$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8ac09314-89b2-3409-b2f6-0aba32132aab.roa File: 8ac09314-89b2-3409-b2f6-0aba32132aab.roa (raw, json) Hash identifier: 77v0uwu88mV/KTBKJsCsAi14bS5mlL3uyYHNOSIdHZo= Subject key identifier: 48:B1:61:14:F3:10:35:B3:AE:8C:D8:31:B9:FB:13:8B:61:7B:28:7E Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584AE1968E4825FA6F58A9A5C400 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8ac09314-89b2-3409-b2f6-0aba32132aab.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 26744 IP address blocks: 68.170.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:8e:48:25:fa:6f:58:a9:a5:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=89dd76a2-9075-46ee-934b-c02df3641077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:33:b1:55:29:bd:36:5a:03:46:cc:a3:56:2c: 92:93:00:0e:84:62:09:f0:e6:a5:b9:e8:9d:71:91: 24:c3:b1:58:29:ec:9d:da:05:26:7c:49:4c:33:b3: 29:7b:3b:1d:18:32:17:cd:42:83:56:89:f0:73:69: 3f:df:92:39:3b:97:34:eb:ea:50:49:18:0a:5a:41: da:83:47:dc:a4:29:e7:1c:9d:0c:c6:ec:4b:fe:fe: 34:f5:54:ab:bc:11:cc:32:0c:f1:28:8b:ea:63:ac: c8:83:9b:ab:22:d8:29:bf:c7:db:27:10:35:f5:c9: 62:03:07:ad:4b:c9:ae:28:96:5a:b9:72:28:30:9c: 46:b2:ba:35:be:0a:12:e6:bc:bd:13:4a:e7:74:4f: a6:f4:58:76:3f:68:8c:ca:3f:5d:9c:f5:8a:59:7e: f3:02:93:72:fa:d2:2e:34:61:29:fc:9a:34:e4:c5: b1:cd:e4:dc:5a:58:e7:6d:fa:40:34:ab:3e:24:7d: 1c:5a:35:25:27:d1:d6:f3:c7:ce:64:72:2e:f2:99: 3f:54:6c:15:18:e8:96:a9:dd:f8:73:d2:af:2f:d8: 8d:32:a0:19:45:33:5a:c2:a8:55:3b:67:d7:3c:67: 61:ee:50:bb:71:2a:eb:92:64:22:f7:bd:33:41:55: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B1:61:14:F3:10:35:B3:AE:8C:D8:31:B9:FB:13:8B:61:7B:28:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/8ac09314-89b2-3409-b2f6-0aba32132aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:17:31:ec:15:d8:4f:5d:45:f0:d2:de:6b:a0:db:56:30:ea: 90:c1:2c:8b:ea:db:eb:9b:ab:17:a3:82:b0:04:f2:19:89:ba: 86:26:fc:e2:9e:0c:11:a1:4c:90:ce:0c:b8:d4:75:e6:b7:06: a0:45:1f:d2:19:7f:b3:1b:21:2c:5d:b3:47:d9:ab:c8:bf:a7: ad:ca:28:43:1a:88:35:a1:59:aa:eb:2c:97:0a:cd:9a:2f:5e: fe:d4:3d:1e:29:63:c6:08:d3:67:73:05:85:f1:0f:0a:6d:98: 01:df:17:ad:68:6e:68:8e:18:c8:e6:4d:21:2a:8c:68:1d:2c: 47:c3:fc:0e:ed:70:1f:60:9d:5b:c5:87:c8:f9:37:73:e9:80: e9:6e:3f:9a:c9:1a:c4:d1:a7:62:77:39:21:2a:c5:a4:eb:c6: 7c:fa:5a:db:77:2c:ff:11:7b:5a:4b:49:70:53:44:22:9b:6b: 94:1d:17:1e:54:a9:3c:86:b0:19:f3:46:15:a1:91:da:eb:80: f9:ba:f4:c6:4e:12:29:b0:ab:83:5d:61:23:41:32:53:f2:20: 03:8d:6a:d5:d9:4a:81:ab:56:60:dc:14:6b:d8:76:e7:80:fe: 90:2b:e8:5d:e8:82:08:79:b5:eb:5b:f2:bf:82:ce:44:79:fe: 7b:b1:af:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlo5IJfpvWKmlxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ODlkZDc2YTItOTA3NS00NmVlLTkzNGItYzAyZGYzNjQxMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjOxVSm9NloDRsyjViySkwAOhGIJ8Oalueid cZEkw7FYKeyd2gUmfElMM7MpezsdGDIXzUKDVonwc2k/35I5O5c06+pQSRgKWkHa g0fcpCnnHJ0MxuxL/v409VSrvBHMMgzxKIvqY6zIg5urItgpv8fbJxA19cliAwet S8muKJZauXIoMJxGsro1vgoS5ry9E0rndE+m9Fh2P2iMyj9dnPWKWX7zApNy+tIu NGEp/Jo05MWxzeTcWljnbfpANKs+JH0cWjUlJ9HW88fOZHIu8pk/VGwVGOiWqd34 c9KvL9iNMqAZRTNawqhVO2fXPGdh7lC7cSrrkmQi970zQVXayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEixYRTzEDWzrozYMbn7E4theyh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvOGFjMDkzMTQtODliMi0z NDA5LWIyZjYtMGFiYTMyMTMyYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYXMewV2E9dRfDS3mug21Yw6pDBLIvq2+ubqxejgrAE8hmJuoYm/OKe DBGhTJDODLjUdea3BqBFH9IZf7MbISxds0fZq8i/p63KKEMaiDWhWarrLJcKzZov Xv7UPR4pY8YI02dzBYXxDwptmAHfF61obmiOGMjmTSEqjGgdLEfD/A7tcB9gnVvF h8j5N3PpgOluP5rJGsTRp2J3OSEqxaTrxnz6Wtt3LP8Re1pLSXBTRCKba5QdFx5U qTyGsBnzRhWhkdrrgPm69MZOEimwq4NdYSNBMlPyIAONatXZSoGrVmDcFGvYdueA /pAr6F3oggh5tetb8r+CzkR5/nuxr70= -----END CERTIFICATE-----Generated at Sun Aug 24 07:13:57 2025 by rpki-client