$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/23080761-1bfd-33ab-8c74-3598247bab4e.roa File: 23080761-1bfd-33ab-8c74-3598247bab4e.roa (raw, json) Hash identifier: onvXQl6oMu/g/VwA/0UrPjWgA17Z/pK1EfCFAvFNg5M= Subject key identifier: CD:63:A8:2A:79:1B:E0:38:20:49:C6:9D:B5:D5:B2:84:AD:9A:04:A1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4973232673ABB9C1E53EC200 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/23080761-1bfd-33ab-8c74-3598247bab4e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 68.234.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:23:26:73:ab:b9:c1:e5:3e:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9474867c-5cda-4704-90cc-772984fa2f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:10:57:9d:29:a7:72:09:e0:f0:13:f7:20: 6d:57:44:f9:e5:53:42:c8:a6:56:21:27:f5:09:36: 3e:fd:37:bc:1e:b5:6e:91:99:b5:8d:a9:4b:50:d6: b0:73:86:08:83:c1:50:09:89:11:c6:5b:15:5d:2b: b1:37:c3:9e:cb:cf:9a:6a:b9:8b:90:ff:d5:ee:a7: a7:09:a4:50:84:33:c0:b0:9b:db:be:30:1e:7e:90: 2f:b1:51:13:be:90:ef:e1:1d:13:ea:54:b7:87:9c: 71:2d:a3:c6:8f:4c:fa:dd:f3:94:26:57:88:3a:bb: bc:c5:b9:78:3a:9d:b5:87:6f:92:99:a7:43:c4:45: 19:6d:50:08:f5:98:7a:26:6c:45:46:d7:ba:a1:49: d7:27:5b:f2:53:88:6e:39:e6:96:b8:22:94:d2:c6: 13:77:77:df:a9:d2:4e:07:bc:2a:0e:71:f6:e9:83: 96:72:41:03:68:4c:4b:70:4f:ae:18:40:e3:d0:f9: 00:a2:2e:4b:1e:01:6c:18:f8:8e:d3:d7:fe:fb:bb: 4b:57:7b:c2:39:d1:b4:e2:d6:f0:7e:fb:46:cf:24: d1:f3:39:ec:12:ba:cc:86:f3:64:09:42:dd:b7:48: ea:65:2d:30:89:fd:47:8a:86:d9:22:5f:b5:63:15: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:63:A8:2A:79:1B:E0:38:20:49:C6:9D:B5:D5:B2:84:AD:9A:04:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/23080761-1bfd-33ab-8c74-3598247bab4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1e:2a:88:67:54:a4:32:b5:3a:cc:af:94:ca:62:2c:1a:af: 9e:a8:b9:9f:4a:a7:44:52:5e:57:91:49:cb:4d:dc:4d:99:48: 89:fb:32:18:2c:46:dc:16:7f:32:2a:b2:36:e7:b7:c9:0e:27: 1c:8f:51:d0:1d:32:e9:7d:41:36:45:b9:cc:54:bc:b6:05:3b: 3c:45:f3:fc:c7:ec:2f:0f:18:e7:b7:72:10:ab:00:c7:15:37: 18:2f:a3:94:08:5d:7c:e2:e9:8e:bf:15:f7:b0:92:17:9f:41: b8:de:1a:cd:da:95:a3:f2:22:30:94:3d:57:ed:1d:57:58:87: 4d:fd:5e:76:de:e6:24:9b:e1:41:25:90:fa:74:42:72:07:45: ee:1e:9f:4c:8b:d7:4e:65:05:2d:3b:56:2c:4a:98:70:2c:9c: c8:2c:66:99:20:df:fa:0c:54:3d:66:22:e7:60:60:52:a6:c9: 82:6a:4b:17:d5:95:24:81:13:0a:e8:c1:fd:02:bc:79:d2:d6: 6c:cd:18:66:5f:52:f9:cb:76:22:30:7d:0e:3e:8d:0e:ce:d3: 58:56:c0:94:e5:40:de:0d:f3:08:48:51:8e:3b:5f:9c:48:c6: 34:b3:b4:f5:05:ae:cf:1d:53:74:20:ef:ee:4f:6d:b2:80:47: d4:97:78:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyMmc6u5weU+wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTQ3NDg2N2MtNWNkYS00NzA0LTkwY2MtNzcyOTg0ZmEyZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xAQV50pp3IJ4PAT9yBtV0T55VNCyKZWISf1 CTY+/Te8HrVukZm1jalLUNawc4YIg8FQCYkRxlsVXSuxN8Oey8+aarmLkP/V7qen CaRQhDPAsJvbvjAefpAvsVETvpDv4R0T6lS3h5xxLaPGj0z63fOUJleIOru8xbl4 Op21h2+SmadDxEUZbVAI9Zh6JmxFRte6oUnXJ1vyU4huOeaWuCKU0sYTd3ffqdJO B7wqDnH26YOWckEDaExLcE+uGEDj0PkAoi5LHgFsGPiO09f++7tLV3vCOdG04tbw fvtGzyTR8znsErrMhvNkCULdt0jqZS0wif1HiobZIl+1YxXMPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1jqCp5G+A4IEnGnbXVsoStmgShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMjMwODA3NjEtMWJmZC0z M2FiLThjNzQtMzU5ODI0N2JhYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkeKohnVKQytTrMr5TKYiwar56ouZ9Kp0RSXleRSctN3E2ZSIn7Mhgs RtwWfzIqsjbnt8kOJxyPUdAdMul9QTZFucxUvLYFOzxF8/zH7C8PGOe3chCrAMcV Nxgvo5QIXXzi6Y6/FfewkhefQbjeGs3alaPyIjCUPVftHVdYh039Xnbe5iSb4UEl kPp0QnIHRe4en0yL105lBS07VixKmHAsnMgsZpkg3/oMVD1mIudgYFKmyYJqSxfV lSSBEwrowf0CvHnS1mzNGGZfUvnLdiIwfQ4+jQ7O01hWwJTlQN4N8whIUY47X5xI xjSztPUFrs8dU3Qg7+5PbbKAR9SXeKI= -----END CERTIFICATE-----Generated at Fri Sep 25 21:59:26 2026 by rpki-client