$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/902c0d77-3daa-321f-b60d-911f9428b935.roa File: 902c0d77-3daa-321f-b60d-911f9428b935.roa (raw, json) Hash identifier: 2u+17m+k/uJ9ak9RzLWNmw6UgnTjoo4o7kDblSW5P28= Subject key identifier: 09:7E:C8:9C:CB:F9:9F:A6:1C:D2:D4:68:4A:90:5D:73:89:ED:BD:93 Certificate issuer: /CN=9c2a7225-dfea-460d-aa69-804ae5740036 Certificate serial: 010D0C9F4328584D44153B31B97AA95838D35A00 Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/902c0d77-3daa-321f-b60d-911f9428b935.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 55001 IP address blocks: 68.68.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:15:3b:31:b9:7a:a9:58:38:d3:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=13d62f7f-e869-4594-b590-d7566387f298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:6c:e0:24:ba:61:4a:ab:08:eb:97:3e:7d: 4f:fd:65:82:45:3c:eb:23:b0:ba:a2:8f:e1:3e:d1: 60:19:5c:1a:e5:f7:d5:3b:25:dc:a5:55:af:d8:ce: 99:6a:f6:6e:69:56:72:af:41:48:a5:56:ed:24:ac: 0c:3c:bf:fe:e7:7c:fd:d1:e3:ee:2a:37:11:5b:69: 34:18:5b:dc:37:0d:13:cb:04:02:39:4b:f6:22:05: 33:39:39:7f:bd:b9:13:df:4a:6a:1d:83:81:b6:43: 81:f2:bd:9a:9e:26:96:fa:95:62:e9:d6:99:ea:6a: 50:fa:c9:06:86:6b:2f:3d:f6:25:10:fb:0a:dc:be: bf:d5:7d:59:18:99:34:d6:2e:72:c0:ef:a6:3e:2c: b7:d1:a5:0f:6a:17:d7:a5:3a:42:7a:92:3f:96:1f: c6:1f:31:54:0c:ec:12:4d:09:aa:5e:d1:80:13:1d: d9:4e:cb:b9:64:3f:92:6d:77:54:59:a7:28:79:bf: 0a:20:3d:5c:44:3e:b6:f1:dc:e8:05:e4:f1:a4:89: 56:eb:46:23:e5:b8:f4:18:15:76:e3:13:d1:82:b8: df:b1:31:25:85:0b:4c:17:3e:79:21:e5:ec:49:de: 85:35:52:40:ed:3d:88:4a:ab:d4:3f:dc:4d:4d:ce: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7E:C8:9C:CB:F9:9F:A6:1C:D2:D4:68:4A:90:5D:73:89:ED:BD:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/902c0d77-3daa-321f-b60d-911f9428b935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl X509v3 Authority Key Identifier: keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer sbgp-ipAddrBlock: critical IPv4: 68.68.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:94:75:17:c6:03:cf:a4:35:96:5e:77:d5:fe:e6:94:e5:7d: e7:70:a0:67:86:e2:2e:1b:22:bc:15:08:10:62:57:6d:2c:a8: 2e:8d:ac:d3:6d:4f:56:74:09:c7:61:e9:ed:a5:60:d2:31:5b: 28:d7:51:e1:c4:4e:c7:c8:11:80:7e:1b:44:93:ad:42:14:7d: 8d:94:49:57:2e:ad:fb:24:91:60:1b:f5:49:2e:fd:66:05:b6: 83:05:aa:91:5b:e9:cd:bc:4a:81:e7:73:1a:c6:8d:e0:02:cc: e8:c3:75:ca:fa:f0:c3:37:96:0a:a4:34:e8:88:81:ea:a9:76: 7f:be:39:28:2f:68:e9:9f:50:42:2f:31:25:16:69:17:17:ce: b2:a3:a8:d3:45:17:db:4e:a2:77:50:1b:fd:ba:65:1b:44:1c: 09:34:54:3e:30:18:5c:a8:3b:11:65:15:18:f1:a5:bb:97:4c: 98:f9:d8:02:39:4c:8a:5d:1e:90:0b:5f:43:8f:4a:62:74:0f: 0c:43:ee:fe:a4:e0:5d:f3:b8:ca:b9:a2:4e:5b:d9:a2:17:ad: 7b:a5:26:3c:02:7e:1a:05:f0:f0:7a:0a:50:94:45:88:38:32: f6:c5:da:68:67:9f:9e:de:b8:e2:be:d4:f3:80:4e:54:d5:bf: dc:d8:68:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EFTsxuXqpWDjTWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyYTcyMjUtZGZlYS00NjBkLWFhNjktODA0YWU1NzQw MDM2MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTNkNjJmN2YtZTg2OS00NTk0LWI1OTAtZDc1NjYzODdmMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQps4CS6YUqrCOuXPn1P/WWCRTzrI7C6oo/h PtFgGVwa5ffVOyXcpVWv2M6ZavZuaVZyr0FIpVbtJKwMPL/+53z90ePuKjcRW2k0 GFvcNw0TywQCOUv2IgUzOTl/vbkT30pqHYOBtkOB8r2aniaW+pVi6daZ6mpQ+skG hmsvPfYlEPsK3L6/1X1ZGJk01i5ywO+mPiy30aUPahfXpTpCepI/lh/GHzFUDOwS TQmqXtGAEx3ZTsu5ZD+SbXdUWacoeb8KID1cRD628dzoBeTxpIlW60Yj5bj0GBV2 4xPRgrjfsTElhQtMFz55IeXsSd6FNVJA7T2ISqvUP9xNTc6WcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl+yJzL+Z+mHNLUaEqQXXOJ7b2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YzJh NzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3NDAwMzYvOTAyYzBkNzctM2RhYS0z MjFmLWI2MGQtOTExZjk0MjhiOTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWMyYTcyMjUtZGZlYS00NjBkLWFh NjktODA0YWU1NzQwMDM2LzljMmE3MjI1LWRmZWEtNDYwZC1hYTY5LTgwNGFlNTc0 MDAzNi5jcmwwHwYDVR0jBBgwFoAUlYr+xsgzCViBPpDo757JLDrbd8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRh ZTU3NDAwMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRETMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCUdRfGA8+kNZZed9X+5pTlfedwoGeG4i4bIrwVCBBiV20sqC6NrNNt T1Z0Ccdh6e2lYNIxWyjXUeHETsfIEYB+G0STrUIUfY2USVcurfskkWAb9Uku/WYF toMFqpFb6c28SoHncxrGjeACzOjDdcr68MM3lgqkNOiIgeqpdn++OSgvaOmfUEIv MSUWaRcXzrKjqNNFF9tOondQG/26ZRtEHAk0VD4wGFyoOxFlFRjxpbuXTJj52AI5 TIpdHpALX0OPSmJ0DwxD7v6k4F3zuMq5ok5b2aIXrXulJjwCfhoF8PB6ClCURYg4 MvbF2mhnn57euOK+1POATlTVv9zYaOQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:35 2026 by rpki-client