$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa File: 1df4824f-cad9-3e2d-885e-82b97814e305.roa (raw, json) Hash identifier: zci91Yx/lZPQDsLfaEyNWHdpabu+FYg77Nbm6U8n3Yo= Subject key identifier: E5:23:C5:50:E2:BB:9D:BE:CE:C0:4F:53:28:6F:01:D9:48:07:4C:A3 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584DBA3AEA6ABA08600F4A4D9F80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22781 IP address blocks: 68.68.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:ea:6a:ba:08:60:0f:4a:4d:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=0832f2ed-6cd1-4f41-bca4-9ec2077d5f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:41:52:6f:e4:dc:2b:5f:89:3d:66:50:c7: 63:2e:82:15:9a:45:05:64:8d:09:d8:cd:8d:46:cf: 50:98:d1:91:eb:69:ad:29:15:04:aa:96:80:92:9b: ee:74:b3:94:1f:22:37:32:ff:63:b8:bc:02:d3:16: c1:c1:59:24:42:f0:24:01:cf:4f:4d:ee:9e:9f:c6: 8b:63:fd:bb:45:6d:fe:ba:2e:82:e7:29:b2:e1:60: 79:7c:28:a2:21:6b:f2:c5:fc:47:47:09:bb:51:01: 76:12:a1:47:10:48:2b:29:9c:7c:bf:4e:ff:6d:39: 75:a0:14:ba:e5:c8:2e:95:b3:42:1f:98:58:bf:4d: 96:42:15:8d:26:77:02:6c:5d:e8:0b:ab:f5:53:fe: 12:b4:94:2e:67:e5:5f:e6:63:72:30:7c:fa:3e:1b: 4d:f6:fd:ea:ee:59:0c:ea:ed:65:6e:71:a5:57:1c: 87:c5:0f:38:e7:f1:42:86:c4:6b:b4:97:3a:3c:3e: f2:9e:0a:84:48:50:6f:e4:c4:98:26:b6:4c:e3:7f: f6:51:13:3a:a7:ad:cd:88:d7:f7:10:f9:32:de:0a: ed:5a:3c:ad:85:75:16:5a:e2:ae:c6:28:0f:0d:ad: e4:25:61:08:48:17:81:8b:85:9e:b3:9f:8b:90:61: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:23:C5:50:E2:BB:9D:BE:CE:C0:4F:53:28:6F:01:D9:48:07:4C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 68.68.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ea:f1:c0:78:2d:9e:1d:9c:e6:40:29:8f:a6:1a:f0:6e:f8: 46:b4:f5:f2:c3:35:4b:bb:f1:28:d6:ad:c7:cd:2a:1e:86:88: 41:13:2a:1d:9d:89:06:cf:69:7a:7e:b0:ba:07:d8:16:bb:2e: e1:55:d9:27:de:39:a9:4d:6a:ed:66:90:58:78:6d:52:9a:5c: 2c:9b:ba:d3:9a:bf:58:d9:41:16:e7:02:83:64:ed:b1:a3:c9: 21:bd:64:0a:70:06:13:4b:f3:71:d3:02:e5:1f:c8:65:9a:ca: 17:b9:36:42:e7:01:ea:75:90:0c:68:6f:4e:5e:86:e2:c3:69: 61:5b:ad:91:93:4e:ff:71:f6:f2:2b:51:d1:2e:d3:13:1c:52: 2f:0d:2d:c8:e3:00:9a:c0:c6:8f:e2:4e:67:ef:6c:bd:30:3e: de:90:1b:b9:2c:dd:39:7b:98:09:52:41:8b:0d:10:cb:88:18: ff:2c:82:0a:73:f9:2d:f8:93:c3:31:e8:28:c9:fa:98:5e:9d: 7e:f0:8c:d3:40:da:0a:b1:d8:93:60:e0:e5:a8:fa:6d:ce:26: c6:1b:01:0d:ea:6f:2c:09:a6:2c:a0:5a:a0:c3:28:86:9a:06: 7a:c1:55:bc:14:f4:c0:49:6d:10:ed:4e:cf:37:5d:fa:87:18: 7a:d8:64:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OupqughgD0pNn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MDgzMmYyZWQtNmNkMS00ZjQxLWJjYTQtOWVjMjA3N2Q1ZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF1BUm/k3CtfiT1mUMdjLoIVmkUFZI0J2M2N Rs9QmNGR62mtKRUEqpaAkpvudLOUHyI3Mv9juLwC0xbBwVkkQvAkAc9PTe6en8aL Y/27RW3+ui6C5ymy4WB5fCiiIWvyxfxHRwm7UQF2EqFHEEgrKZx8v07/bTl1oBS6 5cgulbNCH5hYv02WQhWNJncCbF3oC6v1U/4StJQuZ+Vf5mNyMHz6PhtN9v3q7lkM 6u1lbnGlVxyHxQ845/FChsRrtJc6PD7yngqESFBv5MSYJrZM43/2URM6p63NiNf3 EPky3grtWjythXUWWuKuxigPDa3kJWEISBeBi4Wes5+LkGER9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUjxVDiu52+zsBPUyhvAdlIB0yjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWRmNDgyNGYtY2FkOS0z ZTJkLTg4NWUtODJiOTc4MTRlMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPq8cB4LZ4dnOZAKY+mGvBu+Ea09fLDNUu78SjWrcfNKh6GiEETKh2d iQbPaXp+sLoH2Ba7LuFV2SfeOalNau1mkFh4bVKaXCybutOav1jZQRbnAoNk7bGj ySG9ZApwBhNL83HTAuUfyGWayhe5NkLnAep1kAxob05ehuLDaWFbrZGTTv9x9vIr UdEu0xMcUi8NLcjjAJrAxo/iTmfvbL0wPt6QG7ks3Tl7mAlSQYsNEMuIGP8sggpz +S34k8Mx6CjJ+phenX7wjNNA2gqx2JNg4OWo+m3OJsYbAQ3qbywJpiygWqDDKIaa BnrBVbwU9MBJbRDtTs83XfqHGHrYZMQ= -----END CERTIFICATE-----Generated at Wed May 13 15:54:48 2026 by rpki-client