$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1cec2629-402e-3ceb-8ccc-f217d66c3876.roa File: 1cec2629-402e-3ceb-8ccc-f217d66c3876.roa (raw, json) Hash identifier: l0l4D0HKYyCVf8j1Bd1Dm+XN0QxlldS3xWhpMRJBEoQ= Subject key identifier: DB:44:2B:01:E1:F3:1C:B4:B4:E8:02:01:0D:C8:2E:07:8A:79:3F:7A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D8C2AB043C9A9DB8A0B967B30 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1cec2629-402e-3ceb-8ccc-f217d66c3876.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 39521 IP address blocks: 68.165.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:b0:43:c9:a9:db:8a:0b:96:7b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=0d2b1232-61e9-4205-9144-673b39001a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:6b:a1:27:0b:e1:d4:67:71:17:4e:04:d6: 4b:55:be:57:ce:1e:e0:22:e2:b9:af:d8:53:b2:b0: 19:cf:99:c9:45:57:a4:20:b0:d3:ff:15:f2:f4:3d: b5:08:21:3a:fb:94:c3:63:dd:57:e6:34:e2:13:11: ed:8a:54:d7:df:22:6d:41:dd:f6:bd:86:d5:7c:c2: ae:52:11:08:1a:92:53:46:b3:73:74:9a:55:09:99: d0:62:84:1f:dd:40:f0:47:3c:d9:a9:f8:cb:4a:6e: 25:bc:0e:c8:a5:85:38:d4:dd:84:9a:79:fb:30:f5: 83:9c:52:90:3e:4c:da:b1:7a:ad:cc:85:17:8d:34: ad:d5:92:e2:ae:38:4c:a0:33:ae:c7:4e:a8:7c:ee: 84:c8:ab:2d:db:36:12:d0:2e:da:92:cd:0a:70:10: 1e:85:1c:0d:f8:26:2b:56:37:da:ea:99:23:67:4c: 98:a9:9e:2d:79:28:ce:4d:18:d0:9a:10:4f:74:28: 23:4b:a0:5a:cc:f6:f6:c4:04:52:cb:ec:23:01:a1: 37:61:51:00:eb:53:3d:21:91:a9:d6:08:10:49:2d: 4a:92:3b:8b:89:81:f8:1c:37:a7:c0:7e:89:dc:15: 6f:ea:c7:82:dc:26:61:45:71:51:b7:0f:64:28:74: 51:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:44:2B:01:E1:F3:1C:B4:B4:E8:02:01:0D:C8:2E:07:8A:79:3F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1cec2629-402e-3ceb-8ccc-f217d66c3876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:66:bc:e7:69:89:1e:c9:26:08:7d:17:7d:e0:b4:c4:53:23: 18:72:ea:54:36:11:b3:88:10:78:8b:5d:d3:78:8b:f1:9c:7b: cc:58:a4:cc:a9:9a:38:ea:36:d6:48:56:08:70:c0:5e:75:99: a3:7c:e3:8d:d4:9e:bd:40:9e:a0:d1:07:98:9e:b5:7b:fe:75: 2a:b3:1f:3a:e0:89:d0:b3:a1:27:95:a3:46:19:43:57:01:4d: 44:f1:85:5c:2a:71:d6:e2:6f:ee:ff:a1:43:6f:00:9b:e2:d8: f1:27:b7:83:c1:e0:00:79:82:5c:25:f0:36:ae:b0:67:ea:7a: 7b:92:82:0f:02:82:d1:5e:8b:fd:7b:2f:59:70:5b:ba:bd:8f: ee:2e:06:54:45:86:60:58:7b:b2:52:4f:a9:ef:ee:3d:b4:a7: 1a:e8:4c:e0:59:dd:a3:a2:b8:33:c4:1f:1c:dc:dc:c3:24:a5: 67:eb:03:ca:a6:89:1f:a4:90:25:75:96:3e:55:a1:1e:8d:f1: 19:59:25:1f:1d:74:f6:c8:62:70:c9:9d:26:c6:61:37:29:23: 8b:e8:f5:9b:05:f2:76:e7:18:2d:94:85:c5:bd:ae:82:9c:46: da:fe:72:47:c9:3a:b8:d9:88:02:31:15:64:4d:f0:3f:09:00: 4a:25:fe:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKrBDyanbiguWezAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MGQyYjEyMzItNjFlOS00MjA1LTkxNDQtNjczYjM5MDAxYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoFroScL4dRncRdOBNZLVb5Xzh7gIuK5r9hT srAZz5nJRVekILDT/xXy9D21CCE6+5TDY91X5jTiExHtilTX3yJtQd32vYbVfMKu UhEIGpJTRrNzdJpVCZnQYoQf3UDwRzzZqfjLSm4lvA7IpYU41N2Emnn7MPWDnFKQ PkzasXqtzIUXjTSt1ZLirjhMoDOux06ofO6EyKst2zYS0C7aks0KcBAehRwN+CYr Vjfa6pkjZ0yYqZ4teSjOTRjQmhBPdCgjS6BazPb2xARSy+wjAaE3YVEA61M9IZGp 1ggQSS1KkjuLiYH4HDenwH6J3BVv6seC3CZhRXFRtw9kKHRRdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtEKwHh8xy0tOgCAQ3ILgeKeT96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWNlYzI2MjktNDAyZS0z Y2ViLThjY2MtZjIxN2Q2NmMzODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtmvOdpiR7JJgh9F33gtMRTIxhy6lQ2EbOIEHiLXdN4i/Gce8xYpMyp mjjqNtZIVghwwF51maN8443Unr1AnqDRB5ietXv+dSqzHzrgidCzoSeVo0YZQ1cB TUTxhVwqcdbib+7/oUNvAJvi2PEnt4PB4AB5glwl8DausGfqenuSgg8CgtFei/17 L1lwW7q9j+4uBlRFhmBYe7JST6nv7j20pxroTOBZ3aOiuDPEHxzc3MMkpWfrA8qm iR+kkCV1lj5VoR6N8RlZJR8ddPbIYnDJnSbGYTcpI4vo9ZsF8nbnGC2UhcW9roKc Rtr+ckfJOrjZiAIxFWRN8D8JAEol/is= -----END CERTIFICATE-----Generated at Wed May 13 15:21:21 2026 by rpki-client