$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aa965c21-050a-3186-99c2-2b87accd1db1.roa File: aa965c21-050a-3186-99c2-2b87accd1db1.roa (raw, json) Hash identifier: p0pNKo1gVgkzFMG118wArkTCCsaN0j4Acfr8cPuC1kM= Subject key identifier: 32:09:F5:F7:1B:B7:68:D5:C8:80:7B:30:0B:42:4C:5A:1A:A8:7F:82 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584DC4004DC54D3A8001C66E0080 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aa965c21-050a-3186-99c2-2b87accd1db1.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 23473 IP address blocks: 68.180.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:4d:c5:4d:3a:80:01:c6:6e:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=ff65a9e3-cf83-481a-a455-a0cb12ea76be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:ea:f5:6f:f6:99:28:50:51:ee:cc:1b:ac: 38:0c:01:8e:a3:0c:be:94:9d:cb:bd:7f:8e:3a:bc: e4:37:20:7c:89:37:70:d6:93:e8:71:34:e9:ad:5c: 8c:82:7a:7a:5c:c2:55:05:5f:62:dd:75:8a:67:ca: c8:04:9c:5d:15:8f:26:a2:67:d8:8b:16:7e:cb:8b: 1b:7c:4f:17:13:c1:c4:0d:85:2d:78:fb:0f:9e:9c: 4c:bc:12:18:3a:80:e3:b6:ae:99:93:b5:ac:f1:d9: 98:ce:ea:d6:a0:93:e4:ca:81:d7:bc:38:c2:a3:b8: ec:d9:81:4c:03:66:ee:69:10:93:21:18:e0:4a:08: dd:46:0d:60:67:ed:e5:92:b9:04:81:f5:21:11:e8: f7:c8:b3:14:11:5d:46:0e:05:cd:49:d4:94:00:5c: 4b:6e:a5:dc:d5:e7:fb:a7:b7:b0:2f:bf:fc:f5:7f: 03:b9:d3:5b:f5:b8:a3:59:66:b9:8a:7a:2f:ec:7b: 99:27:e8:87:be:eb:f2:ee:b9:8b:63:07:ae:4d:c3: 8c:0e:89:0a:a3:3d:f5:1d:3c:d5:b9:8b:03:25:63: c6:8c:64:06:97:15:b6:3e:a1:fa:04:35:f2:70:75: 31:9a:74:c3:18:03:a0:1c:f9:62:92:9f:57:37:f3: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:09:F5:F7:1B:B7:68:D5:C8:80:7B:30:0B:42:4C:5A:1A:A8:7F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aa965c21-050a-3186-99c2-2b87accd1db1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:82:86:f6:fb:c5:3c:f1:a5:07:6c:4f:3b:1d:31:14:6f:56: 1e:bd:37:8d:8f:dd:cd:a8:2e:63:81:83:77:6b:18:5c:2e:96: e2:3b:1c:f2:aa:22:f3:ba:d0:ea:a0:b1:c4:cd:c0:37:5a:23: bd:09:11:39:a1:ec:0f:de:76:94:99:ea:cf:5b:2b:66:e0:c6: 6f:10:d2:a0:4c:c8:5b:9d:6d:12:cf:ca:8a:1e:49:4b:2b:ef: 35:7f:ee:31:11:ee:2a:d3:89:0d:a5:ea:cc:ff:3f:e6:32:c8: 10:aa:d6:26:6b:ab:cf:8a:59:48:90:af:fe:b0:fd:b6:62:83: c8:2f:90:cc:cf:0b:e2:71:bd:80:62:de:88:12:27:11:23:d9: 7d:49:1c:01:a6:0d:5b:6e:97:22:86:39:e8:a5:6a:49:05:a0: c3:d8:02:6b:fa:73:66:20:77:20:a0:09:e2:5f:23:93:d7:50: 6f:07:65:25:f9:c7:82:ec:03:c2:49:3c:83:99:05:8d:8a:1c: bb:3b:58:ac:3e:3b:5e:ea:9c:92:86:a1:aa:8b:ed:03:b4:ed: fe:40:87:43:5d:15:f6:87:27:45:47:02:d8:80:27:ac:2b:6a: 3e:bb:20:04:5a:51:59:d3:9d:a0:9a:d4:c7:6e:b2:3b:6f:4c: 1c:07:e2:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAE3FTTqAAcZuAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk ZmY2NWE5ZTMtY2Y4My00ODFhLWE0NTUtYTBjYjEyZWE3NmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2jq9W/2mShQUe7MG6w4DAGOowy+lJ3LvX+O OrzkNyB8iTdw1pPocTTprVyMgnp6XMJVBV9i3XWKZ8rIBJxdFY8momfYixZ+y4sb fE8XE8HEDYUtePsPnpxMvBIYOoDjtq6Zk7Ws8dmYzurWoJPkyoHXvDjCo7js2YFM A2buaRCTIRjgSgjdRg1gZ+3lkrkEgfUhEej3yLMUEV1GDgXNSdSUAFxLbqXc1ef7 p7ewL7/89X8DudNb9bijWWa5inov7HuZJ+iHvuvy7rmLYweuTcOMDokKoz31HTzV uYsDJWPGjGQGlxW2PqH6BDXycHUxmnTDGAOgHPlikp9XN/OP7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIJ9fcbt2jVyIB7MAtCTFoaqH+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWE5NjVjMjEtMDUwYS0z MTg2LTk5YzItMmI4N2FjY2QxZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+Chvb7xTzxpQdsTzsdMRRvVh69N42P3c2oLmOBg3drGFwuluI7HPKq IvO60OqgscTNwDdaI70JETmh7A/edpSZ6s9bK2bgxm8Q0qBMyFudbRLPyooeSUsr 7zV/7jER7irTiQ2l6sz/P+YyyBCq1iZrq8+KWUiQr/6w/bZig8gvkMzPC+JxvYBi 3ogSJxEj2X1JHAGmDVtulyKGOeilakkFoMPYAmv6c2YgdyCgCeJfI5PXUG8HZSX5 x4LsA8JJPIOZBY2KHLs7WKw+O17qnJKGoaqL7QO07f5Ah0NdFfaHJ0VHAtiAJ6wr aj67IARaUVnTnaCa1MdusjtvTBwH4m4= -----END CERTIFICATE-----Generated at Wed May 13 09:14:17 2026 by rpki-client