$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/12cdf4f0-a205-3122-a8f7-5250fc30a33b.roa File: 12cdf4f0-a205-3122-a8f7-5250fc30a33b.roa (raw, json) Hash identifier: iAdVi+jW8y8s6yn1gbNHZNv03TIcd8UaSKxjtQNQv1I= Subject key identifier: 42:0C:B0:D6:30:50:52:00:29:3E:77:7C:35:F0:45:F4:86:D3:75:DE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BB88D5A049C79E461113C1B80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/12cdf4f0-a205-3122-a8f7-5250fc30a33b.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 23473 IP address blocks: 68.234.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:5a:04:9c:79:e4:61:11:3c:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=55fcf376-07c5-4c11-80f6-f4ad0a6037ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:0b:69:f7:99:5c:3e:0b:3b:06:8c:6a:25: 47:b4:9c:53:33:1a:e2:71:d4:9b:31:dc:49:58:95: b7:f9:b2:75:ee:6b:c0:7c:00:40:0d:72:3c:22:b8: 22:33:01:ce:3e:63:2d:52:9b:fb:22:16:d1:ed:0c: f1:0f:f5:a4:9f:b4:d7:b8:6c:1c:93:b3:ef:99:60: 67:bf:27:4b:d7:10:b8:84:e1:fe:d5:52:b7:fc:a5: 95:86:37:8a:f7:0c:11:8e:91:95:f8:ae:c6:3b:cd: c3:47:33:02:8f:34:ef:59:0e:38:72:a5:33:0a:91: 3e:44:7e:91:01:e7:bb:e3:46:83:db:11:52:be:89: bd:c6:84:44:52:8e:de:4d:3c:d3:0f:2c:94:38:bf: c5:fc:cc:57:2b:e2:cb:f7:ae:c7:8d:04:7a:a8:74: 74:2a:0d:b9:9a:56:df:aa:b6:47:04:88:de:a4:13: 3e:1f:ba:b9:42:0e:07:32:06:3d:73:16:66:f5:b8: c6:f1:62:23:67:f8:8f:82:83:df:42:2b:46:12:92: f2:99:e7:7d:24:66:c6:db:65:1c:1d:ba:84:bb:cd: 60:9d:7c:2d:01:e3:f4:f7:32:cb:b7:ee:88:5d:00: 10:d9:e0:4a:dd:54:bc:aa:2e:35:26:c8:6a:eb:21: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0C:B0:D6:30:50:52:00:29:3E:77:7C:35:F0:45:F4:86:D3:75:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/12cdf4f0-a205-3122-a8f7-5250fc30a33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:58:1c:73:86:bb:c7:44:a0:66:12:e1:fc:51:ef:df:49:b6: 8e:dd:3a:26:9a:b5:88:91:a2:7d:f7:11:25:1b:5d:29:66:26: 10:fb:20:61:f4:fc:05:7b:b0:82:c4:91:28:1b:3c:2e:dc:65: 42:d1:5a:93:03:74:2e:8e:fc:ee:1b:ee:33:11:b5:72:d6:f0: b9:a9:8d:64:35:16:71:65:09:cd:a9:54:18:a8:11:72:1b:11: 9f:ae:7a:89:89:4c:db:08:66:12:46:6e:7c:8e:20:3d:c3:34: 30:ba:0f:92:b5:93:5d:bf:39:c3:3d:12:9c:37:6d:f1:70:70: d9:f3:ee:4b:6a:55:e4:4a:17:bb:54:85:1e:91:1c:a3:47:0f: c3:3e:d5:e6:a2:32:8f:ef:86:10:eb:83:42:31:ee:fa:ed:c5: e0:91:1a:f9:34:3e:f3:9c:fa:b8:ef:22:51:3b:c8:38:99:8a: 43:52:f5:16:47:cc:40:d2:8c:b7:07:3f:30:d2:1b:c2:3b:28: 5f:f2:ff:67:b9:38:35:19:8e:3d:41:8b:a7:92:ab:fc:22:01: 91:d2:cf:57:2c:28:c1:8f:68:62:1f:6e:d8:66:f9:95:50:b2: f0:b2:50:74:5f:9b:7a:70:0c:03:ca:af:ee:f0:83:61:29:ba: f5:ad:8e:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVoEnHnkYRE8G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTVmY2YzNzYtMDdjNS00YzExLTgwZjYtZjRhZDBhNjAzN2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYwLafeZXD4LOwaMaiVHtJxTMxricdSbMdxJ WJW3+bJ17mvAfABADXI8IrgiMwHOPmMtUpv7IhbR7QzxD/Wkn7TXuGwck7PvmWBn vydL1xC4hOH+1VK3/KWVhjeK9wwRjpGV+K7GO83DRzMCjzTvWQ44cqUzCpE+RH6R Aee740aD2xFSvom9xoREUo7eTTzTDyyUOL/F/MxXK+LL967HjQR6qHR0Kg25mlbf qrZHBIjepBM+H7q5Qg4HMgY9cxZm9bjG8WIjZ/iPgoPfQitGEpLymed9JGbG22Uc HbqEu81gnXwtAeP09zLLt+6IXQAQ2eBK3VS8qi41Jshq6yGCjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIMsNYwUFIAKT53fDXwRfSG03XeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMTJjZGY0ZjAtYTIwNS0z MTIyLWE4ZjctNTI1MGZjMzBhMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxYHHOGu8dEoGYS4fxR799Jto7dOiaatYiRon33ESUbXSlmJhD7IGH0 /AV7sILEkSgbPC7cZULRWpMDdC6O/O4b7jMRtXLW8LmpjWQ1FnFlCc2pVBioEXIb EZ+ueomJTNsIZhJGbnyOID3DNDC6D5K1k12/OcM9Epw3bfFwcNnz7ktqVeRKF7tU hR6RHKNHD8M+1eaiMo/vhhDrg0Ix7vrtxeCRGvk0PvOc+rjvIlE7yDiZikNS9RZH zEDSjLcHPzDSG8I7KF/y/2e5ODUZjj1Bi6eSq/wiAZHSz1csKMGPaGIfbthm+ZVQ svCyUHRfm3pwDAPKr+7wg2EpuvWtjh4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:35 2025 by rpki-client