$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf32697c-c553-3695-ab9d-96e167fbb51e.roa File: bf32697c-c553-3695-ab9d-96e167fbb51e.roa (raw, json) Hash identifier: GyZSFbe8/kMR+BqcuQA03oyGOhRoLcgZpCo3olxC/0s= Subject key identifier: 9D:8F:A2:FA:3A:13:B8:AF:DD:86:39:54:75:95:AF:AB:8F:B8:EB:D8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584DAC45945B5FF0673C9D4D7440 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf32697c-c553-3695-ab9d-96e167fbb51e.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 6079 IP address blocks: 68.182.68.0/22 maxlen: 24 68.182.72.0/21 maxlen: 24 68.182.80.0/20 maxlen: 24 68.182.96.0/20 maxlen: 24 68.182.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:94:5b:5f:f0:67:3c:9d:4d:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=b0fc74f2-ff53-47c1-a5af-33e0aee12064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:0d:56:a7:97:49:b9:03:53:af:e1:38:82: 6f:fb:9e:8a:73:e4:e2:ee:55:a6:a9:01:d3:18:95: cb:aa:cb:af:60:39:b6:7a:a1:30:91:ef:f4:a6:74: 1f:ea:6e:86:7f:63:3d:d7:d9:14:9d:1b:e3:5f:75: b4:d4:15:27:70:cb:98:18:fd:87:54:8b:1e:74:d1: b5:ca:9d:b2:46:73:06:47:b9:4a:30:81:07:0f:0f: 54:df:81:71:1d:64:d2:92:45:e2:8f:77:48:de:ee: 8b:5c:d2:4b:e2:12:18:4b:3f:5b:6f:5b:1a:af:64: 49:56:c8:e4:c1:d0:b1:5e:89:44:c7:3b:e8:46:d1: dc:fb:d1:dd:9e:dd:53:36:5f:b5:e6:e6:99:65:7b: 55:54:24:fd:87:f3:ca:52:66:9f:3d:08:71:71:6a: ba:8d:60:9d:45:93:dd:48:44:52:1c:76:5e:a9:3f: 90:60:b7:1b:89:8f:80:0d:34:8a:05:da:f5:e8:e1: 49:dc:d6:fb:9d:46:9c:e6:ee:58:b9:7d:54:89:20: a7:8b:86:88:15:ae:6a:20:fd:71:6d:25:4d:52:60: 7d:fe:34:d3:cb:72:2e:0f:c2:c1:8e:05:37:d6:36: df:e3:d4:73:c6:50:ff:02:8a:4d:e4:26:96:b3:43: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8F:A2:FA:3A:13:B8:AF:DD:86:39:54:75:95:AF:AB:8F:B8:EB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf32697c-c553-3695-ab9d-96e167fbb51e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.68.0-68.182.127.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f8:c9:50:dc:be:aa:b2:d2:dc:d6:eb:63:7c:20:9b:60:03:87: 4b:16:e6:2f:aa:aa:85:33:d0:85:aa:bb:36:5e:00:3b:d4:f1: 9f:60:ae:19:c0:da:b7:3c:ef:03:d7:88:75:6f:06:b3:b1:c4: 15:64:cf:c9:e1:a5:46:bf:22:22:4b:e0:a0:39:ac:27:b7:cb: ff:a6:73:db:f6:d2:a4:4f:c3:05:8d:1e:b7:bc:81:af:b0:57: a3:c2:97:f8:24:38:2e:5e:b9:20:8a:4e:6b:9c:fe:ee:5f:d7: 68:14:14:40:b6:c5:f0:d1:fc:bc:5e:88:17:84:bd:bf:95:b3: 92:dc:98:e4:17:0d:3c:94:61:59:69:7a:0a:0b:bb:53:82:29: e4:3e:a1:4b:97:9f:4e:82:37:b1:3a:c9:91:51:c7:09:06:c5: 8d:91:f0:00:b0:95:03:21:39:57:6e:df:67:41:2d:a6:7c:c8: de:44:ef:1f:b7:6c:d0:ff:9f:56:ab:59:45:55:c1:78:20:da: 8f:a9:ae:46:01:ce:ed:c3:29:6c:da:7b:e8:76:9b:3d:c8:d8: fb:65:63:c7:88:60:2e:bf:15:d1:bc:f8:ad:a3:5b:3e:7b:74: ca:d8:ca:2e:c1:3e:6b:3e:0f:91:ab:8c:2f:44:b8:3f:bd:e6: 5f:07:7b:56 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2sRZRbX/BnPJ1NdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk YjBmYzc0ZjItZmY1My00N2MxLWE1YWYtMzNlMGFlZTEyMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudINVqeXSbkDU6/hOIJv+56Kc+Ti7lWmqQHT GJXLqsuvYDm2eqEwke/0pnQf6m6Gf2M919kUnRvjX3W01BUncMuYGP2HVIsedNG1 yp2yRnMGR7lKMIEHDw9U34FxHWTSkkXij3dI3u6LXNJL4hIYSz9bb1sar2RJVsjk wdCxXolExzvoRtHc+9Hdnt1TNl+15uaZZXtVVCT9h/PKUmafPQhxcWq6jWCdRZPd SERSHHZeqT+QYLcbiY+ADTSKBdr16OFJ3Nb7nUac5u5YuX1UiSCni4aIFa5qIP1x bSVNUmB9/jTTy3IuD8LBjgU31jbf49RzxlD/AopN5CaWs0NT4QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJ2Povo6E7iv3YY5VHWVr6uPuOvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmYzMjY5N2MtYzU1My0z Njk1LWFiOWQtOTZlMTY3ZmJiNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJEtkQD BAdEtgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEA+MlQ3L6qstLc1utjfCCbYAOHSxbmL6qqhTPQhaq7Nl4A O9Txn2CuGcDatzzvA9eIdW8Gs7HEFWTPyeGlRr8iIkvgoDmsJ7fL/6Zz2/bSpE/D BY0et7yBr7BXo8KX+CQ4Ll65IIpOa5z+7l/XaBQUQLbF8NH8vF6IF4S9v5WzktyY 5BcNPJRhWWl6Cgu7U4Ip5D6hS5efToI3sTrJkVHHCQbFjZHwALCVAyE5V27fZ0Et pnzI3kTvH7ds0P+fVqtZRVXBeCDaj6muRgHO7cMpbNp76HabPcjY+2Vjx4hgLr8V 0bz4raNbPnt0ytjKLsE+az4PkauML0S4P73mXwd7Vg== -----END CERTIFICATE-----Generated at Wed May 13 14:20:59 2026 by rpki-client