$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/5326f44f-a6e8-36d2-ad7f-ab52de78efe1.roa File: 5326f44f-a6e8-36d2-ad7f-ab52de78efe1.roa (raw, json) Hash identifier: 1ykH3utD1DjjY/XqTCk/AT6cdYMeafU/iu5X7en8Gc4= Subject key identifier: 3E:0A:C9:AF:19:F1:66:B3:FD:F1:78:2F:6A:04:4B:B2:6A:84:22:4E Certificate issuer: /CN=69ae5b34-c59f-40db-9452-6e21ecb81731 Certificate serial: 010D0C9F4328584D464A3B724D9FB963644F24A0 Authority key identifier: 08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/5326f44f-a6e8-36d2-ad7f-ab52de78efe1.roa Signing time: Tue 24 Mar 2026 12:17:44 +0000 ROA not before: Tue 24 Mar 2026 12:17:44 +0000 ROA not after: Mon 22 Jun 2026 12:17:44 +0000 asID: 29802 IP address blocks: 208.66.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:4a:3b:72:4d:9f:b9:63:64:4f:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ae5b34-c59f-40db-9452-6e21ecb81731 Validity Not Before: Mar 24 12:17:44 2026 GMT Not After : Jun 22 12:17:44 2026 GMT Subject: CN=fbe6e4c7-a8ce-4ad6-aaca-018c0f630f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:44:91:24:c1:77:86:8c:4c:3a:84:6d:f3: d2:d6:46:df:5d:4f:91:1b:d2:ea:ec:e7:d2:b5:29: 5f:f1:38:ae:64:dc:d4:e8:aa:1b:12:b0:60:28:3d: a2:33:14:bb:bb:34:31:b1:33:35:21:ec:95:76:33: 78:98:a5:aa:81:94:60:9a:c3:22:4c:f6:17:7c:57: 11:2e:ec:74:77:81:48:20:42:e6:04:a2:e1:26:7e: cf:50:9f:d9:52:7e:69:2e:ec:aa:f4:a5:19:41:a1: f6:f0:49:e0:e3:79:53:0b:2b:07:02:2e:1a:14:f4: c8:73:9c:7e:9b:76:9a:56:a8:dc:35:ba:46:42:c8: e5:54:98:e8:d0:e8:95:5c:01:50:20:28:da:6a:b8: a2:b5:6e:97:1e:a3:ac:cb:f2:f7:0f:ae:dd:76:40: be:57:6e:d6:78:af:2a:a7:f9:d6:66:56:48:d5:c8: 51:72:90:3d:c0:b0:c3:6b:51:89:73:db:65:9c:14: 00:e0:47:f4:53:63:2b:0a:8c:2d:17:ee:aa:e6:4b: 5f:c1:b4:66:e5:20:ef:25:2d:ec:17:87:dd:40:be: 32:03:38:99:4a:1a:8c:40:89:ff:97:01:57:88:3c: d8:fc:64:24:64:43:97:7e:8e:0a:e3:a4:4a:6c:95: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0A:C9:AF:19:F1:66:B3:FD:F1:78:2F:6A:04:4B:B2:6A:84:22:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/5326f44f-a6e8-36d2-ad7f-ab52de78efe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl X509v3 Authority Key Identifier: keyid:08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer sbgp-ipAddrBlock: critical IPv4: 208.66.