$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d2b69d0-2948-3de5-8496-469612614e42.roa File: 2d2b69d0-2948-3de5-8496-469612614e42.roa (raw, json) Hash identifier: 5OEipy/Vmn5aR3KKln/f3elGNptR0RHX5F7WXL0Pljk= Subject key identifier: A2:E4:8B:7D:36:A7:4A:ED:97:CB:2B:D0:97:06:F7:A2:2C:9B:46:48 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D35A0167DEFAA500D04742F00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d2b69d0-2948-3de5-8496-469612614e42.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 152689 IP address blocks: 68.165.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:16:7d:ef:aa:50:0d:04:74:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=61e7b04b-fd4e-456e-8760-8d28ed4b350a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:ff:6d:7b:a0:93:d2:e8:bd:5b:b0:c7:c0: e7:5a:14:32:ee:75:d0:a2:fc:a4:62:3e:6a:60:74: b7:82:58:15:27:84:5f:64:ac:41:7d:07:5b:f0:18: 5c:7f:f6:c6:d2:bb:79:79:27:eb:c0:9b:f2:1e:21: 39:66:1e:1e:88:cd:e8:85:64:06:0d:de:d6:fb:20: 90:5c:5d:69:9b:5c:db:31:f7:1b:09:35:e8:40:1a: f5:22:32:25:c9:03:a8:10:1a:29:c6:66:82:55:3f: f8:83:15:9a:cb:59:57:90:09:ef:a7:9e:2e:b9:00: 25:02:1f:36:02:06:6d:d1:a3:44:06:84:20:bc:14: b0:c0:2d:05:cd:33:b7:fd:1d:64:51:0c:d1:53:45: b2:8d:9d:34:4d:1c:c7:94:e7:30:96:38:37:a0:a6: 91:dd:e0:e3:10:12:6a:74:5c:a9:a8:e3:9e:ff:eb: ae:dd:fd:b8:aa:d6:1e:44:0e:84:eb:45:13:ba:ed: f7:9e:89:a6:13:40:44:29:0e:15:e9:c9:38:81:36: 7c:e3:c9:73:72:0f:70:96:5d:af:49:fd:22:d7:a3: cc:68:22:e0:31:0c:bc:da:fc:c0:01:e2:7c:f8:bd: 2e:37:a0:08:24:3b:64:a6:3e:14:e8:ed:e4:40:a4: f3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E4:8B:7D:36:A7:4A:ED:97:CB:2B:D0:97:06:F7:A2:2C:9B:46:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2d2b69d0-2948-3de5-8496-469612614e42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:54:f4:77:21:c0:e0:45:82:9d:63:13:7b:29:74:16:84:ff: 05:20:31:14:11:7a:08:59:ef:46:fc:fc:fb:3b:3c:17:76:2e: 48:b7:fe:ec:1f:84:28:19:5f:55:76:45:65:21:8f:ce:86:58: 22:97:ed:0f:0c:1d:94:db:04:61:13:64:5e:7f:91:34:7d:45: a8:de:4a:36:64:b7:41:90:15:76:78:55:eb:6f:f1:a8:c2:ad: e6:ed:5b:2d:23:3b:5f:34:d5:a4:8e:ca:94:7c:a7:cb:30:a7: 51:75:b6:b8:c1:e0:f8:1e:34:6c:79:b1:22:80:cc:f6:66:cd: ae:ad:ad:63:84:86:e2:d5:ec:6c:aa:12:d3:1b:a3:33:cd:44: 20:e6:90:02:ec:57:5d:14:ef:bb:39:c8:8b:42:c4:b5:c8:76: 6b:9a:51:b5:55:68:72:b5:fc:3f:f3:88:01:63:57:07:0e:fa: 53:0f:ed:13:b7:a8:25:51:38:84:5a:f8:8f:04:75:ec:11:67: 70:d6:8a:4e:50:50:d0:df:4d:ef:23:d6:60:6e:b1:12:ac:20: 3c:4f:55:90:f3:1b:49:f1:40:96:5b:1f:5a:8e:0d:a7:e6:be: 60:44:ba:f6:af:e0:b2:2f:1b:8f:34:6f:cb:4e:03:61:0a:2b: e3:3d:3b:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oBZ976pQDQR0LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NjFlN2IwNGItZmQ0ZS00NTZlLTg3NjAtOGQyOGVkNGIzNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqST/bXugk9LovVuwx8DnWhQy7nXQovykYj5q YHS3glgVJ4RfZKxBfQdb8Bhcf/bG0rt5eSfrwJvyHiE5Zh4eiM3ohWQGDd7W+yCQ XF1pm1zbMfcbCTXoQBr1IjIlyQOoEBopxmaCVT/4gxWay1lXkAnvp54uuQAlAh82 AgZt0aNEBoQgvBSwwC0FzTO3/R1kUQzRU0WyjZ00TRzHlOcwljg3oKaR3eDjEBJq dFypqOOe/+uu3f24qtYeRA6E60UTuu33nommE0BEKQ4V6ck4gTZ848lzcg9wll2v Sf0i16PMaCLgMQy82vzAAeJ8+L0uN6AIJDtkpj4U6O3kQKTzgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLki302p0rtl8sr0JcG96Ism0ZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMmQyYjY5ZDAtMjk0OC0z ZGU1LTg0OTYtNDY5NjEyNjE0ZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtU9HchwOBFgp1jE3spdBaE/wUgMRQReghZ70b8/Ps7PBd2Lki3/uwf hCgZX1V2RWUhj86GWCKX7Q8MHZTbBGETZF5/kTR9RajeSjZkt0GQFXZ4Vetv8ajC rebtWy0jO1801aSOypR8p8swp1F1trjB4PgeNGx5sSKAzPZmza6trWOEhuLV7Gyq EtMbozPNRCDmkALsV10U77s5yItCxLXIdmuaUbVVaHK1/D/ziAFjVwcO+lMP7RO3 qCVROIRa+I8EdewRZ3DWik5QUNDfTe8j1mBusRKsIDxPVZDzG0nxQJZbH1qODafm vmBEuvav4LIvG480b8tOA2EKK+M9O9k= -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:53 2026 by rpki-client