$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86966c7e-0723-3ddb-9037-7b83aac26ce5.roa File: 86966c7e-0723-3ddb-9037-7b83aac26ce5.roa (raw, json) Hash identifier: w7E869aWsLby25akTaC1VIorqD17YKY1Ansy2RmQMHQ= Subject key identifier: 08:13:9E:32:2A:51:04:8B:31:AC:B2:E9:B5:6B:7F:2F:CA:6C:A6:F2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D332055A3145888E71A06A5C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86966c7e-0723-3ddb-9037-7b83aac26ce5.roa Signing time: Tue 17 Mar 2026 15:32:57 +0000 ROA not before: Tue 17 Mar 2026 15:32:57 +0000 ROA not after: Mon 15 Jun 2026 15:32:57 +0000 asID: 6079 IP address blocks: 68.164.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:20:55:a3:14:58:88:e7:1a:06:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 17 15:32:57 2026 GMT Not After : Jun 15 15:32:57 2026 GMT Subject: CN=910e1832-1174-43b3-bcaf-4fef4c4fadb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:2c:f6:da:d2:3f:e7:1a:c2:8b:2a:b3:57: fa:11:c4:fc:e8:d2:5f:51:25:ec:b2:88:b2:e2:1d: 52:79:2d:2b:5b:d9:10:72:ce:19:47:cc:05:5b:26: b0:5c:30:c1:1d:64:a7:d6:4c:6b:44:5d:d2:04:54: 99:d5:ec:fb:d4:0b:63:cf:23:5f:d0:1e:19:62:c2: 1d:b6:e8:65:67:af:f3:0d:eb:8a:50:92:e9:1a:0e: 93:8d:c4:57:91:88:88:6e:34:14:fd:56:90:6e:1a: d8:49:de:4d:42:c6:3e:e5:b9:7b:ce:aa:f6:f4:bc: 82:2f:1c:41:56:e8:a7:49:dd:77:c2:0b:71:d4:9a: 29:86:b7:b1:00:61:bb:39:47:53:b8:f0:c4:8e:e8: 54:70:27:27:c0:70:74:aa:a0:81:31:c7:40:7f:66: a4:6e:52:ee:73:61:e9:f9:73:02:9e:83:23:cb:ba: 11:80:cb:e6:f8:61:cb:af:b1:63:60:9b:df:3b:c7: b9:40:97:2d:a6:cb:7b:fa:73:ab:5f:26:69:1e:65: 00:be:38:5d:80:f6:96:db:65:ad:81:b8:0c:e9:45: 54:60:76:8e:d8:a3:92:bb:a9:a4:4e:5d:ae:72:94: 2f:75:82:2a:1b:5e:5e:dd:3e:64:1a:df:21:55:83: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:13:9E:32:2A:51:04:8B:31:AC:B2:E9:B5:6B:7F:2F:CA:6C:A6:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86966c7e-0723-3ddb-9037-7b83aac26ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:28:49:19:e1:37:da:b6:a4:ae:b0:5d:93:d3:47:05:69:d6: bc:0c:42:9b:c4:3a:42:d5:cf:1b:2e:5a:6d:e0:55:b2:81:c0: 85:90:1c:dc:4d:51:bc:00:e8:f6:5e:3c:05:b0:a5:59:2c:6e: b0:df:a9:0e:4e:8f:16:7e:17:a5:35:f9:25:bf:5d:fb:4c:1e: b9:4f:37:60:bb:a1:c9:26:c7:f3:16:e0:dd:0e:8c:29:08:2f: 5d:a1:de:d6:73:ba:a9:ef:b9:f6:5a:aa:cb:7a:93:cc:55:d2: b3:a2:f0:c9:be:a8:72:fb:d4:f1:d0:dd:71:66:00:9d:bc:0d: 44:43:03:f0:a6:97:d6:4e:fd:f5:aa:a4:e7:9f:79:fb:ba:80: 57:17:70:46:59:2d:d3:d3:91:57:a9:70:d1:21:72:89:81:84: 8f:8d:e6:a3:8f:01:50:89:db:5e:d2:3c:e3:5e:91:da:19:79: 00:fb:bc:73:5d:f9:f9:62:09:de:9b:2e:34:e3:9c:71:7d:59: 3a:2c:0e:20:0c:14:98:ca:7d:be:08:5f:f2:44:df:e6:7b:ab: 13:4b:ab:f2:af:c0:84:d6:b0:18:af:b4:1a:18:9f:a6:85:03: 20:3a:45:64:b9:4a:24:82:7f:e0:ed:92:02:c2:e3:8f:17:7b: 9f:4c:9e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0zIFWjFFiI5xoGpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxNzE1MzI1N1oXDTI2MDYxNTE1MzI1N1owLzEtMCsGA1UEAxMk OTEwZTE4MzItMTE3NC00M2IzLWJjYWYtNGZlZjRjNGZhZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGUs9trSP+cawosqs1f6EcT86NJfUSXssoiy 4h1SeS0rW9kQcs4ZR8wFWyawXDDBHWSn1kxrRF3SBFSZ1ez71AtjzyNf0B4ZYsId tuhlZ6/zDeuKUJLpGg6TjcRXkYiIbjQU/VaQbhrYSd5NQsY+5bl7zqr29LyCLxxB VuinSd13wgtx1JophrexAGG7OUdTuPDEjuhUcCcnwHB0qqCBMcdAf2akblLuc2Hp +XMCnoMjy7oRgMvm+GHLr7FjYJvfO8e5QJctpst7+nOrXyZpHmUAvjhdgPaW22Wt gbgM6UVUYHaO2KOSu6mkTl2ucpQvdYIqG15e3T5kGt8hVYNkowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgTnjIqUQSLMayy6bVrfy/KbKbyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODY5NjZjN2UtMDcyMy0z ZGRiLTkwMzctN2I4M2FhYzI2Y2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4oSRnhN9q2pK6wXZPTRwVp1rwMQpvEOkLVzxsuWm3gVbKBwIWQHNxN UbwA6PZePAWwpVksbrDfqQ5OjxZ+F6U1+SW/XftMHrlPN2C7ockmx/MW4N0OjCkI L12h3tZzuqnvufZaqst6k8xV0rOi8Mm+qHL71PHQ3XFmAJ28DURDA/Cml9ZO/fWq pOefefu6gFcXcEZZLdPTkVepcNEhcomBhI+N5qOPAVCJ217SPONekdoZeQD7vHNd +fliCd6bLjTjnHF9WTosDiAMFJjKfb4IX/JE3+Z7qxNLq/KvwITWsBivtBoYn6aF AyA6RWS5SiSCf+DtkgLC448Xe59MnrM= -----END CERTIFICATE-----Generated at Thu Mar 26 22:59:15 2026 by rpki-client