$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3931fdf0-011a-38c5-98f9-2388e0d4f7a3.roa File: 3931fdf0-011a-38c5-98f9-2388e0d4f7a3.roa (raw, json) Hash identifier: dkYNN8g6TVRsqMhxinA5XP81QUz1mneo8J/v3T8AkfE= Subject key identifier: 55:90:49:51:B8:88:84:01:00:03:E7:D9:2F:1C:71:54:79:97:31:2B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F46A7E3E70944F66F329AE780 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3931fdf0-011a-38c5-98f9-2388e0d4f7a3.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 68.180.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e3:e7:09:44:f6:6f:32:9a:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=8dfa624a-d96a-4535-9db6-17282800b274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:18:e7:0a:2a:e0:eb:de:ee:50:23:90:2f:c0: 70:51:c0:6c:0a:51:4f:77:49:95:6a:16:c6:cc:6d: 66:8a:da:c2:50:ed:19:de:f7:96:44:06:7d:6c:be: c7:6b:1a:e5:fc:8a:06:54:5f:b6:57:7e:b2:a3:3c: d9:00:a2:89:78:36:3a:3b:e1:dc:99:f7:30:f6:16: ba:af:b4:76:07:e2:11:ee:b2:8d:19:5f:43:e1:0e: e5:7b:1c:84:4d:ee:e3:ee:a2:6a:6e:71:ec:11:11: bf:46:28:c8:12:a5:e3:ab:d3:0b:3b:c7:f0:58:74: 30:d9:eb:fb:28:88:0a:e4:71:64:4e:f3:90:fd:af: d1:f6:86:69:38:9a:a2:f8:e3:b5:88:d9:7b:ac:c3: d0:6f:b8:e7:16:52:5f:91:b2:d2:5a:f6:09:df:5f: 31:d6:d9:50:d1:f6:26:5c:ae:5e:6c:b8:45:51:cb: ce:9a:26:2c:04:7a:02:6f:62:af:6e:ec:79:e0:d0: 91:ec:73:99:92:cb:09:5b:02:aa:f4:13:64:e7:bc: 49:ba:a0:d8:6c:78:51:7a:61:c0:99:da:af:76:37: e0:18:9b:3e:fb:cd:9d:3b:54:0c:eb:c4:fb:58:d7: 85:1a:d2:3e:91:37:4d:19:0e:1d:cf:3a:fb:50:a2: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:90:49:51:B8:88:84:01:00:03:E7:D9:2F:1C:71:54:79:97:31:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3931fdf0-011a-38c5-98f9-2388e0d4f7a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:2d:87:38:d4:49:41:61:09:4e:a2:f1:50:3f:f4:6e:0d:5c: 7b:f4:d1:c5:ff:41:c8:e7:c0:00:4c:ec:d7:24:7e:91:ad:12: 2d:44:a2:37:06:3c:a5:f8:7e:5c:1f:d4:f7:b7:07:bc:91:db: ed:83:8b:29:53:36:dd:2f:44:29:0e:bd:07:42:99:72:0d:68: 08:01:b6:fb:89:d1:38:60:64:7d:6c:9e:20:60:3b:eb:33:50: c6:b5:3b:41:db:7f:a6:72:bd:13:e0:8c:b8:42:e5:9a:e9:9e: 8c:b3:79:c0:fb:5b:57:71:fa:e3:05:ed:9d:7c:08:ef:da:7a: 4f:06:d2:ac:4c:0a:2d:80:75:73:98:28:32:b8:b6:1f:54:5e: df:5a:62:5a:d8:87:21:5e:2a:d7:e2:63:22:13:f9:b7:e7:ca: 5b:4b:5f:ad:3a:92:e1:b5:e0:f8:b8:cd:ba:31:41:1d:3f:0f: 8b:54:52:9b:dd:07:a1:d4:99:80:6b:1e:36:b2:a9:90:44:5e: 5c:db:0b:70:51:8f:12:f2:ad:79:d9:bc:50:8f:5f:b8:d6:c6: ba:4a:43:bb:aa:43:92:99:b3:ef:85:da:e4:2a:4c:13:b4:b6: 09:a8:e1:bb:55:03:b8:ff:a8:9c:3a:d5:0f:e3:fb:ba:f4:ee: 05:bf:81:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+PnCUT2bzKa54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk OGRmYTYyNGEtZDk2YS00NTM1LTlkYjYtMTcyODI4MDBiMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRjnCirg697uUCOQL8BwUcBsClFPd0mVahbG zG1mitrCUO0Z3veWRAZ9bL7Haxrl/IoGVF+2V36yozzZAKKJeDY6O+Hcmfcw9ha6 r7R2B+IR7rKNGV9D4Q7lexyETe7j7qJqbnHsERG/RijIEqXjq9MLO8fwWHQw2ev7 KIgK5HFkTvOQ/a/R9oZpOJqi+OO1iNl7rMPQb7jnFlJfkbLSWvYJ318x1tlQ0fYm XK5ebLhFUcvOmiYsBHoCb2Kvbux54NCR7HOZkssJWwKq9BNk57xJuqDYbHhRemHA mdqvdjfgGJs++82dO1QM68T7WNeFGtI+kTdNGQ4dzzr7UKJgsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWQSVG4iIQBAAPn2S8ccVR5lzErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzkzMWZkZjAtMDExYS0z OGM1LTk4ZjktMjM4OGUwZDRmN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8thzjUSUFhCU6i8VA/9G4NXHv00cX/QcjnwABM7NckfpGtEi1EojcG PKX4flwf1Pe3B7yR2+2DiylTNt0vRCkOvQdCmXINaAgBtvuJ0ThgZH1sniBgO+sz UMa1O0Hbf6ZyvRPgjLhC5ZrpnoyzecD7W1dx+uMF7Z18CO/aek8G0qxMCi2AdXOY KDK4th9UXt9aYlrYhyFeKtfiYyIT+bfnyltLX606kuG14Pi4zboxQR0/D4tUUpvd B6HUmYBrHjayqZBEXlzbC3BRjxLyrXnZvFCPX7jWxrpKQ7uqQ5KZs++F2uQqTBO0 tgmo4btVA7j/qJw61Q/j+7r07gW/gZo= -----END CERTIFICATE-----Generated at Sun Sep 27 02:25:39 2026 by rpki-client