$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/eb5e48ca-dbce-3f34-a6f7-30defde64147.roa File: eb5e48ca-dbce-3f34-a6f7-30defde64147.roa (raw, json) Hash identifier: whbPUbaO4BKBPyWix6XvZvTYEsB+d4cYRhhTxjITjPE= Subject key identifier: 40:C7:4C:C7:47:CD:7C:F4:48:F7:FA:36:11:0C:80:CE:99:3A:E1:5B Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584AE1968F2BCC248EA82D51D438 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/eb5e48ca-dbce-3f34-a6f7-30defde64147.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 26744 IP address blocks: 68.170.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:8f:2b:cc:24:8e:a8:2d:51:d4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=3c8afb11-f032-4a74-9014-b7819d3f58a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:6c:99:a8:fa:ab:12:48:4c:7c:bf:89:f6: 1e:5a:1e:6b:9d:d7:d4:6b:d1:9d:18:2c:13:f2:36: 48:af:5c:81:67:f9:2a:70:17:3e:0e:b4:fe:11:11: 06:b2:7c:ea:98:92:4b:8c:d1:0e:ac:f6:c4:22:71: 4a:56:17:1c:e5:cb:06:ea:99:9d:40:f2:ae:ee:ac: 22:c8:2b:0d:16:d5:a8:30:8a:9b:c0:8c:db:2d:b9: 91:cd:ce:49:51:c2:d1:e9:c6:bc:2b:1a:a7:84:8b: 6c:94:0d:5c:45:34:b0:01:70:90:fb:d3:fd:de:b3: 99:a5:57:98:2f:cc:68:9e:22:34:5d:7c:79:0b:89: 25:5c:bf:dc:18:5f:c9:ca:fb:2f:d5:76:90:5f:ff: 7e:d5:0c:f6:79:bb:98:2b:1f:9d:bc:4d:73:41:54: 07:a5:b5:69:f0:3d:16:11:5a:79:c1:84:26:2c:85: da:c9:5d:11:0e:56:eb:f3:db:ee:1f:77:2b:46:4c: 79:65:52:3d:08:ce:06:24:d1:48:58:07:99:d1:78: f9:be:16:05:ca:8e:ae:7b:74:28:53:8e:1c:6b:f9: d3:66:44:70:fe:49:57:85:8c:f0:1a:32:02:8c:50: 86:64:c8:a8:8c:d7:ef:24:ff:a7:7a:8a:37:5e:0f: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C7:4C:C7:47:CD:7C:F4:48:F7:FA:36:11:0C:80:CE:99:3A:E1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/eb5e48ca-dbce-3f34-a6f7-30defde64147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:14:f8:e5:c3:e6:06:52:6c:b3:c5:a1:f5:34:fb:29:a9:1b: cd:52:d1:a2:00:f0:54:f3:9d:4d:b6:60:03:e1:d0:37:f5:0a: 9c:c4:ec:67:90:9e:31:17:0e:d9:2b:de:0d:c1:f3:d1:8c:55: 46:70:48:2f:d4:b0:bd:b8:f9:90:fa:a0:21:d6:f4:bd:2f:bc: 32:f2:4c:46:43:40:03:fe:b2:4d:94:51:3e:14:d6:36:1a:6d: e0:68:b2:1e:61:69:6b:ad:36:4b:22:a8:06:ad:0c:b8:bf:ee: a7:78:51:a7:81:5d:eb:1e:8c:00:37:54:46:f9:e2:92:dd:d6: 00:0f:f5:e6:fa:69:78:42:82:2a:cc:3e:af:a8:79:26:15:46: bb:18:2d:56:7c:2b:60:fd:09:51:63:1d:3e:b6:d9:27:28:b4: f9:b3:af:76:59:83:d1:1a:5d:2f:31:d5:bf:12:b2:a0:d6:d3: fa:6b:af:c4:f8:13:21:fd:b9:67:51:71:28:fa:61:b1:74:a4: 30:95:d0:ab:e9:b5:ff:0f:40:b0:5f:43:36:ed:e9:bc:f9:ea: cd:f7:de:53:f8:f0:65:20:ed:26:16:52:8c:46:b3:07:3a:39: 23:4b:51:3d:86:91:e2:aa:88:9d:29:f6:e6:1a:6d:8c:e1:91: 32:44:f9:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlo8rzCSOqC1R1DgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk M2M4YWZiMTEtZjAzMi00YTc0LTkwMTQtYjc4MTlkM2Y1OGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl5smaj6qxJITHy/ifYeWh5rndfUa9GdGCwT 8jZIr1yBZ/kqcBc+DrT+EREGsnzqmJJLjNEOrPbEInFKVhcc5csG6pmdQPKu7qwi yCsNFtWoMIqbwIzbLbmRzc5JUcLR6ca8KxqnhItslA1cRTSwAXCQ+9P93rOZpVeY L8xoniI0XXx5C4klXL/cGF/Jyvsv1XaQX/9+1Qz2ebuYKx+dvE1zQVQHpbVp8D0W EVp5wYQmLIXayV0RDlbr89vuH3crRkx5ZVI9CM4GJNFIWAeZ0Xj5vhYFyo6ue3Qo U44ca/nTZkRw/klXhYzwGjICjFCGZMiojNfvJP+neoo3Xg9rVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDHTMdHzXz0SPf6NhEMgM6ZOuFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvZWI1ZTQ4Y2EtZGJjZS0z ZjM0LWE2ZjctMzBkZWZkZTY0MTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMU+OXD5gZSbLPFofU0+ympG81S0aIA8FTznU22YAPh0Df1CpzE7GeQ njEXDtkr3g3B89GMVUZwSC/UsL24+ZD6oCHW9L0vvDLyTEZDQAP+sk2UUT4U1jYa beBosh5haWutNksiqAatDLi/7qd4UaeBXesejAA3VEb54pLd1gAP9eb6aXhCgirM Pq+oeSYVRrsYLVZ8K2D9CVFjHT622ScotPmzr3ZZg9EaXS8x1b8SsqDW0/prr8T4 EyH9uWdRcSj6YbF0pDCV0Kvptf8PQLBfQzbt6bz56s333lP48GUg7SYWUoxGswc6 OSNLUT2GkeKqiJ0p9uYabYzhkTJE+Wc= -----END CERTIFICATE-----Generated at Sun Aug 24 06:56:42 2025 by rpki-client