$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa File: b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa (raw, json) Hash identifier: M1vKf+yqEijNfsx+StUn1nz/9P6ef+5ch1JlwEkNI4k= Subject key identifier: EE:DF:B9:88:0B:88:62:6E:F3:DB:60:32:63:ED:9C:F7:CB:2E:F4:3C Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584B0CDC14962D57DE7026114980 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 26744 IP address blocks: 68.170.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:14:96:2d:57:de:70:26:11:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=2a934620-112e-477f-993c-312b9790e550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:82:f2:6b:ba:5c:84:39:7a:d2:97:f9:47: 9b:62:c7:56:2b:39:c8:f1:0d:1a:f6:02:ca:f3:1e: 2b:4b:22:75:9a:12:a9:99:3b:4c:b7:1f:8b:75:02: 63:85:3b:40:73:e7:9d:fd:10:4b:e7:d1:ad:f1:06: 2b:4e:e0:53:72:93:0f:f0:70:7e:5e:e0:df:5f:e0: 48:66:ef:2d:e7:1a:fc:d2:3f:19:08:f0:f1:9a:ba: 68:22:f1:82:3d:18:56:18:34:f6:13:38:80:38:b5: 79:06:c5:38:e5:e4:b1:4c:e2:93:79:28:3b:8a:47: a4:67:b9:6d:1b:08:e4:5a:95:65:2f:b9:64:5d:1a: 12:a4:e3:5b:8c:85:be:6e:cf:85:89:34:34:9e:4a: b3:1b:70:c9:14:5c:c8:a7:df:71:dc:a9:a2:6e:6f: 25:40:d3:ee:67:f0:de:d4:3f:96:c2:22:ea:11:ca: 34:78:74:1b:a7:7a:94:ba:16:4f:90:0f:10:62:b1: bc:e9:3c:2c:b0:bd:c2:53:ca:63:8f:90:dc:43:bb: c3:dd:a6:b3:35:a9:c3:a8:a3:77:89:17:9d:4c:8f: a9:b8:94:df:16:5a:56:49:7e:08:07:c1:21:20:de: b5:49:1a:62:30:34:dd:0d:3d:cc:a3:ca:fd:f5:6a: 65:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DF:B9:88:0B:88:62:6E:F3:DB:60:32:63:ED:9C:F7:CB:2E:F4:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/b1dbdde8-b1d1-3241-bc69-a1f42d939141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0d:1c:a3:a9:56:3a:19:b8:65:95:99:60:3f:25:c7:06:bf: 60:a1:1a:57:b4:58:0e:e1:7a:97:cd:0d:f5:e5:00:50:19:f1: 4d:c1:a1:97:36:3b:92:11:4a:b4:31:22:60:23:a2:5d:e0:ef: df:c9:42:bb:1b:1d:5a:db:63:7d:28:ce:44:d1:ba:92:11:a9: 36:df:3f:8a:f4:4b:15:e8:0b:78:fc:64:83:00:33:de:80:6c: 08:c1:cc:83:74:fe:f2:67:e1:91:04:26:6a:81:31:ed:99:25: 27:20:34:00:7d:88:0d:2a:b4:c8:93:df:ab:81:a4:15:23:df: 6d:a8:64:7c:4c:30:eb:c5:61:7a:95:b8:e1:9c:86:fc:3b:a6: 80:6b:62:75:b5:d2:a2:3c:b2:f7:53:f8:1d:08:3d:55:2a:fc: bb:ef:7b:19:a1:aa:14:f5:13:08:8d:6b:32:86:13:81:47:9a: 4b:0d:ea:4b:1b:f3:2d:e2:fb:7e:69:40:59:50:15:bf:f2:cb: 7d:57:58:52:33:fb:f8:1f:76:3f:76:fe:b7:fd:1a:d2:4e:e7: 06:91:db:3d:94:5a:92:ff:a7:2e:47:79:33:9f:d7:38:3a:28: 31:6f:77:1c:5a:25:d7:64:b0:9f:96:5f:74:c2:c0:8c:e5:da: 38:e2:b9:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BSWLVfecCYRSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MmE5MzQ2MjAtMTEyZS00NzdmLTk5M2MtMzEyYjk3OTBlNTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLmC8mu6XIQ5etKX+UebYsdWKznI8Q0a9gLK 8x4rSyJ1mhKpmTtMtx+LdQJjhTtAc+ed/RBL59Gt8QYrTuBTcpMP8HB+XuDfX+BI Zu8t5xr80j8ZCPDxmrpoIvGCPRhWGDT2EziAOLV5BsU45eSxTOKTeSg7ikekZ7lt GwjkWpVlL7lkXRoSpONbjIW+bs+FiTQ0nkqzG3DJFFzIp99x3Kmibm8lQNPuZ/De 1D+WwiLqEco0eHQbp3qUuhZPkA8QYrG86TwssL3CU8pjj5DcQ7vD3aazNanDqKN3 iRedTI+puJTfFlpWSX4IB8EhIN61SRpiMDTdDT3Mo8r99WplewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7fuYgLiGJu89tgMmPtnPfLLvQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYjFkYmRkZTgtYjFkMS0z MjQxLWJjNjktYTFmNDJkOTM5MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACENHKOpVjoZuGWVmWA/JccGv2ChGle0WA7hepfNDfXlAFAZ8U3BoZc2 O5IRSrQxImAjol3g79/JQrsbHVrbY30ozkTRupIRqTbfP4r0SxXoC3j8ZIMAM96A bAjBzIN0/vJn4ZEEJmqBMe2ZJScgNAB9iA0qtMiT36uBpBUj322oZHxMMOvFYXqV uOGchvw7poBrYnW10qI8svdT+B0IPVUq/LvvexmhqhT1EwiNazKGE4FHmksN6ksb 8y3i+35pQFlQFb/yy31XWFIz+/gfdj92/rf9GtJO5waR2z2UWpL/py5HeTOf1zg6 KDFvdxxaJddksJ+WX3TCwIzl2jjiuRc= -----END CERTIFICATE-----Generated at Fri Sep 19 14:19:47 2025 by rpki-client