$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa File: 37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa (raw, json) Hash identifier: gXXbhGhYtOb5Rz9HSGCXznWdeU5L2hVuraMthNlQjRI= Subject key identifier: 5A:5D:C7:27:9C:5A:1C:74:0E:60:4F:21:97:87:2E:2B:AB:D9:41:DC Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BC2706EEB2D3E40E1AB791500 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 68.170.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:6e:eb:2d:3e:40:e1:ab:79:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=5580992e-9beb-49a2-a6e6-c876224105a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:6f:68:e2:13:4a:ef:29:e0:9d:80:89:fe: 1d:5a:51:67:09:f9:05:44:46:15:f5:df:1a:53:15: 81:5d:61:34:74:75:9a:c0:bb:46:9f:e4:1d:65:ad: 73:93:b4:ff:37:01:45:f5:cb:58:de:1c:2a:04:d8: 03:dc:a1:46:9d:fc:45:46:4d:a5:67:e0:77:fc:d5: ab:f8:7b:3a:e3:ed:19:03:70:a4:2a:04:25:43:ea: 9c:b0:ae:f4:fd:91:bf:c5:bb:cc:95:ab:e3:3e:e2: de:15:ea:23:fa:16:1d:35:41:f6:96:a2:71:39:60: 92:58:38:62:e9:b6:d7:97:f8:9e:25:d9:6a:0b:7a: 30:7f:c4:fe:7d:5e:05:5c:2c:be:dd:2b:e2:cb:75: 45:eb:fc:ec:54:71:e2:b5:7b:15:36:c7:0b:87:16: 3c:9e:3e:fc:93:35:24:c5:ee:3e:22:b1:15:34:97: 6e:c4:86:2c:4f:a4:9f:81:ce:61:ea:5e:04:b2:c7: c5:ec:87:b2:fc:0f:e1:14:cd:c8:20:d2:dc:07:16: 25:0c:d1:a5:63:5a:f6:f6:89:4f:3e:93:f6:ad:88: 31:60:c2:7d:8b:9a:a9:e5:ad:fe:74:40:89:10:5b: fd:c2:37:63:b0:0f:f5:34:54:3f:45:86:64:32:0e: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5D:C7:27:9C:5A:1C:74:0E:60:4F:21:97:87:2E:2B:AB:D9:41:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c8:c5:46:7d:e8:00:b4:45:bf:70:91:32:0d:5a:23:81:26: a0:67:31:32:15:cd:fd:d7:3c:01:59:af:77:1d:58:64:9e:8a: 68:04:ed:d1:bf:ad:c8:9f:64:5b:0a:b6:48:46:94:5d:3b:7d: 84:28:6b:76:3a:87:3e:ec:61:e1:b0:30:56:58:c0:b3:86:6f: 9e:76:51:f8:94:13:5b:dc:1a:aa:54:d6:48:ba:2c:f1:75:b7: 0f:5f:49:58:82:f1:23:56:51:09:d3:e4:a0:d8:ec:f6:89:9f: fc:e9:f2:ff:f2:59:d0:43:f0:ac:ef:fb:e2:dd:9c:57:a4:40: 62:83:90:31:80:62:de:39:08:8b:b6:7d:cb:ab:46:e0:d9:c1: 5f:78:8b:d7:0e:28:60:19:a0:dd:d6:a2:fe:61:ab:64:37:ae: ba:f7:aa:18:a0:cf:b3:57:18:b3:d1:46:be:84:3c:8d:93:60: f1:ce:f6:01:a3:74:fc:86:71:84:70:91:92:09:43:c6:dc:5b: 39:ed:6f:e6:65:50:08:ec:80:86:b6:63:d2:eb:c9:2f:17:25: 35:d5:fd:ed:0c:a9:44:e9:a3:9d:fd:3d:89:2d:76:a8:1d:1c: 6e:14:43:31:46:bb:b0:48:fb:d2:31:17:99:d7:c9:99:59:f2: ba:6f:89:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcG7rLT5A4at5FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk NTU4MDk5MmUtOWJlYi00OWEyLWE2ZTYtYzg3NjIyNDEwNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3JvaOITSu8p4J2Aif4dWlFnCfkFREYV9d8a UxWBXWE0dHWawLtGn+QdZa1zk7T/NwFF9ctY3hwqBNgD3KFGnfxFRk2lZ+B3/NWr +Hs64+0ZA3CkKgQlQ+qcsK70/ZG/xbvMlavjPuLeFeoj+hYdNUH2lqJxOWCSWDhi 6bbXl/ieJdlqC3owf8T+fV4FXCy+3Sviy3VF6/zsVHHitXsVNscLhxY8nj78kzUk xe4+IrEVNJduxIYsT6Sfgc5h6l4EssfF7Iey/A/hFM3IINLcBxYlDNGlY1r29olP PpP2rYgxYMJ9i5qp5a3+dECJEFv9wjdjsA/1NFQ/RYZkMg6E6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpdxyecWhx0DmBPIZeHLiur2UHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMzdjMjhjZDctMjVmNC0z MzczLWIyZjktOTI0YjNmYTVmMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/IxUZ96AC0Rb9wkTINWiOBJqBnMTIVzf3XPAFZr3cdWGSeimgE7dG/ rcifZFsKtkhGlF07fYQoa3Y6hz7sYeGwMFZYwLOGb552UfiUE1vcGqpU1ki6LPF1 tw9fSViC8SNWUQnT5KDY7PaJn/zp8v/yWdBD8Kzv++LdnFekQGKDkDGAYt45CIu2 fcurRuDZwV94i9cOKGAZoN3Wov5hq2Q3rrr3qhigz7NXGLPRRr6EPI2TYPHO9gGj dPyGcYRwkZIJQ8bcWzntb+ZlUAjsgIa2Y9LryS8XJTXV/e0MqUTpo539PYktdqgd HG4UQzFGu7BI+9IxF5nXyZlZ8rpviaA= -----END CERTIFICATE-----Generated at Wed Nov 5 22:32:15 2025 by rpki-client