$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ff679900-294b-35d7-b4d2-a77f841a4fdd.roa File: ff679900-294b-35d7-b4d2-a77f841a4fdd.roa (raw, json) Hash identifier: AX//xZMX/0XBmNOqqy+ZGkvomRUtcV5/OSRmNcfp8l0= Subject key identifier: 53:70:30:FD:E8:6C:70:A0:57:DD:97:D3:09:09:17:B3:FB:0C:6C:C0 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BA2378F9E1164A84B92AE9880 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ff679900-294b-35d7-b4d2-a77f841a4fdd.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 23473 IP address blocks: 68.180.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8f:9e:11:64:a8:4b:92:ae:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=85a16bbf-ff5b-44ef-bc07-44ea9099b305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:ed:c3:a9:20:1d:be:2d:57:62:85:3e:54: fd:d7:40:45:48:cb:5b:62:68:a6:34:15:3c:88:8f: 62:e0:11:a9:03:57:fa:cb:96:f4:57:56:c9:0d:dd: 05:9c:24:c0:55:65:b7:73:14:5f:83:e6:86:d2:bb: 54:f8:0f:85:cb:d1:62:56:ec:cd:21:e5:b9:6a:3e: dc:9d:b9:80:88:e1:8f:91:2f:60:45:a5:3b:51:01: 96:38:0c:60:fd:b2:b2:79:8e:2b:94:be:b2:3e:03: bc:b1:b0:b1:53:e1:63:ef:46:97:9b:56:a0:ae:53: 61:02:f4:70:6a:ab:12:1e:40:20:84:e2:e5:74:ef: 94:57:7c:33:a3:d3:42:52:25:99:4c:60:88:a4:77: 6e:5d:c8:c3:4a:de:e8:11:c8:fc:c8:0c:c0:bb:e4: 42:81:76:46:d6:6f:eb:43:08:92:3b:2c:bb:73:b6: dc:b0:64:0b:4f:c8:0a:68:17:fc:fb:48:6a:80:32: b8:3f:ab:47:2a:c0:50:2b:54:db:6c:1e:f3:dd:ea: d1:58:a4:29:44:79:bb:77:f7:64:f7:2d:e0:e2:0e: b5:3f:eb:f9:ab:1a:59:93:d5:2c:80:6a:4e:84:1b: 66:2c:04:c0:2b:75:91:9d:e4:7a:28:16:98:34:eb: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:70:30:FD:E8:6C:70:A0:57:DD:97:D3:09:09:17:B3:FB:0C:6C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ff679900-294b-35d7-b4d2-a77f841a4fdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:90:14:1f:36:4a:ec:27:ad:e1:a6:e3:9c:46:9d:fa:d5:b0: 05:bb:bc:16:c1:2c:2b:fb:70:ca:5d:ee:9f:ba:31:db:f3:12: e5:86:ab:ef:82:bc:d5:d9:f3:d6:dd:55:9f:cf:3c:0c:2c:ba: 26:a3:1e:f6:fc:4f:95:79:cb:3a:43:47:3b:53:68:e0:7e:fe: 2c:44:5e:23:d5:93:5e:2f:b3:78:a4:9c:50:e8:f5:32:df:28: 51:92:8c:f3:6c:ed:de:9f:5a:03:3f:8b:a6:70:61:1e:c9:a1: 9b:81:05:3f:65:b7:9b:08:ae:77:d3:15:de:69:5d:81:8b:b1: c9:a5:43:1c:63:8f:f2:bd:cc:1c:7f:67:91:8a:88:f5:5e:43: 78:a9:37:d9:01:f7:b2:3a:5f:c7:b9:fc:7a:25:b2:4c:59:7c: 07:29:cb:ff:53:54:f5:9c:24:33:bd:9d:89:7a:75:9e:cf:48: d8:bb:4e:e2:9c:91:92:b3:db:0d:55:2f:af:1a:f7:fc:d7:21: 34:a5:94:ad:f1:fa:f1:1a:53:00:9a:3f:a9:6d:15:93:2f:cc: 55:72:ef:28:a1:77:7a:4f:e7:65:db:9e:50:7e:60:78:cc:2d: d3:fa:a3:58:37:d8:8c:58:b6:30:80:a8:cd:fd:a3:09:63:d9: e9:61:24:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN4+eEWSoS5KumIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk ODVhMTZiYmYtZmY1Yi00NGVmLWJjMDctNDRlYTkwOTliMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudTtw6kgHb4tV2KFPlT910BFSMtbYmimNBU8 iI9i4BGpA1f6y5b0V1bJDd0FnCTAVWW3cxRfg+aG0rtU+A+Fy9FiVuzNIeW5aj7c nbmAiOGPkS9gRaU7UQGWOAxg/bKyeY4rlL6yPgO8sbCxU+Fj70aXm1agrlNhAvRw aqsSHkAghOLldO+UV3wzo9NCUiWZTGCIpHduXcjDSt7oEcj8yAzAu+RCgXZG1m/r QwiSOyy7c7bcsGQLT8gKaBf8+0hqgDK4P6tHKsBQK1TbbB7z3erRWKQpRHm7d/dk 9y3g4g61P+v5qxpZk9UsgGpOhBtmLATAK3WRneR6KBaYNOvAPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNwMP3obHCgV92X0wkJF7P7DGzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZmY2Nzk5MDAtMjk0Yi0z NWQ3LWI0ZDItYTc3Zjg0MWE0ZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyQFB82SuwnreGm45xGnfrVsAW7vBbBLCv7cMpd7p+6MdvzEuWGq++C vNXZ89bdVZ/PPAwsuiajHvb8T5V5yzpDRztTaOB+/ixEXiPVk14vs3iknFDo9TLf KFGSjPNs7d6fWgM/i6ZwYR7JoZuBBT9lt5sIrnfTFd5pXYGLscmlQxxjj/K9zBx/ Z5GKiPVeQ3ipN9kB97I6X8e5/HolskxZfAcpy/9TVPWcJDO9nYl6dZ7PSNi7TuKc kZKz2w1VL68a9/zXITSllK3x+vEaUwCaP6ltFZMvzFVy7yihd3pP52XbnlB+YHjM LdP6o1g32IxYtjCAqM39owlj2elhJDw= -----END CERTIFICATE-----Generated at Wed Nov 5 04:35:52 2025 by rpki-client