$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa02e257-c6fb-3776-8bcf-70c533addabd.roa File: aa02e257-c6fb-3776-8bcf-70c533addabd.roa (raw, json) Hash identifier: f2w/FqQaTLD/VnoqwfpLULYESUcV/MK0VpUkWCsZOtA= Subject key identifier: 73:47:65:71:7B:D1:44:3F:54:98:DB:5D:38:2E:0A:EA:9D:3F:D6:25 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BC2706F216393F15C4FB0B880 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa02e257-c6fb-3776-8bcf-70c533addabd.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 68.170.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:6f:21:63:93:f1:5c:4f:b0:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=df68d5fa-484e-4303-b600-94eacf5f9c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cd:48:b4:70:d0:74:81:f5:de:64:7b:00:bc: 09:b5:86:74:fc:2f:31:47:16:69:60:68:44:4f:9c: c4:3a:9a:8e:91:02:c1:1a:d0:bf:f6:00:64:8e:81: 46:ee:51:2f:25:7e:80:f7:c4:75:2f:d3:82:21:94: e8:7f:4a:cf:48:56:e5:b6:f0:bb:83:9e:db:9d:c5: 76:bb:c7:eb:f0:fa:77:f9:bc:f0:83:10:f4:1c:04: 04:a1:69:8e:5a:27:18:22:5c:ca:2a:48:30:c5:f7: 8a:07:f2:c7:98:9d:d0:ae:28:50:01:57:a0:8a:9f: 6d:f0:64:dd:b9:20:8f:ae:70:10:3d:58:11:8b:85: a1:44:47:b4:38:3c:af:4b:2f:07:57:f4:9d:54:ad: 05:8e:25:f7:8d:e4:54:1b:cc:0a:cf:ff:6b:15:e8: 9a:f3:9a:28:b8:70:32:ed:d8:8c:ee:69:fa:9e:f6: 60:e7:86:9f:34:21:36:51:f7:6d:5f:25:87:7d:5d: a1:67:8e:77:fb:fa:d6:24:1c:6e:e1:64:36:5f:14: 3f:ae:32:b3:5d:6a:fa:2d:b0:1c:cb:29:11:c6:d9: 72:e5:41:9f:fb:9a:44:cb:6b:c2:98:b2:5a:b7:e5: 4c:ad:bb:9b:02:1a:38:3d:3c:a0:bd:e4:14:fa:40: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:47:65:71:7B:D1:44:3F:54:98:DB:5D:38:2E:0A:EA:9D:3F:D6:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/aa02e257-c6fb-3776-8bcf-70c533addabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ee:d8:4d:23:0f:c4:87:b7:32:f8:1a:5c:52:c3:4c:d0:a8: 3d:87:20:25:2a:a0:6d:6a:eb:4e:27:e5:07:fa:f1:21:06:a7: e8:5a:2e:67:16:dc:8b:fa:90:69:73:be:00:af:ad:1f:72:fd: 7a:11:00:28:9a:a2:ae:30:f2:dd:fd:46:22:b7:a1:da:a8:e2: fa:2d:d7:77:10:e3:09:a4:e7:72:25:b9:c4:0d:90:7d:69:91: c0:b6:0b:85:7b:59:a4:2e:09:6e:e0:13:51:16:cd:8c:07:0d: d3:14:8f:e2:30:b3:ef:60:b3:6d:b6:ef:ea:72:2e:b2:10:2d: f5:ca:fa:89:f1:93:67:44:83:ac:2f:72:a1:89:4d:a4:16:9c: c4:cf:65:2e:91:b4:5b:9b:d7:e2:52:04:7d:ea:d8:0b:c3:4f: 50:3e:73:6b:9c:75:7a:92:75:35:57:95:9c:df:95:b3:8f:6c: 07:12:20:03:5b:dc:ec:62:4e:d5:b8:b1:22:38:f9:5e:6d:fa: f0:51:42:56:f0:d2:a7:a9:b2:a3:8e:fb:d5:0e:71:05:8c:80: 5b:8c:4b:c9:0a:6a:bd:47:6e:41:69:ba:05:46:c9:b3:c5:51: 4c:53:3e:0b:58:66:d1:f6:8c:0a:8a:fd:e5:b8:47:62:13:26: b5:a0:59:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcG8hY5PxXE+wuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZGY2OGQ1ZmEtNDg0ZS00MzAzLWI2MDAtOTRlYWNmNWY5Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic1ItHDQdIH13mR7ALwJtYZ0/C8xRxZpYGhE T5zEOpqOkQLBGtC/9gBkjoFG7lEvJX6A98R1L9OCIZTof0rPSFbltvC7g57bncV2 u8fr8Pp3+bzwgxD0HAQEoWmOWicYIlzKKkgwxfeKB/LHmJ3QrihQAVegip9t8GTd uSCPrnAQPVgRi4WhREe0ODyvSy8HV/SdVK0FjiX3jeRUG8wKz/9rFeia85oouHAy 7diM7mn6nvZg54afNCE2UfdtXyWHfV2hZ453+/rWJBxu4WQ2XxQ/rjKzXWr6LbAc yykRxtly5UGf+5pEy2vCmLJat+VMrbubAho4PTygveQU+kB0CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNHZXF70UQ/VJjbXTguCuqdP9YlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYWEwMmUyNTctYzZmYi0z Nzc2LThiY2YtNzBjNTMzYWRkYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTu2E0jD8SHtzL4GlxSw0zQqD2HICUqoG1q604n5Qf68SEGp+haLmcW 3Iv6kGlzvgCvrR9y/XoRACiaoq4w8t39RiK3odqo4vot13cQ4wmk53IlucQNkH1p kcC2C4V7WaQuCW7gE1EWzYwHDdMUj+Iws+9gs2227+pyLrIQLfXK+onxk2dEg6wv cqGJTaQWnMTPZS6RtFub1+JSBH3q2AvDT1A+c2ucdXqSdTVXlZzflbOPbAcSIANb 3OxiTtW4sSI4+V5t+vBRQlbw0qepsqOO+9UOcQWMgFuMS8kKar1HbkFpugVGybPF UUxTPgtYZtH2jAqK/eW4R2ITJrWgWaI= -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:33 2025 by rpki-client