$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb222670-45f4-3b97-bf25-af3c85697e05.roa File: cb222670-45f4-3b97-bf25-af3c85697e05.roa (raw, json) Hash identifier: VsWGQPQijSWVHMTiMWvJag63k7f4zXyLFHF8xJe9aSA= Subject key identifier: 3C:81:37:DA:B7:BA:BF:ED:80:59:F8:86:67:FE:44:33:9B:3D:67:56 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B296F3353CE5E829E203F0E80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb222670-45f4-3b97-bf25-af3c85697e05.roa Signing time: Thu 11 Sep 2025 18:39:54 +0000 ROA not before: Thu 11 Sep 2025 18:39:54 +0000 ROA not after: Wed 10 Dec 2025 19:39:54 +0000 asID: 23473 IP address blocks: 68.180.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:6f:33:53:ce:5e:82:9e:20:3f:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 11 18:39:54 2025 GMT Not After : Dec 10 19:39:54 2025 GMT Subject: CN=bc3debdb-6535-442f-afe3-44449b9166f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:b6:ae:44:70:59:93:a6:85:ea:38:a3:1e: 9e:d0:0a:af:96:fe:45:9d:84:25:75:02:c7:ef:67: e2:ac:c1:b4:82:de:76:d2:39:08:bd:6a:2d:47:08: 10:5d:b5:c5:9a:9d:e8:41:49:12:94:5e:e6:5c:a4: f5:84:5f:db:08:57:e8:21:52:5a:a0:92:5d:33:ad: 1b:78:53:73:52:e5:95:51:a3:b1:66:d6:75:24:b2: da:b4:0f:f9:d4:70:9e:56:38:14:0c:a1:11:0c:c4: 71:ca:92:b7:d6:a9:ea:ea:65:80:6e:98:f0:17:e6: 96:71:cd:a9:d8:5b:cb:c7:af:30:9f:8f:49:52:8f: df:59:f0:b3:70:1e:4a:78:b0:d2:db:78:dd:63:30: f7:b2:71:01:8f:1d:b1:d5:47:17:a5:a4:ea:61:2d: 78:fb:da:85:52:c9:e3:4f:24:b2:a2:10:10:e9:66: 35:10:f3:d6:a2:23:c5:ae:d9:af:10:45:b8:b6:df: b0:84:51:83:03:6f:81:63:5a:8c:e7:48:59:11:67: c3:92:8e:69:ce:e2:a9:45:05:c3:f4:59:47:2a:bb: 96:27:84:05:4b:6e:34:27:21:00:e4:47:cb:2a:68: b0:d5:dc:40:7b:2a:fb:ac:e7:d6:0a:3b:40:2e:18: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:81:37:DA:B7:BA:BF:ED:80:59:F8:86:67:FE:44:33:9B:3D:67:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb222670-45f4-3b97-bf25-af3c85697e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:cd:1e:03:92:1c:22:b7:9c:ee:09:07:87:b4:38:0d:7f:8a: 52:e7:90:62:ff:d2:2a:07:53:83:97:7a:5d:75:26:09:fa:13: 64:c5:09:07:f7:90:64:fc:80:22:5e:32:fb:82:56:00:04:8f: 28:fe:73:61:52:cd:75:90:f5:2f:bd:d3:28:a7:27:07:3e:50: d7:ea:44:87:4f:0e:01:91:d9:79:68:db:a8:e0:aa:a4:6a:ea: c0:11:0f:91:91:2c:68:40:95:52:e9:6f:f9:e2:f6:41:92:c6: 75:59:71:29:2a:e3:2f:75:5f:89:78:47:68:ea:87:ed:8f:18: 77:0e:36:37:63:00:d4:ef:7f:c5:e0:f3:16:1d:f5:26:cc:9a: e2:eb:4d:59:10:ae:58:97:6b:8a:b5:b5:d9:94:cf:46:f1:db: 56:f2:4a:43:e3:a0:bd:f1:90:67:f9:1d:3c:b3:88:66:2d:9d: 52:e5:75:9d:37:59:71:40:88:7a:01:61:63:2d:85:92:42:36: 73:8a:4b:f5:7a:3a:7a:4c:77:5f:14:2c:89:cc:f8:04:91:d6: 48:30:c2:b8:8c:69:b4:13:19:06:86:6f:2d:08:47:ff:03:3e: 21:0d:a7:a6:03:b1:a3:e5:f9:11:cf:2a:15:ec:28:67:d3:62: fc:bd:9b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEspbzNTzl6CniA/DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkxMTE4Mzk1NFoXDTI1MTIxMDE5Mzk1NFowLzEtMCsGA1UEAxMk YmMzZGViZGItNjUzNS00NDJmLWFmZTMtNDQ0NDliOTE2NmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk62rkRwWZOmheo4ox6e0Aqvlv5FnYQldQLH 72firMG0gt520jkIvWotRwgQXbXFmp3oQUkSlF7mXKT1hF/bCFfoIVJaoJJdM60b eFNzUuWVUaOxZtZ1JLLatA/51HCeVjgUDKERDMRxypK31qnq6mWAbpjwF+aWcc2p 2FvLx68wn49JUo/fWfCzcB5KeLDS23jdYzD3snEBjx2x1UcXpaTqYS14+9qFUsnj TySyohAQ6WY1EPPWoiPFrtmvEEW4tt+whFGDA2+BY1qM50hZEWfDko5pzuKpRQXD 9FlHKruWJ4QFS240JyEA5EfLKmiw1dxAeyr7rOfWCjtALhiS3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyBN9q3ur/tgFn4hmf+RDObPWdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2IyMjI2NzAtNDVmNC0z Yjk3LWJmMjUtYWYzYzg1Njk3ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRLRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvNHgOSHCK3nO4JB4e0OA1/ilLnkGL/0ioHU4OXel11Jgn6E2TFCQf3 kGT8gCJeMvuCVgAEjyj+c2FSzXWQ9S+90yinJwc+UNfqRIdPDgGR2Xlo26jgqqRq 6sARD5GRLGhAlVLpb/ni9kGSxnVZcSkq4y91X4l4R2jqh+2PGHcONjdjANTvf8Xg 8xYd9SbMmuLrTVkQrliXa4q1tdmUz0bx21bySkPjoL3xkGf5HTyziGYtnVLldZ03 WXFAiHoBYWMthZJCNnOKS/V6OnpMd18ULInM+ASR1kgwwriMabQTGQaGby0IR/8D PiENp6YDsaPl+RHPKhXsKGfTYvy9m8A= -----END CERTIFICATE-----Generated at Wed Nov 5 04:35:57 2025 by rpki-client