$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa File: a10965b1-15bc-387b-be67-ebfa65ef6972.roa (raw, json) Hash identifier: pvxSYhN0hzXJsRetLiHZFoqZoBg+FR0gE6CdBtnGDqk= Subject key identifier: AE:4D:8B:C7:0D:49:70:DD:C9:C9:3A:60:67:68:47:36:20:74:3D:1B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F498BA4B99AF6F31280892260 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 68.234.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:a4:b9:9a:f6:f3:12:80:89:22:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9dbfec9e-6eb2-4bea-8c6d-60be629d8b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fb:42:14:38:72:8f:e2:b7:0f:7d:bb:f2:ca: cb:24:de:0c:8c:03:02:ca:e4:43:67:39:a3:e3:74: d3:d6:09:79:5a:56:70:e5:c7:e5:e8:50:74:3c:44: 1a:71:59:55:8a:91:bb:a0:fe:43:b8:77:ac:5b:15: 17:20:72:9d:f6:6d:23:98:46:b7:f7:dc:52:3f:59: e7:5d:db:3e:ff:f6:50:65:75:a6:eb:a3:33:d9:58: 9a:28:ba:8e:42:13:8d:c9:8f:63:03:a6:90:41:70: 08:fc:fa:80:e7:71:ce:26:b6:e4:0d:81:89:35:a2: 4d:a3:40:1c:14:3e:d9:6e:c1:70:bc:3e:32:4e:66: 54:6e:c3:20:44:3c:9d:ea:78:36:fe:b4:68:7a:fd: 59:f5:98:d4:9b:90:99:1e:ba:7a:53:ef:81:47:cf: 7f:76:9c:25:13:35:46:0f:2c:19:96:e5:75:60:3d: 41:c7:09:4e:da:88:d8:81:53:91:a2:03:a6:2f:ed: 92:69:4e:32:25:ae:e1:a0:c2:da:8f:7f:0f:e4:d2: 01:cc:1a:99:c1:cf:f6:f2:f5:4b:db:e3:40:72:6b: a4:e8:27:0c:0f:d1:fd:64:b2:a9:c6:5b:dc:50:d5: 0d:13:e4:62:7f:68:b5:79:fd:ef:a6:24:c1:1b:ab: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4D:8B:C7:0D:49:70:DD:C9:C9:3A:60:67:68:47:36:20:74:3D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:05:07:54:ae:0f:5e:2d:05:50:ac:0f:63:51:0c:9c:41:64: 7e:83:57:6f:30:fe:4f:81:f6:dd:8b:86:df:d1:36:74:f1:17: 92:d8:f3:0b:25:7c:02:36:ad:da:bc:49:43:51:2f:bb:97:a3: 38:ca:5f:db:3b:2e:fa:be:f6:65:66:11:1d:c4:6b:88:61:7c: f3:54:a1:f8:4b:76:d9:f6:b5:d7:05:be:09:ef:8a:96:c1:4b: 2d:d0:1f:81:fb:ef:63:21:74:d4:b1:98:79:06:77:84:18:b2: be:10:d7:a6:8a:22:bb:8c:64:f4:2e:fa:2e:71:47:bc:8c:b4: 64:a3:32:da:ea:91:89:b9:02:1e:6b:41:94:08:d9:75:b3:02: 1e:9c:e3:89:0a:79:5b:6b:aa:d6:a1:5f:d5:3f:3b:2f:8f:c8: 33:1b:a3:1f:c4:89:f2:97:fe:02:32:ac:19:08:59:3c:75:8e: e3:c5:04:db:fb:42:4d:08:33:95:58:be:e8:bd:ba:36:3b:2c: 55:a1:d5:75:e8:6a:95:cb:06:5e:bf:5b:9e:8e:6b:68:fc:08: d5:65:75:7d:95:40:1f:e4:d0:82:84:51:48:df:cc:09:57:13: ca:43:96:08:d4:09:15:ca:67:ed:a8:89:c6:4a:2f:73:d4:b5: 47:36:cc:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji6S5mvbzEoCJImAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWRiZmVjOWUtNmViMi00YmVhLThjNmQtNjBiZTYyOWQ4YjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/tCFDhyj+K3D3278srLJN4MjAMCyuRDZzmj 43TT1gl5WlZw5cfl6FB0PEQacVlVipG7oP5DuHesWxUXIHKd9m0jmEa399xSP1nn Xds+//ZQZXWm66Mz2ViaKLqOQhONyY9jA6aQQXAI/PqA53HOJrbkDYGJNaJNo0Ac FD7ZbsFwvD4yTmZUbsMgRDyd6ng2/rRoev1Z9ZjUm5CZHrp6U++BR89/dpwlEzVG DywZluV1YD1BxwlO2ojYgVORogOmL+2SaU4yJa7hoMLaj38P5NIBzBqZwc/28vVL 2+NAcmuk6CcMD9H9ZLKpxlvcUNUNE+Rif2i1ef3vpiTBG6vgmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5Ni8cNSXDdyck6YGdoRzYgdD0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTEwOTY1YjEtMTViYy0z ODdiLWJlNjctZWJmYTY1ZWY2OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkFB1SuD14tBVCsD2NRDJxBZH6DV28w/k+B9t2Lht/RNnTxF5LY8wsl fAI2rdq8SUNRL7uXozjKX9s7Lvq+9mVmER3Ea4hhfPNUofhLdtn2tdcFvgnvipbB Sy3QH4H772MhdNSxmHkGd4QYsr4Q16aKIruMZPQu+i5xR7yMtGSjMtrqkYm5Ah5r QZQI2XWzAh6c44kKeVtrqtahX9U/Oy+PyDMbox/EifKX/gIyrBkIWTx1juPFBNv7 Qk0IM5VYvui9ujY7LFWh1XXoapXLBl6/W56Oa2j8CNVldX2VQB/k0IKEUUjfzAlX E8pDlgjUCRXKZ+2oicZKL3PUtUc2zKs= -----END CERTIFICATE-----Generated at Fri Sep 25 20:23:32 2026 by rpki-client