$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/024be752-dfb9-3a8f-8f65-e352b58b6ef1.roa File: 024be752-dfb9-3a8f-8f65-e352b58b6ef1.roa (raw, json) Hash identifier: XEa0IXw2G2HFFw81m7Ovu4AW6tL+GqP2rb1kazkz1s0= Subject key identifier: 32:A3:79:D3:C8:E8:59:07:2E:53:55:F0:C0:E6:64:48:17:1C:78:C8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B855B2185F85EC97DDB881840 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/024be752-dfb9-3a8f-8f65-e352b58b6ef1.roa Signing time: Tue 14 Oct 2025 16:53:50 +0000 ROA not before: Tue 14 Oct 2025 16:53:50 +0000 ROA not after: Mon 12 Jan 2026 17:53:50 +0000 asID: 23473 IP address blocks: 68.234.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:5b:21:85:f8:5e:c9:7d:db:88:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 14 16:53:50 2025 GMT Not After : Jan 12 17:53:50 2026 GMT Subject: CN=01815f83-1020-4a0b-be84-ef787c97321a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:8d:9c:a7:12:af:00:f3:78:5c:01:84:b5: 70:92:86:e9:ae:3c:ab:b1:d4:87:e4:b9:d1:6b:c9: db:48:08:54:fd:ab:4c:9d:74:e7:b3:a0:57:78:56: 3a:f8:04:06:33:06:02:26:48:f7:e5:f5:6c:4b:34: be:da:bb:1d:c7:06:61:3f:d0:a2:10:be:82:86:93: 36:e3:82:af:6b:96:34:e8:a6:99:a5:99:e5:da:43: c3:4e:18:a8:14:a2:0d:8a:03:b9:eb:ff:0a:34:f1: bf:35:ca:0e:0e:b0:9c:3f:f7:3d:d0:47:fa:61:de: 32:87:13:85:e2:3f:7b:e3:a4:e7:a9:d7:af:69:86: 70:c0:90:2b:2b:96:34:e6:cd:73:d6:be:13:bf:77: e4:6b:0a:dc:d3:0b:73:3f:c8:70:61:58:d9:b2:aa: 6b:8d:6e:07:ea:0b:f7:50:a0:a7:05:00:56:41:15: 3d:e4:91:f6:a6:65:4e:43:48:cf:42:25:45:8c:ef: 58:62:48:69:34:c8:66:ea:67:f8:74:fd:7e:9b:fd: e8:d3:78:46:9b:34:79:d7:6a:66:46:ef:6f:74:fe: a3:28:77:65:6c:0b:e4:01:fa:25:d6:79:4b:ed:2b: f0:f9:d7:d0:2f:9e:c3:81:5f:72:bf:38:a3:57:9e: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A3:79:D3:C8:E8:59:07:2E:53:55:F0:C0:E6:64:48:17:1C:78:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/024be752-dfb9-3a8f-8f65-e352b58b6ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d4:6d:73:0a:58:81:1e:07:6a:17:67:56:c0:5d:0f:5d:e5: 2d:35:46:56:a3:ce:f1:a2:2f:67:a9:5a:89:1c:99:ce:79:e8: cc:69:e9:b6:5d:61:8d:19:2c:55:bb:60:2d:9c:dd:48:be:8b: e4:ce:18:67:61:41:d7:41:c4:b8:f5:54:40:07:38:2f:63:95: 89:7b:9b:45:1c:d9:9f:7b:f9:39:16:09:9a:bb:0d:dd:dd:fd: e0:c9:5e:1f:47:5a:c6:12:f5:a2:a6:82:d6:3c:c3:8f:4f:eb: fb:79:27:89:ce:5e:8c:0a:b1:af:25:d0:50:f4:da:56:4a:39: cf:29:69:fb:a0:0d:55:c8:f6:d8:b4:65:b3:59:08:42:4c:a3: a6:54:fb:30:68:72:38:56:83:7d:df:ef:de:22:23:5a:a9:50: 26:79:64:c1:b0:a8:57:70:84:3d:63:10:b7:00:c6:e4:38:fd: 90:6b:76:ca:0d:60:d3:0b:0b:58:e4:33:49:60:46:e1:30:eb: 3d:22:b9:dc:3b:fe:da:81:d0:3f:04:29:78:de:8c:39:a6:ba: 43:92:99:fe:46:cf:9e:36:70:0e:e9:2d:d8:da:19:69:04:bd: 8e:c9:48:4d:b8:d0:e0:6f:de:a3:2e:9f:e1:33:c9:cc:77:36: 1c:3c:61:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFWyGF+F7JfduIGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxNDE2NTM1MFoXDTI2MDExMjE3NTM1MFowLzEtMCsGA1UEAxMk MDE4MTVmODMtMTAyMC00YTBiLWJlODQtZWY3ODdjOTczMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl6NnKcSrwDzeFwBhLVwkobprjyrsdSH5LnR a8nbSAhU/atMnXTns6BXeFY6+AQGMwYCJkj35fVsSzS+2rsdxwZhP9CiEL6ChpM2 44Kva5Y06KaZpZnl2kPDThioFKINigO56/8KNPG/NcoODrCcP/c90Ef6Yd4yhxOF 4j9746TnqdevaYZwwJArK5Y05s1z1r4Tv3fkawrc0wtzP8hwYVjZsqprjW4H6gv3 UKCnBQBWQRU95JH2pmVOQ0jPQiVFjO9YYkhpNMhm6mf4dP1+m/3o03hGmzR512pm Ru9vdP6jKHdlbAvkAfol1nlL7Svw+dfQL57DgV9yvzijV55bAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKjedPI6FkHLlNV8MDmZEgXHHjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDI0YmU3NTItZGZiOS0z YThmLThmNjUtZTM1MmI1OGI2ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPUbXMKWIEeB2oXZ1bAXQ9d5S01RlajzvGiL2epWokcmc556Mxp6bZd YY0ZLFW7YC2c3Ui+i+TOGGdhQddBxLj1VEAHOC9jlYl7m0Uc2Z97+TkWCZq7Dd3d /eDJXh9HWsYS9aKmgtY8w49P6/t5J4nOXowKsa8l0FD02lZKOc8pafugDVXI9ti0 ZbNZCEJMo6ZU+zBocjhWg33f794iI1qpUCZ5ZMGwqFdwhD1jELcAxuQ4/ZBrdsoN YNMLC1jkM0lgRuEw6z0iudw7/tqB0D8EKXjejDmmukOSmf5Gz542cA7pLdjaGWkE vY7JSE240OBv3qMun+Ezycx3Nhw8YfM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:18:51 2025 by rpki-client