$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498f559f-c7aa-317b-8270-d4d95ffdba36.roa File: 498f559f-c7aa-317b-8270-d4d95ffdba36.roa (raw, json) Hash identifier: ErLQK1Dlkdyybm8ve5QqzPHUcUKrg5y9Kh1f0a/n9BY= Subject key identifier: 7C:8D:44:EA:85:25:EB:74:B6:F9:BA:1D:43:28:A9:F9:33:2E:69:AE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D9A20353B3C08EA39BC1B0BC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498f559f-c7aa-317b-8270-d4d95ffdba36.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 402044 IP address blocks: 68.167.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:35:3b:3c:08:ea:39:bc:1b:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=3bd35320-f4e7-4137-b75d-28267167c7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:58:8f:19:17:0d:63:5a:31:66:e0:db:35:40: 37:11:a4:02:5d:6b:c1:d7:40:31:cb:8a:1f:6a:c6: 89:45:2a:9e:c1:1f:ae:22:77:a0:3c:d4:bc:9f:1e: 55:44:9c:64:a1:e6:bb:15:2f:7d:03:c9:e7:e2:70: 60:f4:eb:d8:7e:7d:5a:42:64:e2:3d:db:d8:09:31: a7:ca:66:85:ee:af:a7:2d:a0:c7:10:db:e9:af:58: 18:c9:ec:ee:30:78:d2:13:ef:4a:ab:99:01:ae:c0: 3e:8e:41:76:fd:ac:8e:5b:be:25:1b:86:f0:99:ef: f6:3e:fc:62:5e:c9:bd:5f:5f:ce:0c:8e:b3:3c:ac: 1d:95:4c:8b:28:a4:94:15:ee:72:11:06:ac:c7:76: 7e:f2:37:1d:5b:79:9a:1a:23:26:aa:ac:33:44:d9: c4:5d:f8:cb:c7:e3:5a:d7:81:0f:5e:a9:c7:49:7e: 25:5e:de:0e:86:33:62:67:c7:11:6a:82:f7:38:1f: 62:6b:e3:17:e3:9c:e8:c2:a9:79:20:cc:43:0a:2d: 55:98:f2:0e:ee:a7:a9:e6:2e:63:eb:b8:27:ba:c6: 11:39:fb:40:ca:9d:a4:b0:77:a6:27:00:68:1d:de: b7:08:2e:fc:37:7c:68:29:5e:45:1a:6e:a3:fb:e7: 54:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8D:44:EA:85:25:EB:74:B6:F9:BA:1D:43:28:A9:F9:33:2E:69:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/498f559f-c7aa-317b-8270-d4d95ffdba36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:e1:93:33:20:83:5c:7c:85:86:0a:8d:fb:db:0a:0d:95:62: 74:13:bb:24:a4:ae:c5:1a:49:55:58:09:9a:20:c0:04:27:89: ff:c9:46:61:3a:e9:b8:e2:6d:15:84:d8:a1:ff:41:73:f0:bf: ee:89:1f:b9:5e:d8:9e:8e:32:86:2a:17:97:db:62:6f:06:0c: 25:de:f1:b6:40:6f:2c:5f:13:c7:a2:19:33:36:10:e5:d0:a6: b2:8d:5c:2f:5c:c8:8f:22:d6:96:0b:58:b0:71:3f:a9:d1:6b: e0:b0:05:63:68:db:0f:5a:83:5a:13:6b:d3:48:fc:35:90:7e: fd:d1:28:03:c1:eb:9b:ea:d2:79:20:f7:46:66:3a:6c:60:11: c0:a6:8a:1a:9e:1b:df:a6:17:9c:d9:7f:1a:36:b3:35:74:21: da:48:0f:33:af:35:e7:a2:c4:c4:9c:0f:1d:be:6f:ad:68:31: 4b:b3:ef:c3:ee:09:92:8c:d8:37:a9:4e:a0:a2:a7:06:d4:63: e7:c8:c0:30:a0:dd:86:33:b8:3a:38:30:c5:0e:70:d6:af:07: 43:f7:97:05:38:5e:c9:0b:48:d1:ba:ea:6a:aa:32:51:4e:49: 14:08:7c:85:e1:65:da:3e:1c:42:7b:43:f7:b8:ae:a9:e5:49: 06:03:9a:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDU7PAjqObwbC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk M2JkMzUzMjAtZjRlNy00MTM3LWI3NWQtMjgyNjcxNjdjN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFiPGRcNY1oxZuDbNUA3EaQCXWvB10Axy4of asaJRSqewR+uInegPNS8nx5VRJxkoea7FS99A8nn4nBg9OvYfn1aQmTiPdvYCTGn ymaF7q+nLaDHENvpr1gYyezuMHjSE+9Kq5kBrsA+jkF2/ayOW74lG4bwme/2Pvxi Xsm9X1/ODI6zPKwdlUyLKKSUFe5yEQasx3Z+8jcdW3maGiMmqqwzRNnEXfjLx+Na 14EPXqnHSX4lXt4OhjNiZ8cRaoL3OB9ia+MX45zowql5IMxDCi1VmPIO7qep5i5j 67gnusYROftAyp2ksHemJwBoHd63CC78N3xoKV5FGm6j++dUXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyNROqFJet0tvm6HUMoqfkzLmmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDk4ZjU1OWYtYzdhYS0z MTdiLTgyNzAtZDRkOTVmZmRiYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXhkzMgg1x8hYYKjfvbCg2VYnQTuySkrsUaSVVYCZogwAQnif/JRmE6 6bjibRWE2KH/QXPwv+6JH7le2J6OMoYqF5fbYm8GDCXe8bZAbyxfE8eiGTM2EOXQ prKNXC9cyI8i1pYLWLBxP6nRa+CwBWNo2w9ag1oTa9NI/DWQfv3RKAPB65vq0nkg 90ZmOmxgEcCmihqeG9+mF5zZfxo2szV0IdpIDzOvNeeixMScDx2+b61oMUuz78Pu CZKM2DepTqCipwbUY+fIwDCg3YYzuDo4MMUOcNavB0P3lwU4XskLSNG66mqqMlFO SRQIfIXhZdo+HEJ7Q/e4rqnlSQYDmrs= -----END CERTIFICATE-----Generated at Wed May 13 14:00:21 2026 by rpki-client