$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8fc4e1c5-7b91-3653-8ed3-689194e1049a.roa File: 8fc4e1c5-7b91-3653-8ed3-689194e1049a.roa (raw, json) Hash identifier: b9aZWcaMeu1NjTomJ3wcvClSek6N1L+8cpL9qRBM9gE= Subject key identifier: 7A:B3:6D:4A:15:8F:4A:26:FD:A8:12:1A:43:AF:B0:22:86:56:12:BC Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BC2706F6DCA6F0D3866D0F9C0 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8fc4e1c5-7b91-3653-8ed3-689194e1049a.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 68.170.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:6f:6d:ca:6f:0d:38:66:d0:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=7dd12267-f91f-493d-8f1c-54addc5e2e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:45:25:62:c7:f3:65:68:63:37:82:47:25: ae:8a:2d:2c:4e:83:20:a2:c7:a1:fc:9c:35:3e:db: 27:3f:fa:c5:b3:cd:c2:a9:d1:1d:d2:c7:22:a7:45: 37:cd:1d:ed:93:05:77:73:ff:93:2c:03:40:b3:b4: e1:10:c2:00:ef:5c:ec:78:92:db:a6:6c:ee:45:21: 3b:6f:c1:48:c0:6c:72:97:f8:d9:2a:69:e5:83:d6: 11:9a:39:d4:0e:57:ec:bb:00:6e:85:ed:c4:e6:3b: 5a:74:b8:c9:e8:a2:fc:4f:45:d3:f9:14:f0:60:00: 5f:29:9e:5e:f9:4f:6e:c6:bf:de:a8:d3:f5:6c:c1: 6e:76:44:81:28:ba:af:2d:d6:e5:df:05:31:a5:a4: 5e:12:d6:23:90:14:4d:cc:2c:5f:e3:a2:46:f1:22: 65:94:92:c5:30:26:6d:3b:8a:69:c3:2e:4e:70:de: cc:e6:bf:0e:5c:48:76:8f:94:84:d0:92:2a:bd:56: b6:50:0e:01:cd:cb:5b:fc:0b:1e:3e:63:e8:fe:5f: af:a3:1c:6f:3b:37:4a:86:60:3b:e6:b4:8a:3a:f1: 36:10:0f:cf:03:1c:67:b3:bf:36:a1:9b:b9:5a:22: 53:86:d0:2f:14:7e:16:57:3e:d0:ed:81:a6:d8:2b: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B3:6D:4A:15:8F:4A:26:FD:A8:12:1A:43:AF:B0:22:86:56:12:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8fc4e1c5-7b91-3653-8ed3-689194e1049a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:13:9b:17:96:02:2e:6f:60:1f:97:ad:7d:21:8f:76:5d:4f: d3:80:12:4b:c3:4d:b5:6d:eb:74:58:c8:7e:2d:41:da:a9:16: d8:2f:84:82:16:e9:f2:22:a7:46:7c:2d:b1:c0:ea:82:4c:d7: e4:22:f9:6c:19:df:e4:6e:53:c7:91:6e:7b:08:49:eb:b2:3d: da:6e:c3:3b:88:9e:52:ab:8d:35:aa:19:6a:28:1d:2d:a7:1f: 9f:ae:1e:9d:f4:89:9c:34:95:34:85:d0:90:39:47:d5:20:ea: 11:7d:7f:02:cf:25:b1:0e:b5:bb:2e:e2:18:3a:c6:65:0e:50: 94:d1:c8:5b:c4:99:c0:19:35:11:24:1b:69:d7:56:58:54:70: 36:40:41:4a:9f:84:6d:c6:43:ce:99:23:16:aa:ba:0b:3a:6b: bc:7b:2d:4d:cd:dc:1c:f4:33:55:51:a1:c4:75:26:94:57:03: 67:a7:8d:11:cd:93:0b:c9:08:b3:a5:e9:5c:37:67:ac:75:9e: 5a:96:46:4c:1f:65:ae:e7:7c:e1:63:9b:db:4a:a0:43:ec:f8: 3a:f4:8c:43:f0:f4:86:cc:17:ce:8e:03:d6:20:62:8f:fd:ae: ef:d9:91:73:5c:77:c7:dc:5f:20:f9:db:2c:db:d7:06:72:c0: 9d:b6:9a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcG9tym8NOGbQ+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk N2RkMTIyNjctZjkxZi00OTNkLThmMWMtNTRhZGRjNWUyZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/dFJWLH82VoYzeCRyWuii0sToMgoseh/Jw1 PtsnP/rFs83CqdEd0scip0U3zR3tkwV3c/+TLANAs7ThEMIA71zseJLbpmzuRSE7 b8FIwGxyl/jZKmnlg9YRmjnUDlfsuwBuhe3E5jtadLjJ6KL8T0XT+RTwYABfKZ5e +U9uxr/eqNP1bMFudkSBKLqvLdbl3wUxpaReEtYjkBRNzCxf46JG8SJllJLFMCZt O4ppwy5OcN7M5r8OXEh2j5SE0JIqvVa2UA4Bzctb/AsePmPo/l+voxxvOzdKhmA7 5rSKOvE2EA/PAxxns782oZu5WiJThtAvFH4WVz7Q7YGm2CuVywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqzbUoVj0om/agSGkOvsCKGVhK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvOGZjNGUxYzUtN2I5MS0z NjUzLThlZDMtNjg5MTk0ZTEwNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKryMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQTmxeWAi5vYB+XrX0hj3ZdT9OAEkvDTbVt63RYyH4tQdqpFtgvhIIW 6fIip0Z8LbHA6oJM1+Qi+WwZ3+RuU8eRbnsISeuyPdpuwzuInlKrjTWqGWooHS2n H5+uHp30iZw0lTSF0JA5R9Ug6hF9fwLPJbEOtbsu4hg6xmUOUJTRyFvEmcAZNREk G2nXVlhUcDZAQUqfhG3GQ86ZIxaqugs6a7x7LU3N3Bz0M1VRocR1JpRXA2enjRHN kwvJCLOl6Vw3Z6x1nlqWRkwfZa7nfOFjm9tKoEPs+Dr0jEPw9IbMF86OA9YgYo/9 ru/ZkXNcd8fcXyD52yzb1wZywJ22mj4= -----END CERTIFICATE-----Generated at Wed Nov 5 21:11:01 2025 by rpki-client