$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/78a41fcd-979d-309f-85fa-a1814d982c31.roa File: 78a41fcd-979d-309f-85fa-a1814d982c31.roa (raw, json) Hash identifier: DBelhI0QtovhoOkfQnUy+/pUAsll+XbDSxEf6t3mltY= Subject key identifier: DB:5D:79:3C:0A:13:1F:A7:03:8A:28:AB:07:49:33:36:14:FF:5E:3E Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584B0CDC14B59AE2F02563FC0680 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/78a41fcd-979d-309f-85fa-a1814d982c31.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 26744 IP address blocks: 68.170.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:14:b5:9a:e2:f0:25:63:fc:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=dcb9ea3a-c472-4e35-9aef-ea6cf4a7880b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:0d:56:bb:fc:85:1b:59:fb:5e:3d:6e:d6: 10:e4:22:8d:42:50:73:cf:ab:07:29:19:c2:7c:09: ff:89:28:03:2a:35:6b:77:45:a1:99:6e:72:0f:1f: 4d:68:ee:54:bd:80:71:7a:f8:36:3f:29:96:a5:e9: f8:e0:54:2e:f9:db:59:4f:56:e4:3c:66:fb:ae:17: 32:9f:a6:ce:78:50:d4:d2:4f:3c:5c:5b:58:85:31: cd:52:91:95:1e:72:56:2a:37:4c:92:c1:9c:20:67: 27:3f:62:8c:5a:05:f6:29:b4:a3:76:b2:d6:4e:aa: 35:5f:aa:f0:c1:b0:ec:d4:15:47:39:8c:11:1c:d8: 71:82:2b:76:55:71:97:79:2a:62:13:de:64:d1:bf: 32:07:cc:5f:5b:fb:b3:48:66:83:92:5b:3c:be:7d: fd:e0:e5:fe:a5:04:bc:10:32:25:7c:66:c8:45:be: b1:af:36:b1:1d:ab:3f:68:3b:88:43:b4:ef:b1:07: 20:82:41:db:a9:b6:9f:3c:38:74:f9:c1:1a:06:dc: d1:9c:65:70:8c:82:02:de:92:a5:83:d1:01:4e:43: 16:2d:16:ba:92:9f:ed:6e:90:f2:05:7e:45:41:70: 67:1c:c7:0a:60:c4:63:86:8d:30:25:dd:b7:7a:1c: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5D:79:3C:0A:13:1F:A7:03:8A:28:AB:07:49:33:36:14:FF:5E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/78a41fcd-979d-309f-85fa-a1814d982c31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f6:07:3c:a8:66:65:ac:38:0d:79:ad:82:b5:b3:1b:7a:64: 96:7b:ea:70:0c:36:92:8a:04:d7:a2:de:62:af:c6:32:47:27: 16:d6:50:f3:84:b5:1b:b9:7c:f1:c8:b1:b6:70:f3:cc:4c:8f: 04:ba:f1:93:fb:be:55:66:b1:3f:11:09:56:41:f2:24:26:6b: 04:fe:d0:63:9c:6b:fd:2d:a0:68:59:4b:f9:3f:35:1b:f1:a1: 7b:66:a1:93:09:cd:25:83:d9:48:36:fa:d7:9b:87:2b:aa:2c: 2b:bc:22:3a:a4:8c:55:61:b7:fd:5d:6d:df:e3:17:cd:e4:1a: 73:9c:d1:8a:2c:b7:98:c8:e6:3b:b1:f3:1b:cc:6b:33:32:95: 0f:78:fc:bf:08:b2:ff:df:26:69:66:6d:87:7f:14:7c:c8:57: e0:b2:9f:64:b4:ce:14:f5:ae:4c:3e:4e:f2:5f:11:ce:7b:ba: 10:25:23:4a:8c:77:44:01:60:74:1c:ff:c1:03:e8:bf:4d:db: 0a:98:bf:f0:be:b4:7a:b7:28:01:95:a1:35:28:da:37:53:6f: cd:83:96:f7:13:66:47:48:dc:fa:b6:23:42:48:69:0b:69:12: a4:34:56:e4:be:d2:58:5a:ea:38:e4:43:31:ca:3f:aa:de:67: b7:1d:94:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BS1muLwJWP8BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZGNiOWVhM2EtYzQ3Mi00ZTM1LTlhZWYtZWE2Y2Y0YTc4ODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMYNVrv8hRtZ+149btYQ5CKNQlBzz6sHKRnC fAn/iSgDKjVrd0WhmW5yDx9NaO5UvYBxevg2PymWpen44FQu+dtZT1bkPGb7rhcy n6bOeFDU0k88XFtYhTHNUpGVHnJWKjdMksGcIGcnP2KMWgX2KbSjdrLWTqo1X6rw wbDs1BVHOYwRHNhxgit2VXGXeSpiE95k0b8yB8xfW/uzSGaDkls8vn394OX+pQS8 EDIlfGbIRb6xrzaxHas/aDuIQ7TvsQcggkHbqbafPDh0+cEaBtzRnGVwjIIC3pKl g9EBTkMWLRa6kp/tbpDyBX5FQXBnHMcKYMRjho0wJd23ehyBFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtdeTwKEx+nA4ooqwdJMzYU/14+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNzhhNDFmY2QtOTc5ZC0z MDlmLTg1ZmEtYTE4MTRkOTgyYzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI72BzyoZmWsOA15rYK1sxt6ZJZ76nAMNpKKBNei3mKvxjJHJxbWUPOE tRu5fPHIsbZw88xMjwS68ZP7vlVmsT8RCVZB8iQmawT+0GOca/0toGhZS/k/NRvx oXtmoZMJzSWD2Ug2+tebhyuqLCu8IjqkjFVht/1dbd/jF83kGnOc0Yost5jI5jux 8xvMazMylQ94/L8Isv/fJmlmbYd/FHzIV+Cyn2S0zhT1rkw+TvJfEc57uhAlI0qM d0QBYHQc/8ED6L9N2wqYv/C+tHq3KAGVoTUo2jdTb82DlvcTZkdI3Pq2I0JIaQtp EqQ0VuS+0lha6jjkQzHKP6reZ7cdlKE= -----END CERTIFICATE-----Generated at Fri Sep 19 14:20:09 2025 by rpki-client