$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c425b361-c222-39cc-883e-88fa2a133140.roa File: c425b361-c222-39cc-883e-88fa2a133140.roa (raw, json) Hash identifier: Az9NlhGmq9lhLeXa0JuMpUFX37zGF45W7bWRaroACe4= Subject key identifier: 64:41:30:CA:93:76:9C:85:07:A8:95:7A:C2:B6:7D:53:9F:D4:C9:14 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1F4A88A29F0CCB27B26B6680 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c425b361-c222-39cc-883e-88fa2a133140.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 3257 IP address blocks: 68.68.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:88:a2:9f:0c:cb:27:b2:6b:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=43b67635-e485-4308-8973-1134dc4e3862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:13:2f:5a:80:ac:71:a7:90:53:a3:b4:ba: d8:d1:4b:54:83:87:c7:aa:17:b2:99:d0:12:1f:ca: ed:5f:f7:29:ae:f7:dd:7c:4f:59:f4:c3:70:a8:3c: 9f:ec:86:d9:e0:6f:52:5c:94:9e:2e:29:a7:12:fa: 44:2d:79:d3:43:37:fd:d2:32:65:b2:a8:cd:c8:ab: 9b:a6:a7:43:6c:0f:ad:52:f4:2a:5e:c6:f7:ca:c0: c0:01:be:04:c5:46:29:57:a2:e2:ea:30:31:87:d1: 57:5d:1e:76:0a:7e:a4:4d:46:b1:0c:a3:40:af:66: d8:db:ff:4f:c8:ac:9b:a7:36:6c:7b:a2:dd:6b:49: 8b:c3:96:e5:27:c0:9a:48:c6:a7:63:53:97:85:0f: 86:fe:7c:61:c6:97:cd:e3:ed:9f:af:49:38:45:a5: 48:41:c4:d7:c7:cb:4b:5f:37:f7:0c:c4:d6:72:ba: 59:aa:a3:37:4b:23:ba:8a:2e:ff:41:33:dc:8f:3f: 70:74:84:64:49:0e:ef:29:e9:3f:cb:dd:73:cf:62: cc:79:da:d5:0b:36:6c:e4:4c:88:cb:d2:5c:f0:62: c0:dc:25:6c:16:21:29:c3:81:24:ae:c8:65:1e:92: db:f9:c7:56:f6:77:8d:4b:a5:06:ca:50:88:39:d6: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:41:30:CA:93:76:9C:85:07:A8:95:7A:C2:B6:7D:53:9F:D4:C9:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c425b361-c222-39cc-883e-88fa2a133140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 68.68.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:cd:a8:12:bf:ac:12:fc:1c:19:7b:05:f9:10:0b:ae:79:07: a7:49:7a:a1:6a:1d:c0:80:11:44:7a:36:b2:2e:08:86:19:1d: ab:9c:92:96:af:30:bf:28:37:3c:de:67:18:f1:c5:90:96:11: 8f:9a:77:da:88:44:37:fc:41:f0:36:ec:8b:81:cf:3f:83:a1: b7:73:21:04:33:40:99:94:cc:21:e8:f3:f5:cf:5f:fe:06:6e: 3a:55:eb:32:d0:cf:df:ba:3d:2f:1e:a4:29:be:ab:38:69:37: c1:d8:4d:41:49:2c:13:89:74:0e:2a:9d:50:fb:30:88:0c:72: 22:67:21:71:46:e4:b5:c2:18:71:19:dc:ec:bf:76:ba:25:3c: ea:f8:00:9b:ca:84:e4:07:7e:ad:f8:53:15:b5:b3:da:09:7c: e0:3f:7a:6b:da:8c:23:86:85:d0:cc:ed:0c:01:f3:0a:d3:0a: 46:e9:a4:d6:2d:73:c1:75:04:29:b1:88:b9:a3:67:31:88:f5: b5:f4:75:3f:ef:fa:5f:fc:27:59:34:81:d8:29:38:ba:a1:08: 8f:06:43:8d:99:31:db:83:79:9a:ed:f8:52:ac:40:56:e0:35: cb:08:ec:bd:0e:51:98:f3:17:df:4c:d7:e3:d2:2e:6c:7d:3a: 98:93:e6:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoiinwzLJ7JrZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDNiNjc2MzUtZTQ4NS00MzA4LTg5NzMtMTEzNGRjNGUzODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8wTL1qArHGnkFOjtLrY0UtUg4fHqheymdAS H8rtX/cprvfdfE9Z9MNwqDyf7IbZ4G9SXJSeLimnEvpELXnTQzf90jJlsqjNyKub pqdDbA+tUvQqXsb3ysDAAb4ExUYpV6Li6jAxh9FXXR52Cn6kTUaxDKNAr2bY2/9P yKybpzZse6Lda0mLw5blJ8CaSManY1OXhQ+G/nxhxpfN4+2fr0k4RaVIQcTXx8tL Xzf3DMTWcrpZqqM3SyO6ii7/QTPcjz9wdIRkSQ7vKek/y91zz2LMedrVCzZs5EyI y9Jc8GLA3CVsFiEpw4EkrshlHpLb+cdW9neNS6UGylCIOdaPKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRBMMqTdpyFB6iVesK2fVOf1MkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzQyNWIzNjEtYzIyMi0z OWNjLTg4M2UtODhmYTJhMTMzMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARERrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzNqBK/rBL8HBl7BfkQC655B6dJeqFqHcCAEUR6NrIuCIYZHauckpav ML8oNzzeZxjxxZCWEY+ad9qIRDf8QfA27IuBzz+DobdzIQQzQJmUzCHo8/XPX/4G bjpV6zLQz9+6PS8epCm+qzhpN8HYTUFJLBOJdA4qnVD7MIgMciJnIXFG5LXCGHEZ 3Oy/drolPOr4AJvKhOQHfq34UxW1s9oJfOA/emvajCOGhdDM7QwB8wrTCkbppNYt c8F1BCmxiLmjZzGI9bX0dT/v+l/8J1k0gdgpOLqhCI8GQ42ZMduDeZrt+FKsQFbg NcsI7L0OUZjzF99M1+PSLmx9OpiT5pE= -----END CERTIFICATE-----Generated at Thu Mar 26 23:54:25 2026 by rpki-client