$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa File: 9208bdf5-d639-308d-9352-7b93ba2bc9db.roa (raw, json) Hash identifier: xuAia2yow40aJxHjnG4M7fcVq60EGByvX14fAu4fxb8= Subject key identifier: 13:47:A4:BA:41:E4:DF:B8:B7:30:BC:D4:CC:70:A8:C2:07:C1:8E:30 Certificate issuer: /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81 Certificate serial: 010D0C9F4328584D20AF512E34726548EB5E2D80 Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 3580 IP address blocks: 68.234.48.0/20 maxlen: 32 216.220.80.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:51:2e:34:72:65:48:eb:5e:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=1bb56c19-3c91-4b72-bb64-39b74d861db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5a:7d:ae:21:47:70:ec:7f:21:a3:b2:0d:b8: f2:0e:53:9d:80:4d:b0:ef:40:b9:81:59:54:7b:a4: a8:10:28:e4:c5:09:57:cf:e0:2d:92:ec:f6:0e:ba: c5:03:83:ae:bb:21:ec:2d:b8:e5:56:3f:20:71:62: a0:5c:b1:c9:11:ed:a4:ac:7f:a3:0e:d8:1f:00:26: bc:71:00:4f:52:c6:dc:17:d2:0f:d4:5d:ce:af:af: 2c:1f:54:a8:9b:f4:70:c6:de:ae:74:68:6c:a2:33: c0:a3:59:0b:3a:2d:12:74:7a:9f:3f:95:5f:0b:11: 98:e2:2d:86:31:06:7f:02:18:5f:4f:cc:83:71:ca: 35:be:04:ec:be:8a:cf:cc:ee:e0:df:ea:c3:7b:8d: f6:eb:c6:eb:ef:82:bb:0f:a9:54:e7:d8:ad:2e:d6: 24:b7:b4:b1:af:87:82:4c:e9:a1:bf:4d:4e:80:72: 58:85:51:01:58:38:2d:5b:52:a9:66:6f:13:4c:b4: 9d:6b:93:d0:89:be:22:1c:ac:5d:64:91:73:2d:d7: 19:9b:d6:32:99:74:4b:b0:06:51:df:c5:ab:59:79: e3:c9:88:ee:47:f7:3c:c9:75:c2:c3:1d:f0:4b:c4: da:f1:bc:49:d8:35:b1:1e:eb:9f:c9:1b:8b:cc:37: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:47:A4:BA:41:E4:DF:B8:B7:30:BC:D4:CC:70:A8:C2:07:C1:8E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/9208bdf5-d639-308d-9352-7b93ba2bc9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl X509v3 Authority Key Identifier: keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer sbgp-ipAddrBlock: critical IPv4: 68.234.48.0/20 216.220.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b9:ef:0e:fa:f2:ba:c6:ad:6d:55:b4:0d:2e:85:ba:71:fe: b5:1f:fa:14:76:77:68:65:61:1d:5a:18:42:b3:a0:d5:2b:7b: 6c:c7:bd:4b:01:03:c2:68:b9:05:f3:7e:9c:4a:bc:c1:fb:cf: 12:84:e9:57:5b:05:a9:fd:47:51:f4:1a:cf:4c:1d:5a:42:56: c5:f3:9f:a9:51:af:bb:a2:8b:35:d2:71:48:9e:81:c5:74:92: 75:7c:52:6d:4b:97:b3:a1:2a:88:83:95:b2:d7:f5:ea:12:81: d1:9c:44:ff:27:17:d5:66:2a:d7:c1:eb:e8:07:e3:89:31:77: 5b:7f:b6:5c:de:8f:62:9c:72:56:1d:30:80:fe:b7:c8:83:05: e4:70:c4:a4:04:8f:31:c9:dd:9b:5f:81:94:9f:83:98:3a:aa: a9:68:57:ae:a5:f3:5b:5e:8f:5a:ef:f1:c5:f0:5e:1c:b0:93: 5a:77:be:67:b8:7a:84:e4:6a:1f:6b:6f:dc:24:19:69:2d:6e: ac:9a:cf:05:77:51:8e:cc:16:4e:bb:08:e3:c7:e0:22:23:ee: 14:78:b7:51:b1:cb:0e:b1:e5:1c:63:3b:a3:52:e7:22:90:21: 4a:af:e3:47:62:99:04:9a:64:03:32:4e:99:45:8f:73:8d:18: 27:fd:05:69 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0gr1EuNHJlSOteLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNjI3NTgtYjNkNi00ZDNkLWEzZTUtM2NlNjFiYWY5 YzgxMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MWJiNTZjMTktM2M5MS00YjcyLWJiNjQtMzliNzRkODYxZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Fp9riFHcOx/IaOyDbjyDlOdgE2w70C5gVlU e6SoECjkxQlXz+Atkuz2DrrFA4OuuyHsLbjlVj8gcWKgXLHJEe2krH+jDtgfACa8 cQBPUsbcF9IP1F3Or68sH1Som/Rwxt6udGhsojPAo1kLOi0SdHqfP5VfCxGY4i2G MQZ/AhhfT8yDcco1vgTsvorPzO7g3+rDe43268br74K7D6lU59itLtYkt7Sxr4eC TOmhv01OgHJYhVEBWDgtW1KpZm8TTLSda5PQib4iHKxdZJFzLdcZm9YymXRLsAZR 38WrWXnjyYjuR/c8yXXCwx3wS8Ta8bxJ2DWxHuufyRuLzDcAkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBNHpLpB5N+4tzC81MxwqMIHwY4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmE2 Mjc1OC1iM2Q2LTRkM2QtYTNlNS0zY2U2MWJhZjljODEvOTIwOGJkZjUtZDYzOS0z MDhkLTkzNTItN2I5M2JhMmJjOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZhNjI3NTgtYjNkNi00ZDNkLWEz ZTUtM2NlNjFiYWY5YzgxL2FmYTYyNzU4LWIzZDYtNGQzZC1hM2U1LTNjZTYxYmFm OWM4MS5jcmwwHwYDVR0jBBgwFoAUu0kEYIzjyKOONgsMxSsza5gXIs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmE2Mjc1OC1iM2Q2LTRkM2QtYTNlNS0zY2U2 MWJhZjljODEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEROowAwQE 2NxQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA257w768rrGrW1VtA0uhbpx/rUf+hR2d2hlYR1aGEKzoNUr e2zHvUsBA8JouQXzfpxKvMH7zxKE6VdbBan9R1H0Gs9MHVpCVsXzn6lRr7uiizXS cUiegcV0knV8Um1Ll7OhKoiDlbLX9eoSgdGcRP8nF9VmKtfB6+gH44kxd1t/tlze j2KcclYdMID+t8iDBeRwxKQEjzHJ3ZtfgZSfg5g6qqloV66l81tej1rv8cXwXhyw k1p3vme4eoTkah9rb9wkGWktbqyazwV3UY7MFk67COPH4CIj7hR4t1Gxyw6x5Rxj O6NS5yKQIUqv40dimQSaZAMyTplFj3ONGCf9BWk= -----END CERTIFICATE-----Generated at Thu Mar 26 13:25:10 2026 by rpki-client