$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa File: bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa (raw, json) Hash identifier: RUUeEZNCUvXfZgajLsNKG1TMxgXKReo5UyptS/jFEhI= Subject key identifier: 7A:93:FC:32:43:41:6B:97:8A:46:49:63:D7:22:ED:8F:0B:30:21:70 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584D422F821730E8B89A1AFE2180 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 91 IP address blocks: 204.76.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:82:17:30:e8:b8:9a:1a:fe:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=e6fefac4-8943-4457-ab7a-65b601023589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:02:68:d2:36:00:fc:48:aa:71:f3:41:0b:b0: d1:d9:17:e1:32:f1:fc:c0:71:b8:3f:5e:f7:27:08: fb:8f:fc:63:55:5f:6b:20:13:00:b6:3a:1c:7b:c6: 75:d2:ca:c9:df:3f:12:b7:98:8f:d1:92:00:f7:4a: a3:bf:3c:0f:29:2b:67:8e:6b:53:85:57:8f:c5:8f: b2:19:04:15:d4:d0:50:6b:0a:f7:f8:79:14:93:a8: af:32:9a:df:5f:63:15:e7:af:18:3b:f1:4c:7e:40: e3:a0:7e:b6:0b:0b:b1:6d:f8:d7:96:de:75:0d:c7: b5:19:fd:70:02:16:39:79:9f:3a:2c:88:5e:24:46: 98:90:f4:71:13:10:94:f0:bb:6d:71:77:b5:bb:ed: c1:09:ce:8c:d0:50:24:26:bc:cb:93:81:da:ac:76: 0a:1e:c6:c6:e6:ca:c5:f9:2c:76:d5:c5:18:c6:05: 0e:d2:18:79:2e:27:a8:1b:38:11:c1:f8:3b:fc:16: ed:cf:7d:8f:d3:8f:cd:84:e3:02:b7:0e:43:3b:a5: 36:6c:19:6c:fc:8b:04:e1:7f:0f:eb:a1:45:02:be: 2a:c8:40:a3:06:41:d3:da:4f:8f:20:77:35:d2:ce: 43:23:d9:ca:97:96:7a:33:05:17:38:c6:7d:13:b0: 4e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:93:FC:32:43:41:6B:97:8A:46:49:63:D7:22:ED:8F:0B:30:21:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 204.76.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f5:1a:0e:c8:ed:f4:1a:40:12:b4:6e:89:52:46:4c:f2:d1: 64:18:88:5d:fa:9b:2e:f9:b2:bc:1f:f6:04:3f:1b:8c:55:a3: d8:ed:9e:2c:10:74:6d:9e:46:77:3b:38:79:ed:05:9b:1e:2e: 40:b9:77:a9:64:bb:66:e6:69:c3:43:91:05:ec:6f:c9:3f:ca: c9:a4:a6:45:d9:9b:1f:48:b2:02:33:df:b5:ab:ca:71:a9:bc: e8:7a:8b:e0:c2:85:73:21:da:d8:ca:93:cd:ff:45:97:18:26: 09:6d:4f:69:ff:fa:e5:c9:e0:d3:fd:40:df:25:b7:a2:77:c5: aa:40:ab:d4:78:d0:00:0e:cd:e8:57:3c:14:a1:02:59:31:e5: c9:88:92:b8:85:0c:05:d4:3b:0a:6e:75:f6:21:fd:1d:76:8d: 88:13:fe:22:69:63:8d:cf:36:ea:e0:03:9b:e1:c2:e8:5f:1d: 53:90:9c:14:7a:99:11:45:70:84:57:92:86:cb:17:55:4a:93: dd:69:5b:dd:c3:ce:f3:d7:e0:cd:c0:61:54:59:bb:91:b4:7f: f0:04:de:cb:8f:27:f9:b6:59:32:1f:21:98:59:16:7b:8c:7b: ff:c5:4a:37:da:93:77:4b:83:a3:95:18:4b:ce:7d:b4:75:49: 03:e9:ec:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4IXMOi4mhr+IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk ZTZmZWZhYzQtODk0My00NDU3LWFiN2EtNjViNjAxMDIzNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AJo0jYA/EiqcfNBC7DR2RfhMvH8wHG4P173 Jwj7j/xjVV9rIBMAtjoce8Z10srJ3z8St5iP0ZIA90qjvzwPKStnjmtThVePxY+y GQQV1NBQawr3+HkUk6ivMprfX2MV568YO/FMfkDjoH62CwuxbfjXlt51Dce1Gf1w AhY5eZ86LIheJEaYkPRxExCU8LttcXe1u+3BCc6M0FAkJrzLk4HarHYKHsbG5srF +Sx21cUYxgUO0hh5LieoGzgRwfg7/Bbtz32P04/NhOMCtw5DO6U2bBls/IsE4X8P 66FFAr4qyECjBkHT2k+PIHc10s5DI9nKl5Z6MwUXOMZ9E7BOMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqT/DJDQWuXikZJY9ci7Y8LMCFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvYmVmNDdjNmYtMzE5OS0z ZmE1LTgyZGYtY2UzYTUzY2M0Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEzeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH1Gg7I7fQaQBK0bolSRkzy0WQYiF36my75srwf9gQ/G4xVo9jtniwQ dG2eRnc7OHntBZseLkC5d6lku2bmacNDkQXsb8k/ysmkpkXZmx9IsgIz37WrynGp vOh6i+DChXMh2tjKk83/RZcYJgltT2n/+uXJ4NP9QN8lt6J3xapAq9R40AAOzehX PBShAlkx5cmIkriFDAXUOwpudfYh/R12jYgT/iJpY43PNurgA5vhwuhfHVOQnBR6 mRFFcIRXkobLF1VKk91pW93DzvPX4M3AYVRZu5G0f/AE3suPJ/m2WTIfIZhZFnuM e//FSjfak3dLg6OVGEvOfbR1SQPp7Cs= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:46 2026 by rpki-client