$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdc50b8a-0332-3f21-a19f-0bb93b1f8d11.roa File: cdc50b8a-0332-3f21-a19f-0bb93b1f8d11.roa (raw, json) Hash identifier: 5O+GkbfwVrJ4BrAJSjSNFK7oP8q5gTOOtCW6xrGoNbY= Subject key identifier: BE:65:32:DE:32:B8:17:24:7F:E2:9E:9E:6B:F5:42:F8:77:1D:DE:F2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D359FCEF9005E60F79F00DE80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdc50b8a-0332-3f21-a19f-0bb93b1f8d11.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 152689 IP address blocks: 68.164.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ce:f9:00:5e:60:f7:9f:00:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=ec0e9398-59bb-4c71-80fe-d4843927436e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:47:89:1d:48:5c:31:16:57:50:dc:97:4b: 4c:f1:82:a4:6e:4e:53:f0:65:ed:a3:44:5c:f7:8e: ad:99:24:7d:34:2a:93:d9:5f:af:42:d4:fe:bf:07: 5f:eb:2f:80:4d:b4:3d:74:ca:25:7d:fa:f5:04:75: 38:05:86:a5:b9:27:ef:61:9c:37:65:d6:91:2d:56: 04:bd:44:a4:cb:21:d8:68:c2:de:71:38:87:ae:db: 83:dc:47:7f:56:3d:db:4f:84:ae:0c:88:6b:43:b9: fc:9f:09:6d:50:08:de:f0:7c:3f:93:0d:a3:17:1f: 24:5c:2a:da:db:98:20:c2:2e:23:e9:e6:22:82:46: 29:6a:b5:f1:f8:ac:e1:71:f7:34:67:50:e4:d3:58: 94:98:cb:a6:8c:3d:24:cb:9a:47:61:46:66:99:a2: e4:c6:a7:67:7d:96:a4:db:a3:bc:d1:15:bc:81:4e: aa:5b:c9:88:61:e3:c2:58:87:90:35:d5:47:e2:0c: f5:0e:33:be:a6:99:76:8a:1b:d4:1a:e5:62:d0:45: f8:e1:e3:04:39:a6:c9:b0:a1:5b:93:c9:3b:c1:12: cf:30:5a:09:17:52:1d:71:36:a0:f7:55:6d:6b:0d: 69:be:7a:9c:f6:9a:3b:d0:53:db:5a:d1:10:51:0b: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:65:32:DE:32:B8:17:24:7F:E2:9E:9E:6B:F5:42:F8:77:1D:DE:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cdc50b8a-0332-3f21-a19f-0bb93b1f8d11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:73:04:7f:94:b2:9a:ef:6b:53:5d:27:a8:74:87:83:87:b8: a3:3e:61:9b:3e:94:5b:82:b9:76:d3:0e:f2:0a:4b:66:a9:1d: e9:cc:9d:c1:90:4c:c9:99:23:0f:d7:b8:9b:82:a9:8f:6b:d9: 03:49:fc:56:29:c8:96:b0:a7:ca:de:b8:17:49:89:8b:d8:81: 9f:89:17:ae:52:45:eb:d9:f6:35:ab:96:bd:22:71:b3:88:50: 31:49:28:07:6d:20:f1:92:58:09:c6:c2:90:be:e8:64:ca:6f: e0:fa:f9:6b:aa:e8:16:61:8a:7b:00:a2:f7:a1:9e:a7:3b:5e: f7:74:77:c8:47:69:46:cd:3f:bc:a3:fd:95:39:62:59:42:20: 6d:c3:7b:94:ee:4f:b1:91:4d:2e:5b:3e:80:00:01:31:c9:60: d8:38:d2:d1:cb:4a:5e:4c:48:c5:07:97:1d:c5:28:c2:a3:4c: 3d:b7:ae:55:67:7c:78:4d:d9:ab:18:8f:ad:de:dd:a3:9b:39: 88:5a:f6:c9:02:a2:6e:c4:78:0f:38:33:03:1f:41:8f:e6:47: f1:78:a7:4b:4b:c0:b8:1a:79:b7:53:05:33:a6:35:2a:9a:7b: 6c:5a:55:e7:04:4d:8d:8c:b5:bd:4e:37:f2:c6:b1:e5:28:b7: a8:21:b0:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n875AF5g958A3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZWMwZTkzOTgtNTliYi00YzcxLTgwZmUtZDQ4NDM5Mjc0MzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkpHiR1IXDEWV1Dcl0tM8YKkbk5T8GXto0Rc 946tmSR9NCqT2V+vQtT+vwdf6y+ATbQ9dMolffr1BHU4BYaluSfvYZw3ZdaRLVYE vUSkyyHYaMLecTiHrtuD3Ed/Vj3bT4SuDIhrQ7n8nwltUAje8Hw/kw2jFx8kXCra 25ggwi4j6eYigkYparXx+Kzhcfc0Z1Dk01iUmMumjD0ky5pHYUZmmaLkxqdnfZak 26O80RW8gU6qW8mIYePCWIeQNdVH4gz1DjO+ppl2ihvUGuVi0EX44eMEOabJsKFb k8k7wRLPMFoJF1IdcTag91Vtaw1pvnqc9po70FPbWtEQUQuiNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5lMt4yuBckf+Kenmv1Qvh3Hd7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2RjNTBiOGEtMDMzMi0z ZjIxLWExOWYtMGJiOTNiMWY4ZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKS0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNzBH+Usprva1NdJ6h0h4OHuKM+YZs+lFuCuXbTDvIKS2apHenMncGQ TMmZIw/XuJuCqY9r2QNJ/FYpyJawp8reuBdJiYvYgZ+JF65SRevZ9jWrlr0icbOI UDFJKAdtIPGSWAnGwpC+6GTKb+D6+Wuq6BZhinsAovehnqc7Xvd0d8hHaUbNP7yj /ZU5YllCIG3De5TuT7GRTS5bPoAAATHJYNg40tHLSl5MSMUHlx3FKMKjTD23rlVn fHhN2asYj63e3aObOYha9skCom7EeA84MwMfQY/mR/F4p0tLwLgaebdTBTOmNSqa e2xaVecETY2Mtb1ON/LGseUot6ghsEk= -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:27 2026 by rpki-client