$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa File: caa81f92-b27f-32a1-bbda-f61104514b4d.roa (raw, json) Hash identifier: gChOT/V5/YFRQnHQQ/9dzi/YLJ/w1SmPVn+Krd0AqvM= Subject key identifier: 98:1F:90:0C:DB:3B:52:95:73:C0:1E:77:AD:04:53:BA:0B:E5:6B:CF Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BC2706ECC45F841322F9B6D80 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 68.170.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:6e:cc:45:f8:41:32:2f:9b:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=cefcc844-00a4-43bb-ae87-b96217be8caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:67:80:8b:f7:51:1e:f0:4d:c2:8a:b5:fe: 43:b8:e2:d9:90:e8:f9:1f:ee:2a:dc:c4:01:48:27: 4e:84:48:cf:31:67:65:31:4c:67:c2:29:fe:d0:03: e5:88:9d:6a:a9:69:57:4b:6e:c0:dc:0f:6e:47:2c: 27:70:8e:57:2e:c2:60:b8:6a:56:f3:a4:93:9f:41: 9b:55:a1:58:10:05:3c:01:ab:bf:a1:c4:97:e2:ac: bd:c3:69:6b:8f:59:27:80:52:77:b5:24:82:07:62: 6a:29:92:d2:b5:5b:f1:cb:67:7e:37:05:f7:30:ee: 75:81:5d:87:4f:44:73:8d:5a:fa:9a:7e:2f:53:33: a9:ac:29:a6:e6:62:95:cc:b2:2c:0c:b0:d3:c4:73: 9f:c2:61:dc:eb:bb:a2:d9:fa:1d:21:db:9b:6b:75: ef:38:65:28:75:da:40:d6:70:ff:ad:dc:f3:3f:be: a4:25:c4:0b:1a:96:b5:06:2c:8c:94:9c:dc:ff:fd: 0e:bd:23:63:43:0c:66:10:57:f7:ad:88:51:d7:83: 98:a1:44:28:23:9f:aa:aa:26:84:c0:a8:bc:fd:40: ee:58:b1:94:37:15:65:2f:3f:04:36:cc:3f:63:cc: e7:c7:43:54:e5:74:96:01:2d:ed:72:1b:41:76:80: a2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1F:90:0C:DB:3B:52:95:73:C0:1E:77:AD:04:53:BA:0B:E5:6B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/caa81f92-b27f-32a1-bbda-f61104514b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:46:03:43:64:d7:52:88:12:16:0d:b4:91:b1:9a:3e:b0:d5: 60:a3:44:80:3d:99:0f:ff:e2:8a:e8:ee:55:1c:d8:98:3e:3e: df:df:39:1f:65:e8:ea:46:9b:fc:44:dc:a6:df:4a:47:82:72: b3:51:f4:9d:20:7b:cf:a7:ef:2d:70:bb:25:98:b0:b4:89:ab: 48:33:55:63:81:7f:e5:ca:4b:ce:f3:25:2d:90:e1:c0:09:f6: 9b:75:01:36:d5:be:79:ff:d6:c7:55:5c:99:1f:95:25:36:3a: 0a:4d:fb:1b:c5:26:2d:4f:d9:21:1b:3a:f5:8c:45:57:b9:2d: ca:08:7b:38:b8:d9:3b:b3:59:1d:05:4a:0e:37:cd:32:8d:78: ea:3b:02:c7:27:2f:eb:6a:54:7a:94:5f:a4:92:e4:b7:2c:af: d2:26:3b:65:c3:42:d5:3c:d9:38:a3:97:dd:97:7e:f7:2e:43: 24:96:17:58:30:74:ef:67:14:70:ff:05:c5:36:dd:a0:b4:92: 30:15:f1:f6:07:f2:a8:20:28:3b:37:d5:ed:b9:a5:9a:1e:23: 39:b9:0f:4c:f4:25:86:09:63:70:72:1b:9a:c7:6c:2b:78:04: e9:ff:90:c0:b1:5a:a1:88:21:24:ff:18:6c:36:21:75:57:b8: ce:34:43:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcG7MRfhBMi+bbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk Y2VmY2M4NDQtMDBhNC00M2JiLWFlODctYjk2MjE3YmU4Y2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunlngIv3UR7wTcKKtf5DuOLZkOj5H+4q3MQB SCdOhEjPMWdlMUxnwin+0APliJ1qqWlXS27A3A9uRywncI5XLsJguGpW86STn0Gb VaFYEAU8Aau/ocSX4qy9w2lrj1kngFJ3tSSCB2JqKZLStVvxy2d+NwX3MO51gV2H T0RzjVr6mn4vUzOprCmm5mKVzLIsDLDTxHOfwmHc67ui2fodIduba3XvOGUoddpA 1nD/rdzzP76kJcQLGpa1BiyMlJzc//0OvSNjQwxmEFf3rYhR14OYoUQoI5+qqiaE wKi8/UDuWLGUNxVlLz8ENsw/Y8znx0NU5XSWAS3tchtBdoCi4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgfkAzbO1KVc8Aed60EU7oL5WvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvY2FhODFmOTItYjI3Zi0z MmExLWJiZGEtZjYxMTA0NTE0YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKr6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxGA0Nk11KIEhYNtJGxmj6w1WCjRIA9mQ//4oro7lUc2Jg+Pt/fOR9l 6OpGm/xE3KbfSkeCcrNR9J0ge8+n7y1wuyWYsLSJq0gzVWOBf+XKS87zJS2Q4cAJ 9pt1ATbVvnn/1sdVXJkflSU2OgpN+xvFJi1P2SEbOvWMRVe5LcoIezi42TuzWR0F Sg43zTKNeOo7AscnL+tqVHqUX6SS5Lcsr9ImO2XDQtU82Tijl92XfvcuQySWF1gw dO9nFHD/BcU23aC0kjAV8fYH8qggKDs31e25pZoeIzm5D0z0JYYJY3ByG5rHbCt4 BOn/kMCxWqGIIST/GGw2IXVXuM40Q5w= -----END CERTIFICATE-----Generated at Wed Nov 5 22:32:09 2025 by rpki-client