$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d2b911c4-7437-3962-a12f-2cd415ff2cdf.roa File: d2b911c4-7437-3962-a12f-2cd415ff2cdf.roa (raw, json) Hash identifier: PitqwllyeQy4X4RlBmOs4JgMJuTHxzSOv31Km+GG+dk= Subject key identifier: 00:9D:29:0C:E3:94:8C:57:98:49:F7:60:30:0C:45:59:27:3B:5D:3A Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584B0CDC14CB49A030A261632A80 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d2b911c4-7437-3962-a12f-2cd415ff2cdf.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 26744 IP address blocks: 68.170.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:14:cb:49:a0:30:a2:61:63:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=11e5170d-125e-4fa4-9018-4edd21732236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:3d:a3:88:38:08:63:ce:e1:33:a7:8a:fe: 97:a4:e1:d6:88:81:2c:a3:35:05:7c:95:e7:15:db: d8:ae:eb:29:d6:0c:75:ff:28:58:43:f5:c8:27:2a: 92:b6:91:79:8d:2e:43:26:49:9b:96:d8:60:15:5a: 91:75:8b:17:1d:e7:fc:ce:82:79:a4:7b:36:9c:de: fb:a0:cf:40:66:b0:7b:52:2e:67:25:5e:86:b2:7a: c5:c2:13:f3:e8:55:85:40:af:9d:6e:86:66:5e:91: c3:ff:42:9b:92:75:61:cc:da:81:f6:71:98:73:a0: 60:96:1c:4e:38:72:29:f6:0b:2d:b7:b4:8d:52:ff: c3:19:fc:ad:a4:fe:15:58:2b:54:21:0d:aa:b2:f2: 48:89:93:71:fe:e6:ab:66:d4:fb:54:9c:5e:10:eb: 60:f0:a7:f6:ba:39:72:26:16:cd:13:40:3d:55:64: af:a7:cc:af:d6:76:76:c7:b6:8f:8f:03:18:9f:bc: 41:b0:38:3e:84:ac:42:7b:53:24:d3:11:b1:00:76: d9:8a:0f:3e:fb:0b:85:0e:00:02:e5:31:af:43:f3: 0c:4c:e7:22:b1:23:88:09:a8:0b:d1:97:0a:12:67: 04:21:35:e0:88:15:5e:68:f6:c1:91:07:68:92:f8: 67:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9D:29:0C:E3:94:8C:57:98:49:F7:60:30:0C:45:59:27:3B:5D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/d2b911c4-7437-3962-a12f-2cd415ff2cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:0b:c7:ce:db:90:45:3a:13:bc:da:29:6f:2a:94:50:5a:2d: a1:41:6c:95:b8:89:00:36:cd:2f:ba:b4:3c:6a:98:24:63:ab: a4:90:73:af:ec:8b:b1:c9:38:25:c9:02:1c:86:7a:5d:f2:01: 06:a0:51:f2:4c:93:61:9c:79:f2:c4:bc:ae:f2:ef:22:72:ce: e3:af:14:7e:3d:f3:2c:66:a1:cb:7a:ba:f7:55:9f:be:a2:8b: 55:c7:e6:1f:1e:17:7a:c6:d6:75:90:be:d3:74:a8:7f:b6:b9: c0:80:22:8a:f0:16:67:78:16:c4:c7:d0:2d:bf:b8:a8:78:52: b2:2e:e5:94:fc:53:69:93:16:60:1a:5c:45:c4:31:e8:46:78: f7:21:b9:18:8f:13:b7:1e:82:1f:f0:83:ba:80:7d:70:94:20: ed:bb:c5:20:1c:fc:97:ad:91:fb:c1:e6:04:a1:2a:05:1c:9f: 91:a4:24:4d:f9:32:5e:5e:40:75:8c:73:5c:48:3a:e3:75:bc: 11:55:df:1b:a7:a5:00:8d:ef:dc:d1:64:28:7a:14:4f:49:65: 15:31:50:92:57:c2:2f:aa:0e:a8:9d:dd:0d:6b:4b:db:67:4e: 85:4a:34:07:66:09:99:20:be:30:79:c3:61:94:29:b3:b2:c4: 2c:6c:64:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BTLSaAwomFjKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MTFlNTE3MGQtMTI1ZS00ZmE0LTkwMTgtNGVkZDIxNzMyMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKQ9o4g4CGPO4TOniv6XpOHWiIEsozUFfJXn FdvYrusp1gx1/yhYQ/XIJyqStpF5jS5DJkmblthgFVqRdYsXHef8zoJ5pHs2nN77 oM9AZrB7Ui5nJV6GsnrFwhPz6FWFQK+dboZmXpHD/0KbknVhzNqB9nGYc6BglhxO OHIp9gstt7SNUv/DGfytpP4VWCtUIQ2qsvJIiZNx/uarZtT7VJxeEOtg8Kf2ujly JhbNE0A9VWSvp8yv1nZ2x7aPjwMYn7xBsDg+hKxCe1Mk0xGxAHbZig8++wuFDgAC 5TGvQ/MMTOcisSOICagL0ZcKEmcEITXgiBVeaPbBkQdokvhnFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACdKQzjlIxXmEn3YDAMRVknO106MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvZDJiOTExYzQtNzQzNy0z OTYyLWExMmYtMmNkNDE1ZmYyY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYLx87bkEU6E7zaKW8qlFBaLaFBbJW4iQA2zS+6tDxqmCRjq6SQc6/s i7HJOCXJAhyGel3yAQagUfJMk2GcefLEvK7y7yJyzuOvFH498yxmoct6uvdVn76i i1XH5h8eF3rG1nWQvtN0qH+2ucCAIorwFmd4FsTH0C2/uKh4UrIu5ZT8U2mTFmAa XEXEMehGePchuRiPE7cegh/wg7qAfXCUIO27xSAc/JetkfvB5gShKgUcn5GkJE35 Ml5eQHWMc1xIOuN1vBFV3xunpQCN79zRZCh6FE9JZRUxUJJXwi+qDqid3Q1rS9tn ToVKNAdmCZkgvjB5w2GUKbOyxCxsZMU= -----END CERTIFICATE-----Generated at Fri Sep 19 15:56:58 2025 by rpki-client