:51:d1:eb:52:35:24:f4:38:4d:01:28:5f:5d:78:03: 4a:c3:02:8b:9d:c4:65:55:e0:56:60:f7:0c:80:c8:7a:86:a1: a2:9f:d3:7a:dd:47:33:8d:d2:a7:2b:90:ac:a3:a5:bb:79:56: 95:7e:90:1c:80:67:11:13:2b:d4:09:80:58:b6:e3:81:99:83: 7b:b4:5a:2b:80:b3:b2:a0:ba:39:66:02:86:b7:76:ff:4b:ef: ea:31:e3:bb:0c:63:43:59:be:e4:42:c6:eb:9a:09:4c:1a:0f: c6:17:d3:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji9Cqwpw8zwrXZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODU4ZDQxNzQtM2U5Ni00NjhmLTg0NjAtOTRmY2MzM2Y5OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiQRnM9gS5f19uQEhkKKo7f26yf5Hbg3qu1O TT8F9TlWWeaTr0uuw+nKDVX0muSo3a++IlfpWpXH66Bx+gMGvdAymdbv9vgZUToN V6wtIp29I/7pjFIAKH7gTTKfVpzWDTBNW91XMiBF2QHvFibK/LNbquYImN/t3S7M vrNxjg3iqyMYQKINLzgSMRc0uIEo/Euiq+8rPg/IXAhR7Vd7nFE0ybBqAjDRBM8f YchAUJRecBtnf1wEWbmpSkZtNYfHro57+4ypvLTSkWVihH2JdLQciff17qD9narS 3P0KVEnvQfOV101HrhgotiO0B7Ql//KpFvQe8ZdzDzaJs2s/2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLisqjaHrIt0+ux3cmTNy0LXm+SCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDFiM2QwOWItYzlmNi0z MGJiLWJmNDItNzlmZTA2ZjY2Nzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROrCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFajQcUYkgwpL/2mRlMraLvRJzkKsJcJdXYNzQzWE3OwRV50aIGqpHPq FHt8WlIv5WCCKl5bz56PbC/hoBH34kmzlCpBE5xd9ru8iGlXhskjTLGilAn/oSnT ydnFbumwtSp7z2iRduqhbctpNWJrZeH754NmwDiAoywDT7mEgkIUumNYHvJu9phn M4NaY+U3QHOPulHR61I1JPQ4TQEoX114A0rDAoudxGVV4FZg9wyAyHqGoaKf03rd RzON0qcrkKyjpbt5VpV+kByAZxETK9QJgFi244GZg3u0WiuAs7KgujlmAoa3dv9L 7+ox47sMY0NZvuRCxuuaCUwaD8YX03c= -----END CERTIFICATE-----Generated at Sat Sep 26 12:40:18 2026 by rpki-client