$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa File: 68f886e6-3ee4-396a-852d-a801badb904f.roa (raw, json) Hash identifier: xf6ord6I7hpLv0KE9oeZFiKRqcPSr2Gl+wFL4lgtS20= Subject key identifier: 88:3A:6B:AB:5A:86:61:3E:C2:8F:56:87:8C:B1:21:51:C9:B4:1B:9D Certificate issuer: /CN=324a8cbd-4953-435c-bace-07af1279e9bc Certificate serial: 010D0C9F4328584DAAE037FCCA1CB9FD8B421D00 Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 398025 IP address blocks: 143.109.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:37:fc:ca:1c:b9:fd:8b:42:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=a1da15aa-21f3-4909-9e9e-f1771dd840b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:38:a2:4b:d6:87:d4:fe:86:f0:ca:20:42:10: bb:84:28:da:5e:3c:52:9f:2c:2c:44:f1:db:60:1d: ac:11:28:2b:8f:2b:14:7d:1c:f7:62:41:7c:c4:b4: 39:83:89:8b:30:15:ca:71:87:d6:83:47:d1:cd:0a: f5:5d:cc:56:60:45:9c:55:01:14:a0:3e:52:d0:97: 78:68:e9:d7:03:b4:df:45:1d:b2:09:5b:9d:3a:63: ad:59:ce:67:ee:e0:9e:a4:f3:d0:b4:41:4f:ac:dd: 73:3b:a0:31:fc:a8:89:a8:b3:b1:10:4d:a3:db:d0: c2:3c:e6:a6:54:10:cd:0f:62:21:4a:d1:0b:b8:57: 30:19:cc:6d:7c:98:13:d9:69:dd:19:2c:b3:a3:3f: c3:81:0f:34:6a:06:4b:da:05:75:ff:4e:87:6f:85: 14:90:b1:09:4a:0a:5b:62:5e:7e:3d:4a:ed:02:0b: 4f:29:1d:fa:53:6c:b9:4d:c5:e8:fb:25:c1:e1:d4: f1:64:50:14:35:52:f9:fb:5f:46:3a:8b:e5:55:13: 13:53:c2:bb:f1:05:4b:47:95:90:27:1f:d1:99:c5: 7f:9d:c1:f0:bd:34:ce:1a:bf:aa:e2:1a:d7:a2:ff: 86:aa:f8:fe:58:df:1c:76:81:0f:8d:ee:f8:4f:7e: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3A:6B:AB:5A:86:61:3E:C2:8F:56:87:8C:B1:21:51:C9:B4:1B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl X509v3 Authority Key Identifier: keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer sbgp-ipAddrBlock: critical IPv4: 143.109.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:64:89:cd:bd:2c:79:eb:48:3f:df:0a:3f:f5:ff:f7:23:d3: 6a:19:56:6d:df:b6:f8:9d:6c:6b:78:ef:81:ea:ab:c5:0b:6f: 1d:6b:89:e6:48:ec:0f:3b:ce:70:d8:56:14:4a:d6:3d:3d:30: 03:f7:78:96:4e:a5:48:36:81:28:65:bd:02:fd:c9:00:93:3c: ca:3b:b4:41:7d:ed:14:70:aa:86:45:cc:d5:b4:59:18:ea:bc: d0:46:9c:a8:86:7d:ed:cc:5e:a2:9e:cd:6d:2e:9a:b6:bb:97: 10:c3:31:08:f6:50:2e:81:68:0d:d6:55:c9:39:4a:c5:ad:71: f7:c5:af:fe:7e:1f:ab:4f:6a:0f:ce:b4:53:b7:15:15:78:9a: 5e:19:25:02:cf:1b:c1:31:7c:77:d8:62:b1:67:4d:d1:3c:da: 6f:df:89:a6:2f:19:34:fb:cf:67:56:36:a8:51:ce:3d:ef:03: e4:06:eb:96:ee:89:6f:14:96:a8:f4:f9:ae:e3:55:54:95:87: 3a:c3:7c:56:e5:5e:6d:73:10:87:cb:39:70:9b:07:f3:f3:61: f1:7e:40:10:bb:58:73:1a:bf:98:f9:c0:66:cc:24:27:87:c9: 6b:7e:f4:f3:f9:e1:63:28:3f:ee:6c:6f:77:79:db:ed:81:ae: 62:f9:9a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4Df8yhy5/YtCHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YThjYmQtNDk1My00MzVjLWJhY2UtMDdhZjEyNzll OWJjMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk YTFkYTE1YWEtMjFmMy00OTA5LTllOWUtZjE3NzFkZDg0MGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTiiS9aH1P6G8MogQhC7hCjaXjxSnywsRPHb YB2sESgrjysUfRz3YkF8xLQ5g4mLMBXKcYfWg0fRzQr1XcxWYEWcVQEUoD5S0Jd4 aOnXA7TfRR2yCVudOmOtWc5n7uCepPPQtEFPrN1zO6Ax/KiJqLOxEE2j29DCPOam VBDND2IhStELuFcwGcxtfJgT2WndGSyzoz/DgQ80agZL2gV1/06Hb4UUkLEJSgpb Yl5+PUrtAgtPKR36U2y5TcXo+yXB4dTxZFAUNVL5+19GOovlVRMTU8K78QVLR5WQ Jx/RmcV/ncHwvTTOGr+q4hrXov+Gqvj+WN8cdoEPje74T35CxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg6a6tahmE+wo9Wh4yxIVHJtBudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjRh OGNiZC00OTUzLTQzNWMtYmFjZS0wN2FmMTI3OWU5YmMvNjhmODg2ZTYtM2VlNC0z OTZhLTg1MmQtYTgwMWJhZGI5MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI0YThjYmQtNDk1My00MzVjLWJh Y2UtMDdhZjEyNzllOWJjLzMyNGE4Y2JkLTQ5NTMtNDM1Yy1iYWNlLTA3YWYxMjc5 ZTliYy5jcmwwHwYDVR0jBBgwFoAUuVGNYC2HPrBfCSgipzOWxkslPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjRhOGNiZC00OTUzLTQzNWMtYmFjZS0wN2Fm MTI3OWU5YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFj20AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlkic29LHnrSD/fCj/1//cj02oZVm3ftvidbGt474Hqq8ULbx1rieZI 7A87znDYVhRK1j09MAP3eJZOpUg2gShlvQL9yQCTPMo7tEF97RRwqoZFzNW0WRjq vNBGnKiGfe3MXqKezW0umra7lxDDMQj2UC6BaA3WVck5SsWtcffFr/5+H6tPag/O tFO3FRV4ml4ZJQLPG8ExfHfYYrFnTdE82m/fiaYvGTT7z2dWNqhRzj3vA+QG65bu iW8Ulqj0+a7jVVSVhzrDfFblXm1zEIfLOXCbB/PzYfF+QBC7WHMav5j5wGbMJCeH yWt+9PP54WMoP+5sb3d52+2BrmL5mnQ= -----END CERTIFICATE-----Generated at Wed May 13 14:46:01 2026 by rpki-client