$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa File: 37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa (raw, json) Hash identifier: f558Y5vh4yiZyDQtOov8LNmSTxMydHKYrjtbii0FJg4= Subject key identifier: 1E:8F:AA:F6:3F:29:27:E6:77:37:72:44:B0:95:7C:92:E9:D6:41:A4 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584AE1968E5A92B988B5716E6380 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 26744 IP address blocks: 68.170.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:8e:5a:92:b9:88:b5:71:6e:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=cc30bbc6-8823-4a00-b5ac-1d32917b39c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0b:fc:99:d3:0d:f2:0d:bd:f5:76:37:2c:09: 56:3a:d0:f9:02:3d:02:d9:5e:d2:49:21:59:55:78: b3:ba:29:2c:e3:cd:9e:61:27:67:cf:a5:4e:65:d2: 87:8d:ea:a8:68:14:51:bf:03:c4:b0:d6:c0:66:71: 61:ec:5f:83:04:bf:d0:3e:6f:3a:87:1d:01:cb:16: 36:16:71:ba:01:20:e7:1d:40:f2:fc:1f:a3:0f:4c: 0a:db:69:41:63:88:76:7c:d5:32:87:41:a0:e1:08: ca:ad:f6:f0:51:a4:5c:36:b0:ab:e9:a3:58:1e:11: 39:db:c8:8d:e1:b0:f4:ba:38:c6:1e:ac:17:af:ee: db:59:71:4a:e0:70:2e:f9:a6:f6:60:53:d6:3a:e3: 33:43:a9:6f:f3:a2:99:3d:d4:65:69:25:ec:79:13: e6:44:6a:a6:47:17:61:b4:75:ff:cd:2c:e1:92:90: 1a:e2:82:f1:a9:df:03:9a:5d:74:90:22:26:5f:4a: ff:a8:15:cc:d4:4f:6e:4b:21:eb:60:c5:92:5a:d6: 3c:b7:8a:82:fc:c1:24:6a:7d:37:d3:3d:56:e0:28: 3b:cb:61:70:a0:55:df:23:d9:e9:61:42:5e:d9:32: 22:97:d6:97:19:38:15:b7:fd:fe:5e:ca:59:05:ad: 46:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8F:AA:F6:3F:29:27:E6:77:37:72:44:B0:95:7C:92:E9:D6:41:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/37c28cd7-25f4-3373-b2f9-924b3fa5f188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:cd:6a:73:bd:77:af:f8:77:8d:c9:9a:d8:05:ef:a5:93:db: 80:22:ce:a7:c2:c9:b8:df:12:c5:c9:bf:ca:5e:7b:0f:5c:7f: ca:fd:da:f9:6c:f7:5c:27:d8:57:5b:22:48:67:61:e7:e8:dd: e1:3e:55:ed:ec:89:9f:88:9c:25:fc:ab:80:e9:52:be:25:2e: 0f:ce:25:73:07:01:86:17:3e:77:6d:84:dd:55:bd:c8:da:2c: e7:95:52:b6:e6:a7:f1:e1:2f:d9:50:6f:a6:bf:7e:fa:92:c0: 9c:7f:ad:49:3f:6b:37:31:60:3b:63:ee:69:31:a1:2b:f7:41: 4d:9b:02:b3:63:43:c5:b6:95:62:80:4f:b9:28:32:ec:27:4f: cc:15:47:e4:79:7f:2e:67:c0:b7:f8:fe:0d:7e:83:a4:53:99: 4d:88:93:2c:8d:b4:5a:42:dd:b7:ef:d4:02:94:5c:94:91:1c: 0e:3d:14:cb:70:ee:ba:ec:b9:17:d0:da:8f:5d:82:96:cf:5b: 49:04:d9:9b:40:ae:d8:83:9a:70:5d:a4:f1:81:ff:bb:28:37: c9:8d:e2:cd:ed:25:d9:fe:fe:1d:6b:34:78:2d:a0:58:1b:bd: 8d:d3:42:53:2e:ad:da:2c:78:ac:ab:65:21:1e:76:47:77:2c: 6f:4c:95:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlo5akrmItXFuY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk Y2MzMGJiYzYtODgyMy00YTAwLWI1YWMtMWQzMjkxN2IzOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwv8mdMN8g299XY3LAlWOtD5Aj0C2V7SSSFZ VXizuiks482eYSdnz6VOZdKHjeqoaBRRvwPEsNbAZnFh7F+DBL/QPm86hx0ByxY2 FnG6ASDnHUDy/B+jD0wK22lBY4h2fNUyh0Gg4QjKrfbwUaRcNrCr6aNYHhE528iN 4bD0ujjGHqwXr+7bWXFK4HAu+ab2YFPWOuMzQ6lv86KZPdRlaSXseRPmRGqmRxdh tHX/zSzhkpAa4oLxqd8Dml10kCImX0r/qBXM1E9uSyHrYMWSWtY8t4qC/MEkan03 0z1W4Cg7y2FwoFXfI9npYUJe2TIil9aXGTgVt/3+XspZBa1GwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6PqvY/KSfmdzdyRLCVfJLp1kGkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMzdjMjhjZDctMjVmNC0z MzczLWIyZjktOTI0YjNmYTVmMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3NanO9d6/4d43JmtgF76WT24AizqfCybjfEsXJv8peew9cf8r92vls 91wn2FdbIkhnYefo3eE+Ve3siZ+InCX8q4DpUr4lLg/OJXMHAYYXPndthN1Vvcja LOeVUrbmp/HhL9lQb6a/fvqSwJx/rUk/azcxYDtj7mkxoSv3QU2bArNjQ8W2lWKA T7koMuwnT8wVR+R5fy5nwLf4/g1+g6RTmU2IkyyNtFpC3bfv1AKUXJSRHA49FMtw 7rrsuRfQ2o9dgpbPW0kE2ZtArtiDmnBdpPGB/7soN8mN4s3tJdn+/h1rNHgtoFgb vY3TQlMurdoseKyrZSEedkd3LG9MlS8= -----END CERTIFICATE-----Generated at Sun Aug 24 07:13:55 2025 by rpki-client