$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa File: 308c77f3-049f-350a-ba83-1535cc6dfb51.roa (raw, json) Hash identifier: Aq+KM4oGnOBDzpkmZAPz4IdJEC3EXTtu48EcgbuT5ug= Subject key identifier: AA:22:61:AE:2C:02:60:AE:6A:A0:5C:53:10:4E:F7:E4:C0:DE:8B:30 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BC2706F7E959CC818A0AB6D10 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 68.170.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:6f:7e:95:9c:c8:18:a0:ab:6d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=3b821966-3f23-4a88-8545-382fdaa8bf42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:30:c8:3f:19:1a:1d:f3:55:78:50:1c:d0: e4:26:99:6f:be:5b:42:1d:46:05:6d:34:13:05:d3: 28:14:65:3b:cb:d3:f8:d2:66:c3:24:47:25:7b:dc: 3c:50:3f:2d:f4:1f:8e:e3:a7:73:79:6b:ac:3a:f6: a9:bb:39:fc:f0:67:d2:28:91:66:cf:04:1c:fb:33: 25:7b:21:9f:6d:35:00:c9:a3:a8:08:5e:f3:82:55: 2b:62:5b:9a:c4:99:13:cd:62:35:3e:78:9e:12:e5: 07:4b:ca:df:27:62:6b:3c:56:4f:4b:b7:0c:59:f3: be:2e:e5:55:9b:dd:8c:9c:89:bc:6c:4c:67:53:1f: 23:c8:b7:1c:00:ea:d8:40:a8:a3:7e:31:e8:36:bb: 31:b1:9f:2b:53:0f:e5:b3:00:f9:1b:e1:51:2e:08: 51:bb:eb:f8:03:da:6b:59:00:7a:78:8d:17:6d:fd: c3:eb:8e:81:65:f0:a8:36:d4:fa:a2:b0:fa:76:07: 30:f5:25:69:7c:9e:50:65:74:6e:52:cd:f1:6c:08: a5:6c:d5:54:41:2d:ed:19:a5:7f:04:ef:90:c2:84: 75:7a:20:62:4e:43:58:6b:17:f4:8a:98:33:97:fe: aa:1a:1d:0d:31:25:5c:3e:5f:67:b1:6d:52:02:00: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:22:61:AE:2C:02:60:AE:6A:A0:5C:53:10:4E:F7:E4:C0:DE:8B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d8:2b:f7:50:3e:ed:15:b7:f0:2c:d5:e6:bb:b6:2a:98:9d: 08:3f:ed:7d:f5:75:31:bb:b3:20:2c:66:cd:7d:12:d8:a3:4f: 4c:ba:e6:a2:b6:81:af:f5:52:e2:d9:6e:28:23:80:ef:8d:cb: 70:e8:bf:5f:f5:ee:6e:e0:ab:6b:ec:ef:89:05:59:2f:2a:70: 4f:47:91:b2:56:da:e6:02:fc:96:c2:b9:42:17:e1:16:a8:b5: 98:4f:91:63:ab:f3:3f:1b:cc:03:10:2e:d7:7d:6e:fc:cd:36: d4:a9:de:75:7b:d2:38:b5:89:b9:06:8a:ba:04:62:12:66:82: aa:76:f3:8d:43:4b:81:a3:06:3f:e8:5a:5d:96:e0:5c:0a:d7: 67:4f:00:39:48:a5:79:22:7c:db:e6:3a:3a:38:e0:90:21:11: de:73:93:28:39:10:5e:fb:7d:da:19:4f:f0:85:fa:8e:d2:8f: 31:c0:3f:cb:c6:05:67:a3:0a:7b:cf:47:6d:94:c6:c9:90:2b: 88:e9:b4:e3:dc:5c:16:87:92:ad:03:36:fc:e4:d7:fa:45:4d: 4d:c3:4a:27:2d:4b:fa:eb:c0:29:5b:ea:a8:97:df:40:af:d8: 8f:ac:53:d6:35:97:bc:03:c9:98:64:76:0e:d1:41:cd:5d:54: 86:22:57:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcG9+lZzIGKCrbRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk M2I4MjE5NjYtM2YyMy00YTg4LTg1NDUtMzgyZmRhYThiZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyUwyD8ZGh3zVXhQHNDkJplvvltCHUYFbTQT BdMoFGU7y9P40mbDJEcle9w8UD8t9B+O46dzeWusOvapuzn88GfSKJFmzwQc+zMl eyGfbTUAyaOoCF7zglUrYluaxJkTzWI1PnieEuUHS8rfJ2JrPFZPS7cMWfO+LuVV m92MnIm8bExnUx8jyLccAOrYQKijfjHoNrsxsZ8rUw/lswD5G+FRLghRu+v4A9pr WQB6eI0Xbf3D646BZfCoNtT6orD6dgcw9SVpfJ5QZXRuUs3xbAilbNVUQS3tGaV/ BO+QwoR1eiBiTkNYaxf0ipgzl/6qGh0NMSVcPl9nsW1SAgA0+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoiYa4sAmCuaqBcUxBO9+TA3oswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMzA4Yzc3ZjMtMDQ5Zi0z NTBhLWJhODMtMTUzNWNjNmRmYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKryMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/YK/dQPu0Vt/As1ea7tiqYnQg/7X31dTG7syAsZs19EtijT0y65qK2 ga/1UuLZbigjgO+Ny3Dov1/17m7gq2vs74kFWS8qcE9HkbJW2uYC/JbCuUIX4Rao tZhPkWOr8z8bzAMQLtd9bvzNNtSp3nV70ji1ibkGiroEYhJmgqp2841DS4GjBj/o Wl2W4FwK12dPADlIpXkifNvmOjo44JAhEd5zkyg5EF77fdoZT/CF+o7SjzHAP8vG BWejCnvPR22UxsmQK4jptOPcXBaHkq0DNvzk1/pFTU3DSictS/rrwClb6qiX30Cv 2I+sU9Y1l7wDyZhkdg7RQc1dVIYiV7I= -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:37 2025 by rpki-client