$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/44d94397-7cc9-3de0-819a-3965f0d36265.roa File: 44d94397-7cc9-3de0-819a-3965f0d36265.roa (raw, json) Hash identifier: /z533zRdc6ggjHIlfkxZCfWpvhoU5Fn/m/pVkYmuKSI= Subject key identifier: 84:7B:01:AC:A5:2C:7E:1A:71:B3:EC:A5:87:88:B7:0C:91:7F:9E:CD Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584AE1968DCB77BD73E6B1ACC900 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/44d94397-7cc9-3de0-819a-3965f0d36265.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 26744 IP address blocks: 68.170.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:8d:cb:77:bd:73:e6:b1:ac:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=52115c9b-331d-46cc-b2d8-0d0ec998e5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:42:e3:58:3f:0d:b4:a6:df:80:7b:da:8a: fb:48:92:0b:45:c1:37:f6:e5:bc:5b:0f:04:dd:26: 3e:1b:29:03:ed:e1:70:a4:44:78:9a:de:01:e5:86: 31:d6:7d:c8:42:d8:d8:3a:e6:a4:37:d9:59:8f:98: c4:eb:8f:3b:62:b1:f0:3d:69:ad:22:e7:66:1a:c7: 56:7d:0f:87:ca:65:b0:54:21:e8:27:45:48:64:ef: f7:33:1b:54:f1:b3:88:3e:a6:cb:92:25:6f:b1:fc: 88:62:47:ff:a5:55:96:df:db:59:a7:1f:33:99:b0: a7:22:a4:79:82:cd:6c:eb:77:30:6b:30:f9:1b:3c: ec:51:42:74:3f:37:ef:f2:d8:21:dc:5e:52:03:14: 09:70:b2:91:98:3c:f6:79:6e:ec:90:dc:ec:40:d9: fc:a5:f0:b8:c9:91:b2:16:cf:fa:31:ce:e9:0c:1d: 7f:b2:9c:35:03:f6:1d:16:47:55:e6:45:16:a2:b0: 06:08:f2:e8:af:2a:11:1e:f5:e4:ee:bc:53:7b:ac: c3:2e:3c:a1:ce:e5:96:7b:f8:f2:46:a0:5f:46:49: 34:d9:8c:60:04:b7:b0:fc:8d:79:6d:b6:96:7e:5d: 20:62:e6:79:2b:37:05:4e:c3:cc:c5:fa:0c:53:f2: 15:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7B:01:AC:A5:2C:7E:1A:71:B3:EC:A5:87:88:B7:0C:91:7F:9E:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/44d94397-7cc9-3de0-819a-3965f0d36265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4b:f2:b9:77:8a:0f:a4:22:40:3f:d0:0b:f3:bd:f7:64:33: a5:f8:18:2e:69:11:62:19:24:3d:bb:12:0d:74:a5:0b:48:69: 39:65:21:46:4c:30:25:6d:44:c8:f3:5e:ee:9b:3e:81:70:07: 85:10:f5:05:8d:80:8c:95:33:4a:83:98:51:6f:33:bb:b6:b9: 30:5d:6d:58:dc:9e:50:18:01:38:b1:1f:b7:a6:5d:3c:8d:65: 20:9d:ed:0b:b7:eb:d2:bf:d5:56:35:e7:11:64:bc:e1:44:4a: 3e:2b:6d:8c:1a:8f:68:74:ce:20:6d:e7:f9:01:81:24:80:3c: c6:2b:23:e7:bf:24:0f:0b:f3:eb:c2:db:08:ed:c6:e7:f8:97: 7c:e4:a5:43:ba:43:49:5c:f3:7b:ed:7e:06:90:c5:84:a6:99: be:08:e2:6f:f7:81:0e:dc:c2:08:1b:ba:25:eb:fd:c7:f6:6a: 59:08:8a:6a:d6:d5:b7:a6:9e:54:e6:80:61:06:02:2b:04:42: 15:44:b1:55:6e:a3:fa:fb:a9:5f:8c:1d:cb:5b:02:1c:c4:9c: 27:2c:5e:36:95:bc:f6:f8:80:2e:54:c1:0b:c4:9c:f8:93:b4: 25:2e:78:bb:5a:39:14:2c:7b:12:8f:0a:73:5a:a5:73:5c:7f: 1d:3d:f1:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlo3Ld71z5rGsyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk NTIxMTVjOWItMzMxZC00NmNjLWIyZDgtMGQwZWM5OThlNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVNC41g/DbSm34B72or7SJILRcE39uW8Ww8E 3SY+GykD7eFwpER4mt4B5YYx1n3IQtjYOuakN9lZj5jE6487YrHwPWmtIudmGsdW fQ+HymWwVCHoJ0VIZO/3MxtU8bOIPqbLkiVvsfyIYkf/pVWW39tZpx8zmbCnIqR5 gs1s63cwazD5GzzsUUJ0Pzfv8tgh3F5SAxQJcLKRmDz2eW7skNzsQNn8pfC4yZGy Fs/6Mc7pDB1/spw1A/YdFkdV5kUWorAGCPLoryoRHvXk7rxTe6zDLjyhzuWWe/jy RqBfRkk02YxgBLew/I15bbaWfl0gYuZ5KzcFTsPMxfoMU/IVhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR7AaylLH4acbPspYeItwyRf57NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNDRkOTQzOTctN2NjOS0z ZGUwLTgxOWEtMzk2NWYwZDM2MjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxL8rl3ig+kIkA/0AvzvfdkM6X4GC5pEWIZJD27Eg10pQtIaTllIUZM MCVtRMjzXu6bPoFwB4UQ9QWNgIyVM0qDmFFvM7u2uTBdbVjcnlAYATixH7emXTyN ZSCd7Qu369K/1VY15xFkvOFESj4rbYwaj2h0ziBt5/kBgSSAPMYrI+e/JA8L8+vC 2wjtxuf4l3zkpUO6Q0lc83vtfgaQxYSmmb4I4m/3gQ7cwggbuiXr/cf2alkIimrW 1bemnlTmgGEGAisEQhVEsVVuo/r7qV+MHctbAhzEnCcsXjaVvPb4gC5UwQvEnPiT tCUueLtaORQsexKPCnNapXNcfx098TI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:12:05 2025 by rpki-client