$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa File: 2c227bfd-f08b-398c-9969-3fff99fa4025.roa (raw, json) Hash identifier: GxKp9B1o0zEDEzQgfF/MuqrtHr7E9PfIvQotkD0JfpQ= Subject key identifier: 1B:4E:4B:16:11:56:11:62:72:00:F9:E3:C4:DC:FC:EC:A1:A9:67:FD Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F4328584F82ADB253A99AC4117065FCC0 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 397444 IP address blocks: 208.68.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:b2:53:a9:9a:c4:11:70:65:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=b24dfe94-04dd-4117-83d2-3f7d482c20c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:5a:7d:86:4a:f9:1d:e2:4f:9d:42:1c:b8: 65:ac:72:2c:50:94:c1:77:34:3b:ac:64:45:b6:e4: d7:ca:c3:9b:f1:46:9c:71:06:0c:e1:1d:41:3d:f7: cd:73:2d:5b:83:17:3b:f6:0e:01:bd:5a:e7:13:c0: 51:08:02:b5:96:74:8c:b4:07:3f:0b:64:61:07:65: c1:88:85:d2:c4:1c:2f:dc:37:c4:de:43:e4:4e:b9: 14:fb:0b:27:50:e4:70:c5:d7:4c:ce:73:54:4c:9c: 04:7a:74:8f:d5:bd:3d:19:d3:e4:eb:ec:da:0d:a0: e6:c2:3b:d0:99:cb:ab:c7:57:9e:86:d7:71:8e:3e: 77:dc:9c:5e:9c:3e:24:54:b1:d6:d0:99:26:6a:28: 78:68:5b:63:9d:dc:ef:73:e5:41:da:e0:88:02:ab: 7c:97:92:ac:2d:60:a2:e5:d3:30:f7:db:80:93:78: 86:33:ab:00:c6:ff:c0:23:53:9c:80:c7:da:5b:b6: 48:3d:c4:0a:68:72:0f:58:03:bb:75:d4:73:1c:5a: d9:53:71:79:22:34:26:c5:5a:7d:84:2e:64:8c:88: 15:06:28:78:f0:94:7b:00:d9:cd:61:67:46:89:35: 0b:13:c1:3a:07:03:87:37:24:b2:c0:e3:5d:99:2d: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4E:4B:16:11:56:11:62:72:00:F9:E3:C4:DC:FC:EC:A1:A9:67:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv4: 208.68.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:04:d2:03:66:bb:b5:fe:57:ff:2a:cf:5d:a5:25:be:f7:29: af:b0:a4:e9:53:f2:af:b1:56:aa:84:26:d0:e8:34:5a:c5:08: 82:a4:33:2a:78:10:07:04:ca:2a:35:c0:b7:99:59:db:4e:57: 5f:fc:ed:b7:03:d9:27:62:5d:00:c4:0d:cb:10:fa:25:37:65: b3:68:f9:ba:6f:69:24:0a:de:a8:d3:32:b0:23:01:3a:ed:be: ce:80:49:da:50:0e:45:dc:6d:d9:e2:f0:83:5f:83:70:a3:bc: 00:92:2b:54:d0:23:59:1a:f1:37:e3:a7:f5:64:bf:08:84:5a: 09:b9:00:7b:00:ba:aa:c5:54:c7:29:f6:ad:46:f4:2e:33:2d: b5:a8:24:c0:fe:c2:41:23:00:5d:11:b7:cc:b5:8d:4e:02:64: 5b:b4:c5:47:af:4f:8f:f9:8a:2b:26:cc:8f:87:f5:5e:a7:9d: de:c2:55:31:03:c9:df:c4:8d:8e:7b:ca:92:bb:68:b0:ee:c1: 6e:ba:bc:db:02:81:9e:cb:6a:f3:21:42:b9:43:09:13:5b:c2: a0:30:00:7b:62:5d:3d:51:57:6c:a5:43:67:e7:b7:4e:06:4c: 2c:62:07:ac:8a:9c:db:e5:fc:67:41:7b:a0:13:f6:4c:89:60: df:4b:45:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrbJTqZrEEXBl/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk YjI0ZGZlOTQtMDRkZC00MTE3LTgzZDItM2Y3ZDQ4MmMyMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6FafYZK+R3iT51CHLhlrHIsUJTBdzQ7rGRF tuTXysOb8UaccQYM4R1BPffNcy1bgxc79g4BvVrnE8BRCAK1lnSMtAc/C2RhB2XB iIXSxBwv3DfE3kPkTrkU+wsnUORwxddMznNUTJwEenSP1b09GdPk6+zaDaDmwjvQ mcurx1eehtdxjj533JxenD4kVLHW0Jkmaih4aFtjndzvc+VB2uCIAqt8l5KsLWCi 5dMw99uAk3iGM6sAxv/AI1OcgMfaW7ZIPcQKaHIPWAO7ddRzHFrZU3F5IjQmxVp9 hC5kjIgVBih48JR7ANnNYWdGiTULE8E6BwOHNySywONdmS0PDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtOSxYRVhFicgD548Tc/OyhqWf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvMmMyMjdiZmQtZjA4Yi0z OThjLTk5NjktM2ZmZjk5ZmE0MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EQGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUE0gNmu7X+V/8qz12lJb73Ka+wpOlT8q+xVqqEJtDoNFrFCIKkMyp4 EAcEyio1wLeZWdtOV1/87bcD2SdiXQDEDcsQ+iU3ZbNo+bpvaSQK3qjTMrAjATrt vs6ASdpQDkXcbdni8INfg3CjvACSK1TQI1ka8Tfjp/VkvwiEWgm5AHsAuqrFVMcp 9q1G9C4zLbWoJMD+wkEjAF0Rt8y1jU4CZFu0xUevT4/5iismzI+H9V6nnd7CVTED yd/EjY57ypK7aLDuwW66vNsCgZ7LavMhQrlDCRNbwqAwAHtiXT1RV2ylQ2fnt04G TCxiB6yKnNvl/GdBe6AT9kyJYN9LRVk= -----END CERTIFICATE-----Generated at Thu Nov 5 04:53:55 2026 by rpki-client