$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa File: 2c227bfd-f08b-398c-9969-3fff99fa4025.roa (raw, json) Hash identifier: /oK292sABrSuW1er1f5JIimU0vIyGuKhnX81ytEXa0s= Subject key identifier: 0F:01:4D:8E:0D:CD:18:D6:03:45:55:78:F8:16:60:B6:F0:8B:7F:7B Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F4328584B9E07ACD6F8A5F0431E1868A0 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 397444 IP address blocks: 208.68.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ac:d6:f8:a5:f0:43:1e:18:68:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=bb6c3141-692f-4c30-b432-676b86f6a7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3a:3d:41:ac:53:48:d9:df:b8:fb:33:e8:39: 3c:12:cf:71:5e:76:94:24:3b:6d:31:ca:37:76:8e: bc:1f:bb:c6:1f:b7:45:36:fa:03:2f:9d:45:46:e5: e8:38:7d:24:f7:f6:55:4b:5a:75:b2:3c:f6:9b:4a: 4a:b2:bc:a0:34:41:8e:5f:2c:fb:e6:0e:ed:83:e6: 40:74:af:4d:ef:66:e5:9f:0a:bb:e8:98:75:8b:59: 57:bc:2e:e5:82:15:ba:69:5a:56:1c:cf:ac:80:88: 58:59:46:a6:b3:c8:16:51:8a:2d:a1:c3:ab:5d:ba: 75:16:36:11:97:0a:38:d7:8a:b8:e8:60:87:3b:39: 7b:c9:80:27:57:24:bf:d4:ef:84:3f:9f:fc:06:79: 46:38:6b:04:e8:47:78:ac:f1:6f:35:5b:d0:3d:b8: fb:c1:2e:1b:8a:ed:36:5b:35:05:37:65:12:74:e5: aa:22:e9:04:9b:a2:a4:ac:91:ce:ac:a2:9e:ba:52: 99:4e:9e:7f:52:06:5b:0f:13:62:96:00:18:4f:5f: 17:20:b8:1d:e2:2f:b9:ca:5a:94:16:94:31:b2:b2: e1:c0:db:04:e6:e4:16:30:95:f1:a5:13:c7:d3:9f: 3d:77:96:1b:b4:e3:89:9f:05:f2:c1:58:e4:4a:28: 05:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:01:4D:8E:0D:CD:18:D6:03:45:55:78:F8:16:60:B6:F0:8B:7F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv4: 208.68.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9b:ae:2c:a7:d0:14:45:7d:98:9f:27:83:73:17:1c:0b:4d: ff:f2:2b:39:55:6d:cf:a8:1d:a0:c8:2e:34:74:f7:e8:b3:b8: 49:1e:c7:89:71:65:02:c0:88:07:ac:86:26:e8:ea:c5:ac:aa: af:25:b1:9d:4c:1c:9a:ed:79:a6:d6:60:45:52:d5:e6:c3:bf: 36:be:de:83:be:d1:6d:63:80:33:f1:2f:0e:21:c7:c7:a4:72: 68:3d:69:bf:4a:80:99:47:7d:7b:92:0c:9a:45:36:16:99:04: 55:76:f0:12:dc:aa:cb:1a:c4:e5:cd:26:7f:16:da:8f:86:dc: c3:c0:0e:48:71:41:9f:f6:b9:1f:93:10:7a:8a:97:d9:09:da: 70:7a:3f:86:ef:d8:8b:e9:42:52:b0:8c:6e:81:6a:65:03:95: c0:65:3d:ba:4b:9e:94:1d:84:19:c5:b2:0e:ee:1e:22:22:bb: 27:53:fc:04:6e:2b:87:03:81:ae:51:3b:64:d4:06:ba:9c:2d: a7:f9:70:62:54:4b:3d:90:37:5e:e4:51:d0:64:63:11:6f:1e: 97:db:ae:61:41:1d:e8:d7:54:88:89:ea:a6:f9:78:cf:dd:17: 01:29:73:6e:59:12:79:b7:93:9d:2b:bb:29:32:ae:4e:45:15: 6f:d0:8b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6zW+KXwQx4YaKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YmI2YzMxNDEtNjkyZi00YzMwLWI0MzItNjc2Yjg2ZjZhN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDo9QaxTSNnfuPsz6Dk8Es9xXnaUJDttMco3 do68H7vGH7dFNvoDL51FRuXoOH0k9/ZVS1p1sjz2m0pKsrygNEGOXyz75g7tg+ZA dK9N72blnwq76Jh1i1lXvC7lghW6aVpWHM+sgIhYWUams8gWUYotocOrXbp1FjYR lwo414q46GCHOzl7yYAnVyS/1O+EP5/8BnlGOGsE6Ed4rPFvNVvQPbj7wS4biu02 WzUFN2USdOWqIukEm6KkrJHOrKKeulKZTp5/UgZbDxNilgAYT18XILgd4i+5ylqU FpQxsrLhwNsE5uQWMJXxpRPH0589d5YbtOOJnwXywVjkSigFpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8BTY4NzRjWA0VVePgWYLbwi397MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvMmMyMjdiZmQtZjA4Yi0z OThjLTk5NjktM2ZmZjk5ZmE0MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EQGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSbriyn0BRFfZifJ4NzFxwLTf/yKzlVbc+oHaDILjR09+izuEkex4lx ZQLAiAeshibo6sWsqq8lsZ1MHJrteabWYEVS1ebDvza+3oO+0W1jgDPxLw4hx8ek cmg9ab9KgJlHfXuSDJpFNhaZBFV28BLcqssaxOXNJn8W2o+G3MPADkhxQZ/2uR+T EHqKl9kJ2nB6P4bv2IvpQlKwjG6BamUDlcBlPbpLnpQdhBnFsg7uHiIiuydT/ARu K4cDga5RO2TUBrqcLaf5cGJUSz2QN17kUdBkYxFvHpfbrmFBHejXVIiJ6qb5eM/d FwEpc25ZEnm3k50ruykyrk5FFW/Qi8k= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:56 2025 by rpki-client