$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a607d69-bb3d-3594-894d-0bca0366ca77.roa File: 9a607d69-bb3d-3594-894d-0bca0366ca77.roa (raw, json) Hash identifier: m5AeAWA42CJ+G2dEefpe6IVl/i3x8csvv65LOqD0X6k= Subject key identifier: AB:EC:84:14:EE:A7:70:CF:04:87:14:EB:47:3B:F2:50:B6:67:D7:3B Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BC2706FC9F73C48A52D5F3280 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a607d69-bb3d-3594-894d-0bca0366ca77.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 68.170.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:6f:c9:f7:3c:48:a5:2d:5f:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=4cf44de1-2c8d-4498-8c35-7e20a8952284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:d9:30:13:d8:93:82:e1:f1:b4:6c:0d:87: 11:5c:1b:42:4c:e6:44:fd:af:90:70:00:7f:fa:17: a3:01:d3:0a:3a:d5:f3:d8:fe:22:86:7b:32:80:1f: a3:ba:a6:05:3a:c6:39:bb:06:ac:2e:a0:61:70:8d: 2a:4b:5e:b5:1b:44:1e:89:18:31:96:0d:c7:fa:06: f5:5c:63:44:96:78:cd:27:3e:89:16:cd:c2:f7:8e: c6:f7:bc:ac:93:e1:f2:bd:f8:96:73:ff:87:32:16: 03:f6:9c:b7:01:22:4d:9d:9d:b8:93:42:76:c1:fb: 64:55:33:10:a4:03:11:81:bb:7f:92:c3:0b:60:0d: 30:4e:70:c2:83:e7:b6:30:31:2d:14:84:be:b3:76: b8:d9:9a:85:57:d4:b3:11:67:e5:32:c9:da:db:6f: 7c:98:65:eb:19:1c:64:7c:0f:bd:42:ed:3a:0c:dd: 4d:1e:5b:a7:9a:c9:1c:9a:83:18:63:99:fc:04:07: 2e:2b:22:94:73:12:1a:02:69:85:41:c9:a4:f2:be: 9d:f5:08:45:f9:c8:67:aa:4e:c3:44:e7:84:27:57: 46:6f:d0:09:1a:25:1c:57:54:94:c7:23:0f:f1:ee: 25:0a:4d:57:50:37:46:2a:8c:d4:92:28:4c:ac:55: 88:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EC:84:14:EE:A7:70:CF:04:87:14:EB:47:3B:F2:50:B6:67:D7:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/9a607d69-bb3d-3594-894d-0bca0366ca77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8e:ba:12:7a:a3:d2:00:e1:77:a9:eb:64:e1:da:c7:a3:62: f0:40:0f:68:31:4e:a1:f3:3d:c3:96:7c:17:85:7d:91:e3:ba: 6d:23:74:75:c0:af:74:00:6d:07:22:bf:5b:ae:5b:ff:7e:82: 16:dd:dc:11:e4:63:54:3c:93:4a:ff:68:a3:70:6c:40:93:1a: 65:10:ec:ff:66:cb:f3:f1:6a:bd:3e:55:7a:61:46:05:eb:64: d0:b7:38:59:b0:af:fa:88:8d:e9:75:09:8e:52:2b:06:ee:4a: 5e:b2:19:2b:38:23:bb:86:a7:eb:8f:09:80:ab:3e:50:d0:3a: ee:67:d8:f7:4d:a9:e6:2a:fb:f9:5e:b1:64:f2:54:dc:5a:91: ab:c8:ff:27:13:6f:1d:a7:fd:15:fe:b5:3a:8a:bc:c7:53:32: 6c:73:cb:a4:16:81:0e:8b:28:25:4e:b9:51:c7:ee:57:56:9d: 4e:e1:9d:ba:31:fa:9e:65:12:07:e0:8f:d0:ba:c4:bd:db:ae: fd:c7:59:d6:b6:83:53:e9:9a:1a:ac:78:88:88:79:b2:3d:fe: 68:06:25:1f:8a:7c:a7:98:91:46:bc:53:17:74:c4:ae:c0:15: c5:7e:84:50:53:e7:f5:28:bd:c5:d5:ba:20:93:be:54:f5:7b: 03:a4:bf:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcG/J9zxIpS1fMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk NGNmNDRkZTEtMmM4ZC00NDk4LThjMzUtN2UyMGE4OTUyMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoTZMBPYk4Lh8bRsDYcRXBtCTOZE/a+QcAB/ +hejAdMKOtXz2P4ihnsygB+juqYFOsY5uwasLqBhcI0qS161G0QeiRgxlg3H+gb1 XGNElnjNJz6JFs3C947G97ysk+HyvfiWc/+HMhYD9py3ASJNnZ24k0J2wftkVTMQ pAMRgbt/ksMLYA0wTnDCg+e2MDEtFIS+s3a42ZqFV9SzEWflMsna2298mGXrGRxk fA+9Qu06DN1NHlunmskcmoMYY5n8BAcuKyKUcxIaAmmFQcmk8r6d9QhF+chnqk7D ROeEJ1dGb9AJGiUcV1SUxyMP8e4lCk1XUDdGKozUkihMrFWIRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvshBTup3DPBIcU60c78lC2Z9c7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvOWE2MDdkNjktYmIzZC0z NTk0LTg5NGQtMGJjYTAzNjZjYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWOuhJ6o9IA4Xep62Th2sejYvBAD2gxTqHzPcOWfBeFfZHjum0jdHXA r3QAbQciv1uuW/9+ghbd3BHkY1Q8k0r/aKNwbECTGmUQ7P9my/Pxar0+VXphRgXr ZNC3OFmwr/qIjel1CY5SKwbuSl6yGSs4I7uGp+uPCYCrPlDQOu5n2PdNqeYq+/le sWTyVNxakavI/ycTbx2n/RX+tTqKvMdTMmxzy6QWgQ6LKCVOuVHH7ldWnU7hnbox +p5lEgfgj9C6xL3brv3HWda2g1PpmhqseIiIebI9/mgGJR+KfKeYkUa8Uxd0xK7A FcV+hFBT5/UovcXVuiCTvlT1ewOkv6g= -----END CERTIFICATE-----Generated at Wed Nov 5 21:11:12 2025 by rpki-client