$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/43d8c0d4-87d7-3cd8-add5-ffa769c7b77a.roa File: 43d8c0d4-87d7-3cd8-add5-ffa769c7b77a.roa (raw, json) Hash identifier: scTUJNwOfWPhBJ2Z1EF4mqjciqyaGUw+wyEW4YYmsck= Subject key identifier: A3:7C:89:48:A4:07:BC:AA:66:A0:FF:0F:83:72:6E:71:12:BB:5E:C1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F497428F743B85DE7C9CC9400 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/43d8c0d4-87d7-3cd8-add5-ffa769c7b77a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 68.234.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:28:f7:43:b8:5d:e7:c9:cc:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d6c21256-182e-4797-98f4-e7f5f3527a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:dd:ff:4d:e8:7d:ca:fc:ae:21:d6:4d:f5: 88:dd:af:83:32:11:9d:a4:c6:6b:6f:dc:d3:3f:41: f0:f7:64:75:de:b8:a1:0c:c8:a1:a4:d4:18:11:54: c6:83:7c:cf:1f:df:05:47:f0:57:d0:34:e8:90:7f: aa:4a:38:78:c6:ff:6a:61:08:8f:b1:3e:78:b6:bb: 5a:a4:88:f3:b7:22:2a:05:f5:4d:0b:ba:c6:66:4c: 71:0e:db:fa:1d:51:67:30:45:2c:f0:ca:bc:0d:83: a8:b9:85:8c:6f:e9:0b:12:be:d4:1b:e3:44:22:36: 01:84:0e:3c:0d:de:ae:04:68:10:f2:2b:05:37:94: e8:df:33:57:a6:6a:e1:4d:41:de:4e:21:97:28:82: 7b:56:fb:0e:1c:a0:63:2c:5a:ca:ee:0f:ef:ca:ac: 8e:76:42:3f:02:a7:0e:e8:a6:6d:9a:35:17:4f:73: e7:6d:be:2f:bc:3f:85:9a:ae:09:f6:23:42:d1:ad: cd:0f:94:dd:6c:bb:74:40:61:ff:f0:b5:3e:17:28: d7:80:af:27:fd:4a:49:03:d7:69:e2:04:04:dd:7b: 4d:fd:9c:c9:e2:5f:d0:c0:e4:81:0f:6e:1c:d2:71: d7:a0:46:72:b5:8d:c5:7f:e3:5b:ee:d9:5f:7b:5e: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7C:89:48:A4:07:BC:AA:66:A0:FF:0F:83:72:6E:71:12:BB:5E:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/43d8c0d4-87d7-3cd8-add5-ffa769c7b77a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:36:5f:f9:80:23:45:85:ae:16:19:39:9b:f5:41:37:94:fb: 9d:c2:65:81:9a:e3:5e:e0:ea:b5:ac:d7:7b:61:8f:d0:65:fe: 8d:43:07:47:c7:d8:56:6e:27:08:a1:92:d5:12:76:06:21:6e: a3:e5:82:cd:e0:20:59:79:54:f7:15:b3:30:86:e9:f4:8b:43: 75:fc:91:86:69:c2:51:3d:bc:91:b9:ed:9e:c5:8e:8a:bc:59: ba:43:e1:2c:cd:7e:f2:91:32:89:80:6d:81:fc:a2:0f:fd:c9: e8:3a:7e:3f:0c:ca:c1:1a:04:88:20:c4:93:ff:46:b8:3d:a2: 81:92:9d:56:b4:cd:ed:e5:42:04:cd:87:3b:c2:1b:53:da:53: fc:d5:2e:9b:ed:0f:a4:a9:4a:4f:9b:77:c7:c2:ea:1c:d5:86: 68:8a:d1:ab:4a:ff:b1:52:99:bc:04:4a:8e:66:95:b4:da:59: 5e:20:e3:cb:7c:62:3f:d6:6d:05:b2:70:7d:40:94:92:38:7c: 87:2f:94:26:5e:7c:76:ff:29:12:cf:16:63:22:01:b7:e8:d6: 41:5c:be:06:ee:dc:67:0f:c9:55:96:96:63:76:be:15:86:59: c9:60:77:8b:bf:6b:ea:dd:b4:d3:1a:55:52:b5:e3:0c:5b:91: 6f:1e:2a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdCj3Q7hd58nMlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDZjMjEyNTYtMTgyZS00Nzk3LTk4ZjQtZTdmNWYzNTI3YTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Td/03ofcr8riHWTfWI3a+DMhGdpMZrb9zT P0Hw92R13rihDMihpNQYEVTGg3zPH98FR/BX0DTokH+qSjh4xv9qYQiPsT54trta pIjztyIqBfVNC7rGZkxxDtv6HVFnMEUs8Mq8DYOouYWMb+kLEr7UG+NEIjYBhA48 Dd6uBGgQ8isFN5To3zNXpmrhTUHeTiGXKIJ7VvsOHKBjLFrK7g/vyqyOdkI/AqcO 6KZtmjUXT3Pnbb4vvD+Fmq4J9iNC0a3ND5TdbLt0QGH/8LU+FyjXgK8n/UpJA9dp 4gQE3XtN/ZzJ4l/QwOSBD24c0nHXoEZytY3Ff+Nb7tlfe15IswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN8iUikB7yqZqD/D4NybnESu17BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDNkOGMwZDQtODdkNy0z Y2Q4LWFkZDUtZmZhNzY5YzdiNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA2X/mAI0WFrhYZOZv1QTeU+53CZYGa417g6rWs13thj9Bl/o1DB0fH 2FZuJwihktUSdgYhbqPlgs3gIFl5VPcVszCG6fSLQ3X8kYZpwlE9vJG57Z7Fjoq8 WbpD4SzNfvKRMomAbYH8og/9yeg6fj8MysEaBIggxJP/Rrg9ooGSnVa0ze3lQgTN hzvCG1PaU/zVLpvtD6SpSk+bd8fC6hzVhmiK0atK/7FSmbwESo5mlbTaWV4g48t8 Yj/WbQWycH1AlJI4fIcvlCZefHb/KRLPFmMiAbfo1kFcvgbu3GcPyVWWlmN2vhWG Wclgd4u/a+rdtNMaVVK14wxbkW8eKqs= -----END CERTIFICATE-----Generated at Sat Sep 26 11:15:21 2026 by rpki-client