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6e:0c:5d:fc:3d:2f:02:a0:1e:d3:d0:55:cb:11:bb:c0:68: a4:49:89:56:75:bb:7b:0b:59:70:71:71:5b:53:dc:8b:2e:31: c3:45:e5:dd:4e:48:88:b0:9e:87:55:d0:8f:20:b8:8c:1b:48: fb:59:e7:4d:f1:6b:a1:d6:17:09:73:20:01:97:0d:0e:18:26: 5e:e0:f2:d8:59:2f:d5:3f:84:23:6e:04:38:e9:f9:db:c3:12: 94:2d:f1:d6:c1:05:23:cc:3e:75:65:9b:70:1a:c1:95:ef:81: 3b:02:72:df:3b:89:91:29:ab:32:4c:c3:36:54:c3:6f:51:e3: 7d:4d:9a:7e:80:88:24:11:4a:d0:63:8a:cf:3f:8e:9b:df:1e: a9:b8:dc:e9:84:0a:c5:df:1d:1c:e0:80:17:ab:ce:e9:f9:71: d6:3d:95:f7:27:88:e9:c7:cd:15:35:ab:bd:b5:8c:44:4f:b1: 77:8f:6e:2d:d3:a5:42:12:6c:e9:21:96:34:2b:f6:ae:a7:78: 66:2b:32:f7:4e:e3:b8:70:a8:6e:33:6a:dc:28:cb:4d:ed:39: 12:ac:78:bb:40:73:01:7d:ca:1d:d9:83:03:bd:3e:85:41:3b: 8e:e8:cb:33:86:ed:f3:46:5c:0a:85:b0:45:8d:05:21:6a:4c: 56:25:ab:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GSjtyTZ+5Y2RPJKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhZTViMzQtYzU5Zi00MGRiLTk0NTItNmUyMWVjYjgx NzMxMB4XDTI2MDMyNDEyMTc0NFoXDTI2MDYyMjEyMTc0NFowLzEtMCsGA1UEAxMk ZmJlNmU0YzctYThjZS00YWQ2LWFhY2EtMDE4YzBmNjMwZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvONEkSTBd4aMTDqEbfPS1kbfXU+RG9Lq7OfS tSlf8TiuZNzU6KobErBgKD2iMxS7uzQxsTM1IeyVdjN4mKWqgZRgmsMiTPYXfFcR Lux0d4FIIELmBKLhJn7PUJ/ZUn5pLuyq9KUZQaH28Eng43lTCysHAi4aFPTIc5x+ m3aaVqjcNbpGQsjlVJjo0OiVXAFQICjaariitW6XHqOsy/L3D67ddkC+V27WeK8q p/nWZlZI1chRcpA9wLDDa1GJc9tlnBQA4Ef0U2MrCowtF+6q5ktfwbRm5SDvJS3s F4fdQL4yAziZShqMQIn/lwFXiDzY/GQkZEOXfo4K46RKbJX7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4Kya8Z8Waz/fF4L2oES7JqhCJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OWFl NWIzNC1jNTlmLTQwZGItOTQ1Mi02ZTIxZWNiODE3MzEvNTMyNmY0NGYtYTZlOC0z NmQyLWFkN2YtYWI1MmRlNzhlZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjlhZTViMzQtYzU5Zi00MGRiLTk0 NTItNmUyMWVjYjgxNzMxLzY5YWU1YjM0LWM1OWYtNDBkYi05NDUyLTZlMjFlY2I4 MTczMS5jcmwwHwYDVR0jBBgwFoAUCNptqRxEgPAchKfrXaTD8Nh1GjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82OWFlNWIzNC1jNTlmLTQwZGItOTQ1Mi02ZTIx ZWNiODE3MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEduDF38PS8CoB7T0FXLEbvAaKRJiVZ1u3sLWXBxcVtT3IsuMcNF5d1O SIiwnodV0I8guIwbSPtZ503xa6HWFwlzIAGXDQ4YJl7g8thZL9U/hCNuBDjp+dvD EpQt8dbBBSPMPnVlm3AawZXvgTsCct87iZEpqzJMwzZUw29R431Nmn6AiCQRStBj is8/jpvfHqm43OmECsXfHRzggBerzun5cdY9lfcniOnHzRU1q721jERPsXePbi3T pUISbOkhljQr9q6neGYrMvdO47hwqG4zatwoy03tORKseLtAcwF9yh3ZgwO9PoVB O47oyzOG7fNGXAqFsEWNBSFqTFYlqyA= -----END CERTIFICATE-----Generated at Thu Mar 26 20:08:49 2026 by rpki-client