$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1f9475f-12e5-3b89-a981-78a48392e1ea.roa File: f1f9475f-12e5-3b89-a981-78a48392e1ea.roa (raw, json) Hash identifier: EcZlq12021UJwqpJ4uPryON5OtORT6EnWyrH144sO9M= Subject key identifier: F1:71:69:E6:7A:41:A2:99:AB:86:3C:52:61:70:E5:75:F8:90:93:49 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F49878754E61C36A958B76B40 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1f9475f-12e5-3b89-a981-78a48392e1ea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 68.234.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:87:54:e6:1c:36:a9:58:b7:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e6ef64e1-1020-4953-a17f-7514a3789431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9a:c6:05:38:38:d6:73:3d:9b:09:e5:07:18: 28:34:86:f0:cc:37:ca:77:79:51:cb:70:41:7a:7d: 45:39:0b:ae:cc:94:5e:54:1d:cb:f0:84:27:47:28: aa:67:c9:c0:18:c7:d1:88:06:7b:f3:40:7c:24:15: ca:61:a0:f5:60:b6:08:da:ae:1f:72:aa:e8:fd:e4: e0:a0:13:27:d8:c6:f7:70:57:9b:50:49:b0:41:60: f9:eb:4b:34:3f:c6:8c:65:54:42:a8:4a:d1:d6:c9: 14:02:5e:e7:b0:89:7a:83:ef:24:37:27:15:fe:7a: 93:63:6e:7d:ae:cb:e4:f9:01:9a:bc:3e:34:be:90: 59:98:47:a6:88:cb:05:f8:50:51:d0:b4:cf:12:47: b9:10:eb:12:b1:af:a4:db:24:6e:67:3d:e9:f4:87: 73:59:b5:ac:7a:b1:42:4f:b6:68:fa:b3:a2:4f:d9: e2:da:b2:48:89:12:f7:d4:77:a4:d9:79:4a:96:48: 51:ec:16:ac:6d:2e:85:94:cf:14:e0:a6:5d:32:f8: cb:89:f0:4b:3d:1b:d4:e7:7f:81:da:86:ce:56:2f: 5b:2d:a9:d4:1f:91:e0:ea:97:0e:81:81:18:21:55: 29:79:8e:08:bc:3b:02:e9:d6:3f:42:66:f2:74:06: 98:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:71:69:E6:7A:41:A2:99:AB:86:3C:52:61:70:E5:75:F8:90:93:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1f9475f-12e5-3b89-a981-78a48392e1ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:18:0b:05:fd:7d:f1:3e:0e:00:aa:ec:cc:30:d7:86:ad:85: 4d:9c:2d:db:37:42:07:b3:3a:62:6d:24:9e:29:bb:60:7a:97: 07:53:63:9b:3e:ec:b6:f1:e1:23:51:e6:c7:26:5c:c2:c5:05: 08:d8:fc:a1:d5:2a:6e:de:03:46:19:47:50:84:8b:39:73:14: 8b:d9:ac:c2:d7:ce:8e:c4:d7:c2:28:b1:37:1a:25:0f:e3:e1: 02:14:30:9d:14:58:60:65:d4:00:e6:24:84:f0:ee:9e:a1:56: 1c:02:c3:d7:3b:ec:70:21:a7:67:d6:04:06:57:94:e4:d5:c8: 69:c6:80:42:72:a9:d3:6e:cf:d1:a3:0f:fb:f6:4c:4a:e9:e7: 11:b3:06:b4:b6:13:0a:bb:23:35:f7:c5:da:66:0d:01:33:06: 3a:64:c0:89:b6:28:24:2b:54:34:1c:98:e8:0b:e9:0b:cf:6b: 57:2e:a5:16:40:be:af:80:05:70:66:8e:49:20:44:dd:11:9e: a2:c5:05:fc:c4:99:df:2a:f1:7a:67:6f:f0:68:98:6f:33:35: a6:bd:95:28:3a:15:35:38:f6:fb:3c:99:57:44:6c:ad:98:4a: 0c:fa:38:13:21:09:9e:f6:6c:49:9a:b0:ff:18:4a:cb:12:79: d4:97:25:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh4dU5hw2qVi3a0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTZlZjY0ZTEtMTAyMC00OTUzLWExN2YtNzUxNGEzNzg5NDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJrGBTg41nM9mwnlBxgoNIbwzDfKd3lRy3BB en1FOQuuzJReVB3L8IQnRyiqZ8nAGMfRiAZ780B8JBXKYaD1YLYI2q4fcqro/eTg oBMn2Mb3cFebUEmwQWD560s0P8aMZVRCqErR1skUAl7nsIl6g+8kNycV/nqTY259 rsvk+QGavD40vpBZmEemiMsF+FBR0LTPEke5EOsSsa+k2yRuZz3p9IdzWbWserFC T7Zo+rOiT9ni2rJIiRL31Hek2XlKlkhR7BasbS6FlM8U4KZdMvjLifBLPRvU53+B 2obOVi9bLanUH5Hg6pcOgYEYIVUpeY4IvDsC6dY/QmbydAaYNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFxaeZ6QaKZq4Y8UmFw5XX4kJNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjFmOTQ3NWYtMTJlNS0z Yjg5LWE5ODEtNzhhNDgzOTJlMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYYCwX9ffE+DgCq7Mww14athU2cLds3QgezOmJtJJ4pu2B6lwdTY5s+ 7Lbx4SNR5scmXMLFBQjY/KHVKm7eA0YZR1CEizlzFIvZrMLXzo7E18IosTcaJQ/j 4QIUMJ0UWGBl1ADmJITw7p6hVhwCw9c77HAhp2fWBAZXlOTVyGnGgEJyqdNuz9Gj D/v2TErp5xGzBrS2Ewq7IzX3xdpmDQEzBjpkwIm2KCQrVDQcmOgL6QvPa1cupRZA vq+ABXBmjkkgRN0RnqLFBfzEmd8q8Xpnb/BomG8zNaa9lSg6FTU49vs8mVdEbK2Y Sgz6OBMhCZ72bEmasP8YSssSedSXJUE= -----END CERTIFICATE-----Generated at Sat Sep 26 09:06:54 2026 by rpki-client