$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c0dce1b-92a8-333d-a06b-6dbc3b777a35.roa File: 9c0dce1b-92a8-333d-a06b-6dbc3b777a35.roa (raw, json) Hash identifier: dpe6ounvAjOgV1nlzCp36kedQTFIo7tM1F8Tl/NaHWo= Subject key identifier: AC:BD:54:C2:30:E3:A1:93:D4:24:06:85:98:F8:48:D2:2F:91:2F:75 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D463AB3EE6F52C828B25AA380 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c0dce1b-92a8-333d-a06b-6dbc3b777a35.roa Signing time: Tue 24 Mar 2026 11:46:26 +0000 ROA not before: Tue 24 Mar 2026 11:46:26 +0000 ROA not after: Mon 22 Jun 2026 11:46:26 +0000 asID: 200017 IP address blocks: 68.167.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:3a:b3:ee:6f:52:c8:28:b2:5a:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 24 11:46:26 2026 GMT Not After : Jun 22 11:46:26 2026 GMT Subject: CN=d50e7b39-c6ef-4db1-94c9-0582f6eb4981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6b:38:84:60:5d:6b:e9:ef:95:b6:25:25:f5: 69:36:df:77:36:b6:85:22:c8:3b:6f:ac:7f:4e:e8: 78:f2:7c:1d:63:19:a5:57:5a:5d:87:8c:87:23:d7: 25:6f:95:9c:5f:da:9a:50:67:06:0a:ba:85:a0:cc: 45:31:86:49:1d:eb:4e:a3:79:61:09:f9:50:33:7e: 6e:63:9f:9a:d7:e8:07:fe:23:dc:cd:d0:11:a8:f3: 69:af:4b:00:bb:1a:a6:02:24:bc:92:95:f4:d6:ac: 6f:7d:cf:a1:f4:df:03:6e:ca:51:7b:3d:65:51:54: 13:d1:22:83:5f:3d:d5:8e:88:5f:3d:c4:ae:78:84: e0:c3:00:a3:19:4f:78:8c:db:73:08:f4:28:90:40: a6:7e:9e:c3:c2:83:c7:b9:9b:72:41:97:bf:00:95: e4:c2:be:95:39:cf:15:64:4e:40:db:36:21:f0:98: e7:37:d0:d2:24:49:95:00:c4:d9:26:8c:f4:89:ac: 0a:c4:7a:e1:3b:6d:ab:72:72:a7:46:18:c5:24:21: 79:ff:2b:25:59:55:e0:63:ce:25:c2:20:f0:39:89: ac:a6:f7:64:a0:50:da:2f:9a:8b:35:ec:80:c5:ce: a4:f1:f1:cf:36:ed:8e:ac:db:9c:e3:28:1c:dd:9c: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BD:54:C2:30:E3:A1:93:D4:24:06:85:98:F8:48:D2:2F:91:2F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9c0dce1b-92a8-333d-a06b-6dbc3b777a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:89:f6:65:03:41:51:cf:94:bc:40:c6:08:7f:bd:6d:9e:56: 7f:6e:d5:6c:28:ce:03:03:1a:d9:2f:a0:a3:ad:f9:2e:34:00: 93:24:3a:e9:59:9c:f6:54:5c:00:54:04:41:42:4c:8c:1b:3a: 85:7d:42:8e:32:1b:41:e2:18:2c:fc:34:e5:48:0f:dd:33:cc: 19:b1:df:33:77:e1:fe:04:0e:0d:9b:d7:ad:90:b3:72:ac:7f: 79:58:a0:f5:ba:ec:9a:c9:c7:ab:79:a0:6b:33:10:df:4b:75: 9a:88:00:98:53:0d:5c:5f:7d:2e:db:89:68:b6:23:ae:3c:2d: 46:9b:8d:e1:ad:39:79:4f:21:d6:03:9b:31:3b:e2:d5:70:2b: 60:bd:32:76:6b:a0:65:e9:8a:a6:62:97:c0:d9:30:e3:17:06: 5e:f1:08:04:38:c2:0e:cd:60:13:50:44:ed:0d:94:85:6e:d9: bf:77:d1:79:f1:bd:fd:51:4f:f6:1f:3e:16:23:dc:d0:95:6e: 9d:29:8b:a7:d4:31:1a:1a:cd:85:d1:8f:95:ae:74:ed:c0:e0: 88:aa:db:91:07:e0:63:5a:0d:a6:22:53:c5:32:74:b2:47:98: 69:ae:5f:bb:1a:2c:fc:ce:0a:ad:80:44:37:40:8e:e9:45:54: d7:dd:6e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GOrPub1LIKLJao4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNDExNDYyNloXDTI2MDYyMjExNDYyNlowLzEtMCsGA1UEAxMk ZDUwZTdiMzktYzZlZi00ZGIxLTk0YzktMDU4MmY2ZWI0OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGs4hGBda+nvlbYlJfVpNt93NraFIsg7b6x/ Tuh48nwdYxmlV1pdh4yHI9clb5WcX9qaUGcGCrqFoMxFMYZJHetOo3lhCflQM35u Y5+a1+gH/iPczdARqPNpr0sAuxqmAiS8kpX01qxvfc+h9N8DbspRez1lUVQT0SKD Xz3VjohfPcSueITgwwCjGU94jNtzCPQokECmfp7DwoPHuZtyQZe/AJXkwr6VOc8V ZE5A2zYh8JjnN9DSJEmVAMTZJoz0iawKxHrhO22rcnKnRhjFJCF5/yslWVXgY84l wiDwOYmspvdkoFDaL5qLNeyAxc6k8fHPNu2OrNuc4ygc3Zz53wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy9VMIw46GT1CQGhZj4SNIvkS91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWMwZGNlMWItOTJhOC0z MzNkLWEwNmItNmRiYzNiNzc3YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASJ9mUDQVHPlLxAxgh/vW2eVn9u1WwozgMDGtkvoKOt+S40AJMkOulZ nPZUXABUBEFCTIwbOoV9Qo4yG0HiGCz8NOVID90zzBmx3zN34f4EDg2b162Qs3Ks f3lYoPW67JrJx6t5oGszEN9LdZqIAJhTDVxffS7biWi2I648LUabjeGtOXlPIdYD mzE74tVwK2C9MnZroGXpiqZil8DZMOMXBl7xCAQ4wg7NYBNQRO0NlIVu2b930Xnx vf1RT/YfPhYj3NCVbp0pi6fUMRoazYXRj5WudO3A4Iiq25EH4GNaDaYiU8UydLJH mGmuX7saLPzOCq2ARDdAjulFVNfdbrA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:41:27 2026 by rpki-client