$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/706fd79a-709e-3b7f-ba5b-7131a4a77b7b.roa File: 706fd79a-709e-3b7f-ba5b-7131a4a77b7b.roa (raw, json) Hash identifier: pNCzj53yjdZJrfBzTM9oFklAI4WC+gTQEuseYf5Js38= Subject key identifier: 08:A4:6F:21:6F:31:50:0A:BF:62:FF:85:F3:82:41:3D:56:FF:96:E3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D9FB58EA86333B441F7597F00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/706fd79a-709e-3b7f-ba5b-7131a4a77b7b.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 174 IP address blocks: 68.167.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:8e:a8:63:33:b4:41:f7:59:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=5425acbb-8c79-4363-bfaf-fe36819547a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1c:03:e6:fb:3a:a7:30:df:5c:34:a1:7f:52: 8a:93:70:21:85:38:fe:7f:6e:0b:5c:4d:e4:d4:bb: ea:91:99:59:b2:95:09:61:7e:b2:4d:26:21:2f:51: 43:48:c1:43:42:9e:c0:a9:99:80:3c:40:2a:b3:27: 2d:73:6c:40:1d:a4:d7:a6:39:96:f7:cd:91:41:de: e5:42:12:49:f6:bd:a6:69:48:d2:f2:3d:74:4b:05: fd:e2:86:6d:ee:a8:e9:9f:22:8e:b6:18:11:11:f6: 53:4b:b8:ee:87:c8:41:ad:2b:e6:23:56:46:a6:e0: 65:20:07:c8:39:96:90:b6:2f:31:79:ad:d9:24:ec: b2:8f:26:ac:25:14:f7:60:86:3d:af:34:ab:9e:45: 8c:6c:2f:93:20:ec:db:c8:aa:db:c0:a5:00:2a:90: 5b:03:1f:20:50:90:94:42:55:f3:61:2d:ba:70:55: bf:67:0f:5c:74:27:40:13:b7:5d:a6:5f:72:64:b5: 55:f0:a9:8a:22:67:69:6d:c3:74:d1:a1:d0:5a:93: 89:2d:38:dd:c1:10:ef:4e:ca:29:ec:6c:18:73:9f: 5b:b7:7b:95:18:61:aa:39:3c:48:17:26:b9:57:94: 5e:80:5e:a3:3c:65:2d:be:e1:3e:c4:f8:7a:57:3d: e8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A4:6F:21:6F:31:50:0A:BF:62:FF:85:F3:82:41:3D:56:FF:96:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/706fd79a-709e-3b7f-ba5b-7131a4a77b7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:48:51:3a:78:e3:16:06:49:a8:1b:27:75:17:05:fa:f1:e4: f0:75:72:76:b6:72:49:a8:99:7d:d7:a0:80:ad:7d:ba:46:92: 48:69:3e:e3:b5:cd:c4:75:97:f0:df:66:7f:81:4e:78:d1:b6: 7e:44:ba:99:66:8d:0d:9e:49:c4:6c:b8:1d:09:7a:dc:fc:b6: e1:42:f9:02:cc:ec:b7:8b:8a:4c:52:0c:16:36:d5:e0:93:2a: db:19:03:82:44:8b:d5:64:26:7d:6a:30:bd:78:a4:6e:a0:08: 8d:96:5c:74:b5:bd:56:80:99:45:49:25:51:ee:36:f1:0a:19: 3b:a4:73:d2:e0:bb:88:e8:3e:39:fb:45:c5:a4:60:e3:b3:9a: 32:b1:a8:5e:40:ab:7f:40:9c:ec:79:7b:b4:8d:53:11:9c:2e: 9b:2c:e6:e5:08:9e:2b:ff:02:e9:11:e5:43:33:ff:cf:c9:bd: 6e:7c:f5:b9:45:3e:4f:96:98:5d:a3:61:7d:87:db:bf:c2:41: e6:cc:9f:8a:3c:bf:94:19:f0:c3:a2:db:75:78:63:cf:1d:d7: ce:11:62:bc:77:61:3d:87:f3:9b:d9:9c:f1:e6:ed:4b:24:45: 48:6f:fb:3f:c7:f7:dc:c5:96:e4:01:5d:ed:6a:b4:fb:25:49: e1:a2:a3:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftY6oYzO0QfdZfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk NTQyNWFjYmItOGM3OS00MzYzLWJmYWYtZmUzNjgxOTU0N2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxwD5vs6pzDfXDShf1KKk3AhhTj+f24LXE3k 1LvqkZlZspUJYX6yTSYhL1FDSMFDQp7AqZmAPEAqsyctc2xAHaTXpjmW982RQd7l QhJJ9r2maUjS8j10SwX94oZt7qjpnyKOthgREfZTS7juh8hBrSvmI1ZGpuBlIAfI OZaQti8xea3ZJOyyjyasJRT3YIY9rzSrnkWMbC+TIOzbyKrbwKUAKpBbAx8gUJCU QlXzYS26cFW/Zw9cdCdAE7ddpl9yZLVV8KmKImdpbcN00aHQWpOJLTjdwRDvTsop 7GwYc59bt3uVGGGqOTxIFya5V5RegF6jPGUtvuE+xPh6Vz3oXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAikbyFvMVAKv2L/hfOCQT1W/5bjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzA2ZmQ3OWEtNzA5ZS0z YjdmLWJhNWItNzEzMWE0YTc3YjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKchMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFIUTp44xYGSagbJ3UXBfrx5PB1cna2ckmomX3XoICtfbpGkkhpPuO1 zcR1l/DfZn+BTnjRtn5EuplmjQ2eScRsuB0Jetz8tuFC+QLM7LeLikxSDBY21eCT KtsZA4JEi9VkJn1qML14pG6gCI2WXHS1vVaAmUVJJVHuNvEKGTukc9Lgu4joPjn7 RcWkYOOzmjKxqF5Aq39AnOx5e7SNUxGcLpss5uUIniv/AukR5UMz/8/JvW589blF Pk+WmF2jYX2H27/CQebMn4o8v5QZ8MOi23V4Y88d184RYrx3YT2H85vZnPHm7Usk RUhv+z/H99zFluQBXe1qtPslSeGioz8= -----END CERTIFICATE-----Generated at Wed May 13 12:47:53 2026 by rpki-client