$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa File: fd852497-bc9a-3b30-ab74-cc2c337021d5.roa (raw, json) Hash identifier: NOipxxORZNFZxTKEGD2HF/2xvw3ETmj7O/+r5vFm5Nk= Subject key identifier: EF:5B:E8:DE:AD:63:0D:E8:73:A8:52:59:33:66:14:9C:A2:59:35:91 Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F4328584F4973E7C6AC52F3C00BE6A064 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395853 IP address blocks: 208.68.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e7:c6:ac:52:f3:c0:0b:e6:a0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4aa385af-b207-4c3c-8f0d-a70b55785fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:e9:ae:98:b9:be:33:13:b4:8f:60:58:6e: 0b:04:da:76:81:be:76:9e:b7:21:61:60:fc:a8:fa: f9:8e:ac:80:fa:bd:11:56:29:eb:7d:bd:a2:9c:1f: 9b:c3:8d:0f:a7:b2:db:4c:7a:b3:dc:c0:e8:5f:90: 82:e7:49:0e:00:59:48:cc:32:25:38:e1:0f:9a:de: d2:1a:2d:99:45:b4:87:35:be:e6:a1:9e:8c:38:86: 15:61:72:c7:7a:ba:5c:89:dd:1b:b7:8d:8e:64:cd: 3d:ee:08:1c:cb:6a:a3:da:4b:62:a4:e3:90:7d:e6: 87:97:97:e4:01:e4:79:23:f4:b4:fd:6c:0e:db:fe: 4f:f4:24:78:ed:99:9b:92:f5:6d:96:f2:77:8c:b1: ec:99:2b:18:96:c5:42:b8:fa:cd:e7:77:20:b9:39: 5d:8c:9c:8e:89:6f:72:71:b4:6e:d4:1d:06:b5:d4: c7:87:ca:ca:b0:b3:9d:d9:79:b0:9d:4b:17:a4:08: fa:d7:5e:f7:ac:ff:f8:7a:3c:01:3d:56:e0:bc:9a: 79:51:ec:ab:c4:09:1f:b3:5e:78:5b:11:e6:2d:b8: b5:30:34:87:f7:2e:f2:6a:c8:00:00:31:a3:0e:06: 52:1a:e5:98:13:de:26:44:7e:8f:f8:bc:ae:f9:ab: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5B:E8:DE:AD:63:0D:E8:73:A8:52:59:33:66:14:9C:A2:59:35:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/fd852497-bc9a-3b30-ab74-cc2c337021d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv4: 208.68.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:63:f5:ee:36:99:f0:3f:00:6a:7e:ab:10:01:45:f8:64:be: f3:08:e3:f0:61:d7:96:c0:1f:01:1d:fb:0b:dd:f5:cc:8c:27: dc:ee:5a:d8:66:9a:e3:83:5c:b3:15:9b:4a:93:34:9d:cf:63: eb:e0:89:51:19:1b:dc:43:a4:5b:d6:f3:19:18:e0:5f:cb:6e: 08:31:41:ff:25:63:36:22:e4:a6:fd:09:a9:d1:3b:32:89:6a: 7c:64:51:a0:53:d4:a7:14:5b:7d:40:fb:ab:b2:20:bc:29:87: 34:66:82:99:e3:01:23:25:eb:8d:09:41:28:33:97:ce:2e:6f: 13:7d:e6:19:59:c7:de:bc:4a:14:26:aa:d3:b1:f5:20:fa:20: 9f:dc:b6:6e:6f:58:b8:d8:68:99:5e:03:c0:03:33:1e:dd:8e: 92:ce:8a:65:43:da:d5:5b:ef:c1:89:c3:10:ac:28:b1:ce:70: b8:2c:ca:2c:e3:d0:23:a9:d3:23:49:f1:0e:60:08:c7:68:62: a7:ec:99:38:6a:0c:db:01:c1:d0:64:90:96:20:55:e0:c3:3a: f3:98:e1:95:7e:42:70:0f:ae:38:13:27:ac:d1:5b:43:e4:a6: a4:a7:e3:9c:67:2b:d6:9e:d0:ab:ab:59:10:e9:d5:91:d7:6a: 08:6c:c8:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+fGrFLzwAvmoGQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGFhMzg1YWYtYjIwNy00YzNjLThmMGQtYTcwYjU1Nzg1ZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNDprpi5vjMTtI9gWG4LBNp2gb52nrchYWD8 qPr5jqyA+r0RVinrfb2inB+bw40Pp7LbTHqz3MDoX5CC50kOAFlIzDIlOOEPmt7S Gi2ZRbSHNb7moZ6MOIYVYXLHerpcid0bt42OZM097ggcy2qj2ktipOOQfeaHl5fk AeR5I/S0/WwO2/5P9CR47ZmbkvVtlvJ3jLHsmSsYlsVCuPrN53cguTldjJyOiW9y cbRu1B0GtdTHh8rKsLOd2XmwnUsXpAj61173rP/4ejwBPVbgvJp5UeyrxAkfs154 WxHmLbi1MDSH9y7yasgAADGjDgZSGuWYE94mRH6P+Lyu+auxzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9b6N6tYw3oc6hSWTNmFJyiWTWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvZmQ4NTI0OTctYmM5YS0z YjMwLWFiNzQtY2MyYzMzNzAyMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBj9e42mfA/AGp+qxABRfhkvvMI4/Bh15bAHwEd+wvd9cyMJ9zuWthm muODXLMVm0qTNJ3PY+vgiVEZG9xDpFvW8xkY4F/LbggxQf8lYzYi5Kb9CanROzKJ anxkUaBT1KcUW31A+6uyILwphzRmgpnjASMl640JQSgzl84ubxN95hlZx968ShQm qtOx9SD6IJ/ctm5vWLjYaJleA8ADMx7djpLOimVD2tVb78GJwxCsKLHOcLgsyizj 0COp0yNJ8Q5gCMdoYqfsmThqDNsBwdBkkJYgVeDDOvOY4ZV+QnAPrjgTJ6zRW0Pk pqSn45xnK9ae0KurWRDp1ZHXaghsyFA= -----END CERTIFICATE-----Generated at Sun Sep 27 08:37:59 2026 by rpki-client