$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3ddf72dd-8543-3890-9306-ae6739a98382.roa File: 3ddf72dd-8543-3890-9306-ae6739a98382.roa (raw, json) Hash identifier: AZevewBVYgP/3KA5jrHwmrsKRP6URbbPhOh+K7YpL6Y= Subject key identifier: 9C:AB:D9:DF:47:E7:29:06:CF:B4:36:80:23:09:E1:4A:2E:5B:81:05 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B2C45617284878E0E711EBB00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3ddf72dd-8543-3890-9306-ae6739a98382.roa Signing time: Fri 12 Sep 2025 19:03:04 +0000 ROA not before: Fri 12 Sep 2025 19:03:04 +0000 ROA not after: Thu 11 Dec 2025 20:03:04 +0000 asID: 23473 IP address blocks: 68.234.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:45:61:72:84:87:8e:0e:71:1e:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 12 19:03:04 2025 GMT Not After : Dec 11 20:03:04 2025 GMT Subject: CN=c5b8a84d-fd74-4b17-a85f-3411acea1409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:2c:9b:cd:05:0d:15:3a:68:6a:c7:a1:48: 4e:8c:60:51:ec:85:a5:47:e3:14:2a:35:b1:d4:4b: c0:8f:6d:3d:5d:98:83:a4:77:64:5a:30:a1:05:5b: d9:08:43:ff:2a:75:f2:9f:f7:02:54:1a:29:f0:bf: d3:5f:94:30:00:13:1c:56:cc:68:e5:df:2c:25:61: 8f:37:c6:2f:7d:0a:09:11:ff:a8:29:5d:ec:f5:93: 18:ad:a7:19:cf:2b:a1:8c:93:f1:09:1a:06:c5:7d: 11:6c:a1:d3:f5:d9:f5:bd:bf:c2:63:e0:51:87:bf: 93:55:ae:22:24:3e:5f:aa:63:cd:80:eb:a1:4e:be: 6b:47:62:fe:ca:b8:04:c0:60:06:63:88:5b:a9:0e: ed:f9:ef:be:4a:6d:17:d6:ee:fe:26:75:2a:b2:ad: de:16:34:9c:68:40:13:c0:4e:2d:fe:58:c4:36:ac: 37:7f:eb:a0:bb:66:b9:1c:0b:40:da:39:01:eb:9b: fa:00:dd:74:04:74:f0:bc:aa:3a:b1:ae:3d:2c:9a: 42:38:93:d9:57:63:b8:bb:9c:fc:8a:d7:5f:83:61: 13:4f:bd:3b:4d:fd:c3:6c:24:b0:a7:6c:af:65:db: f7:d3:cc:1e:58:2b:36:e8:55:02:8f:b6:f6:c4:b5: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AB:D9:DF:47:E7:29:06:CF:B4:36:80:23:09:E1:4A:2E:5B:81:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3ddf72dd-8543-3890-9306-ae6739a98382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6e:b2:b9:d3:31:10:c0:05:31:10:2f:88:39:5a:db:d9:fd: bc:62:a4:8d:1a:6b:b2:54:57:85:27:3f:0a:b2:b0:48:cb:16: a9:44:37:8e:8f:10:89:76:f3:0e:d6:69:d3:50:f7:c1:89:e8: 3a:e2:10:fe:bd:36:bf:7f:da:94:21:05:a7:d5:5f:a7:af:4d: bf:5a:bf:67:14:28:a1:72:6a:0f:a9:b4:07:46:10:07:05:f3: bc:52:3c:91:b5:71:5e:95:9c:fb:30:22:89:d0:93:9b:90:ab: a3:a0:8c:94:56:fb:22:dc:7d:f2:4d:54:8b:db:cc:fa:20:56: 45:84:9b:34:74:3c:51:77:ef:63:66:98:b5:07:69:87:01:02: 45:9c:c9:44:37:a9:22:4c:1e:b3:a7:6b:07:29:7d:e8:3b:44: c7:82:94:2f:1a:6c:93:1b:4b:16:fc:ae:db:4c:5f:a1:8a:d9: 8a:7f:28:73:2b:e2:cd:71:a9:85:95:c7:31:23:82:18:27:75: aa:bf:3e:25:ad:0f:f6:61:b4:65:88:d1:df:dc:7d:6f:84:24: 15:62:4b:2c:13:83:f9:b5:fd:6e:56:e2:5d:bd:09:cd:c8:a2: 08:44:99:8e:eb:d4:be:29:49:fa:df:44:45:92:55:64:65:9f: bd:5d:17:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEssRWFyhIeODnEeuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxMjE5MDMwNFoXDTI1MTIxMTIwMDMwNFowLzEtMCsGA1UEAxMk YzViOGE4NGQtZmQ3NC00YjE3LWE4NWYtMzQxMWFjZWExNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB8sm80FDRU6aGrHoUhOjGBR7IWlR+MUKjWx 1EvAj209XZiDpHdkWjChBVvZCEP/KnXyn/cCVBop8L/TX5QwABMcVsxo5d8sJWGP N8YvfQoJEf+oKV3s9ZMYracZzyuhjJPxCRoGxX0RbKHT9dn1vb/CY+BRh7+TVa4i JD5fqmPNgOuhTr5rR2L+yrgEwGAGY4hbqQ7t+e++Sm0X1u7+JnUqsq3eFjScaEAT wE4t/ljENqw3f+ugu2a5HAtA2jkB65v6AN10BHTwvKo6sa49LJpCOJPZV2O4u5z8 itdfg2ETT707Tf3DbCSwp2yvZdv308weWCs26FUCj7b2xLUONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyr2d9H5ykGz7Q2gCMJ4UouW4EFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2RkZjcyZGQtODU0My0z ODkwLTkzMDYtYWU2NzM5YTk4MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhusrnTMRDABTEQL4g5WtvZ/bxipI0aa7JUV4UnPwqysEjLFqlEN46P EIl28w7WadNQ98GJ6DriEP69Nr9/2pQhBafVX6evTb9av2cUKKFyag+ptAdGEAcF 87xSPJG1cV6VnPswIonQk5uQq6OgjJRW+yLcffJNVIvbzPogVkWEmzR0PFF372Nm mLUHaYcBAkWcyUQ3qSJMHrOnawcpfeg7RMeClC8abJMbSxb8rttMX6GK2Yp/KHMr 4s1xqYWVxzEjghgndaq/PiWtD/ZhtGWI0d/cfW+EJBViSywTg/m1/W5W4l29Cc3I oghEmY7r1L4pSfrfREWSVWRln71dFx0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:11:43 2025 by rpki-client