$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/024be752-dfb9-3a8f-8f65-e352b58b6ef1.roa File: 024be752-dfb9-3a8f-8f65-e352b58b6ef1.roa (raw, json) Hash identifier: t0vKSuoXOnNv9eVqtnyORAm101ZilxAse7lPBS3BXaE= Subject key identifier: 1D:C8:52:5F:6C:13:A1:8E:39:11:F1:69:6D:D4:0B:84:E2:60:91:13 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D44FA64ACC8E8C563E63F1240 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/024be752-dfb9-3a8f-8f65-e352b58b6ef1.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 68.234.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:64:ac:c8:e8:c5:63:e6:3f:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=8ad48627-4e06-4aa8-9bfd-88d94caff9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:b1:12:91:2d:92:73:92:54:4b:ce:c5:a5: ab:42:b2:5b:72:12:9a:f0:6f:27:1f:e0:a4:76:8d: ce:c1:52:58:b5:57:a5:58:11:b4:89:43:13:c3:0d: fd:2b:73:af:38:c0:09:ff:80:fc:5d:f4:eb:1e:c4: ef:40:1d:eb:05:f5:c4:a5:9a:43:fe:4f:90:91:bf: 58:f4:7b:e3:ca:5c:44:cf:3d:92:ce:40:06:ce:40: 25:41:a9:3d:7b:da:cb:bc:33:6a:b5:a6:d7:a7:21: 96:bc:29:b5:3b:c5:6c:db:1a:8c:39:9a:40:ac:61: 60:88:f5:a9:b9:3b:ac:b6:f9:cc:43:c1:a8:49:ff: 76:c6:ff:8d:20:f4:f4:fd:7c:fe:61:26:3c:4a:8f: d5:62:0c:11:05:7c:67:9a:a5:7d:2d:1f:b4:4b:74: ee:e1:fa:c6:77:0c:e2:ca:70:29:13:9b:4e:38:63: 35:e3:2d:14:d1:4d:0e:f0:38:c9:dd:05:92:7c:16: 3e:a2:7e:75:c1:c3:b6:d8:8b:f9:e3:67:85:f8:3b: a9:3e:3b:d3:67:a7:a7:ff:97:09:48:df:78:9c:01: 9e:92:7d:92:80:75:ea:13:52:23:57:07:40:cd:91: a2:f4:58:8e:dc:09:37:81:90:15:58:b0:4a:5d:72: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C8:52:5F:6C:13:A1:8E:39:11:F1:69:6D:D4:0B:84:E2:60:91:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/024be752-dfb9-3a8f-8f65-e352b58b6ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:25:b7:fe:f7:fd:05:fc:c1:20:e1:40:30:b1:db:a9:a2:1b: 77:7c:e0:59:df:f9:67:ea:91:eb:67:44:b8:98:98:6a:15:af: f0:ba:31:88:a7:ea:16:97:24:bf:53:b3:ce:95:2e:26:25:71: 10:77:e3:c0:88:30:8c:29:1a:0a:47:bd:a5:15:cd:33:98:7e: 89:fc:44:65:db:54:e2:a5:37:21:7f:03:53:79:a7:ac:83:46: 9f:48:b4:38:17:5d:39:bc:f2:84:5b:08:62:bc:b3:f1:6c:ae: ef:e6:ce:4f:6b:80:a1:ab:31:76:63:8f:64:47:61:af:75:37: 7b:90:06:64:32:16:d7:69:df:d8:51:c3:ac:d1:6c:13:e4:99: 47:1a:3f:75:11:3e:c4:12:d9:1f:0d:02:c7:38:36:77:a7:98: 3c:da:f1:7f:66:8c:04:c1:4d:26:26:9f:1d:af:70:6f:80:30: 21:03:34:11:a7:aa:73:e6:81:71:9e:33:38:ed:54:b6:f7:9b: 4a:8b:60:ca:a6:6d:33:15:d0:16:18:40:15:c8:f4:59:b7:51: c1:a4:b9:1f:8a:81:b7:69:47:2e:40:00:01:62:4f:37:f2:43: 7d:59:e7:13:f0:ed:34:96:a2:db:11:a0:85:cc:f3:4f:32:49: 7f:e7:06:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mSsyOjFY+Y/EkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OGFkNDg2MjctNGUwNi00YWE4LTliZmQtODhkOTRjYWZmOWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20axEpEtknOSVEvOxaWrQrJbchKa8G8nH+Ck do3OwVJYtVelWBG0iUMTww39K3OvOMAJ/4D8XfTrHsTvQB3rBfXEpZpD/k+Qkb9Y 9HvjylxEzz2SzkAGzkAlQak9e9rLvDNqtabXpyGWvCm1O8Vs2xqMOZpArGFgiPWp uTustvnMQ8GoSf92xv+NIPT0/Xz+YSY8So/VYgwRBXxnmqV9LR+0S3Tu4frGdwzi ynApE5tOOGM14y0U0U0O8DjJ3QWSfBY+on51wcO22Iv542eF+DupPjvTZ6en/5cJ SN94nAGekn2SgHXqE1IjVwdAzZGi9FiO3Ak3gZAVWLBKXXJn6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3IUl9sE6GOORHxaW3UC4TiYJETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDI0YmU3NTItZGZiOS0z YThmLThmNjUtZTM1MmI1OGI2ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8lt/73/QX8wSDhQDCx26miG3d84Fnf+WfqketnRLiYmGoVr/C6MYin 6haXJL9Ts86VLiYlcRB348CIMIwpGgpHvaUVzTOYfon8RGXbVOKlNyF/A1N5p6yD Rp9ItDgXXTm88oRbCGK8s/Fsru/mzk9rgKGrMXZjj2RHYa91N3uQBmQyFtdp39hR w6zRbBPkmUcaP3URPsQS2R8NAsc4NnenmDza8X9mjATBTSYmnx2vcG+AMCEDNBGn qnPmgXGeMzjtVLb3m0qLYMqmbTMV0BYYQBXI9Fm3UcGkuR+KgbdpRy5AAAFiTzfy Q31Z5xPw7TSWotsRoIXM808ySX/nBvI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:44 2026 by rpki-client