$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e99134a0-ad1a-33b8-8fb1-6af47c981af5.roa File: e99134a0-ad1a-33b8-8fb1-6af47c981af5.roa (raw, json) Hash identifier: Fy1DBZe+0DQl7CXzXpaoIYtyxHwmV9Z+HybEj6TOwus= Subject key identifier: 08:1F:D8:7D:87:E1:44:63:EA:41:25:06:DC:05:0F:FE:D3:A5:1A:37 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D143D5A0F488AB6AD89A8AF90 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e99134a0-ad1a-33b8-8fb1-6af47c981af5.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 5650 IP address blocks: 68.167.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:5a:0f:48:8a:b6:ad:89:a8:af:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=a1bbab7b-7f66-4dcc-aaa7-4c26d653ad26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:97:73:b2:42:65:73:e0:86:f6:be:11:ff: c7:de:58:0a:9d:d3:e3:1d:4c:48:9a:ac:1f:3e:7c: 64:fc:c7:5e:e4:49:23:89:35:77:f9:ef:cd:2a:43: 9d:e8:be:b7:c3:e9:97:52:b2:7d:b2:ac:55:3d:09: 51:96:3e:03:cc:64:dc:dc:e6:52:3d:b1:12:32:ab: 08:cf:6e:13:f8:a6:00:3f:ec:0f:f5:30:b3:ab:91: ce:54:b0:78:fb:e5:18:65:6d:29:24:4d:47:89:c5: da:4e:7a:e3:50:d1:76:09:4b:c8:fc:51:de:09:2e: 01:c2:92:b2:44:09:53:32:27:ee:7d:c6:be:af:13: 21:17:ce:8b:f6:9f:13:84:6e:6d:32:ef:93:c8:0a: 91:94:a8:5a:8d:f5:2e:5b:aa:62:63:ab:e5:01:89: 22:7b:6a:eb:2c:10:79:b4:ae:7f:37:32:9f:94:d4: cd:b9:41:c3:0b:f3:77:b1:24:c8:76:c3:08:0d:49: fd:5e:54:dd:7f:9e:1d:9e:7a:3b:64:46:1d:78:bc: 35:03:1b:44:e8:e4:25:58:8f:15:89:ba:ad:0e:5f: bb:23:b6:92:ed:87:24:c6:17:b2:5b:3a:c6:29:25: 25:58:a7:c2:14:45:05:b0:54:54:cb:db:61:c0:a5: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1F:D8:7D:87:E1:44:63:EA:41:25:06:DC:05:0F:FE:D3:A5:1A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e99134a0-ad1a-33b8-8fb1-6af47c981af5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:23:a8:b1:a0:8a:5a:99:76:92:32:d1:60:47:85:12:15:4f: e5:bc:30:a7:73:77:64:5c:97:46:2c:4b:b9:3f:6f:c3:e6:18: 3d:d6:f6:65:d9:74:64:c2:21:40:58:e9:50:25:7d:fa:68:b8: 77:61:93:a7:4d:4d:c6:43:ae:95:82:74:cd:aa:27:ed:02:2c: e0:b9:33:91:bf:76:20:0d:4c:98:5e:06:20:23:6e:58:1e:af: 7f:17:bb:a7:1e:16:49:c9:a2:0e:be:4d:cb:7e:ea:7a:16:b0: 89:d1:ea:b6:e1:e7:11:0c:3a:9d:f8:8f:e8:aa:42:d3:9c:c2: 9d:8b:f4:00:9a:3c:02:3f:a3:79:26:42:3a:8b:d2:57:6c:3b: 91:e0:c6:b8:25:36:05:20:42:6a:f5:4d:53:5b:ca:e0:44:28: 21:ff:0e:ad:fa:c3:e3:17:02:28:b0:d2:d1:82:7a:22:2b:d6: d9:31:b0:b0:1f:7f:9e:d9:33:da:71:a0:59:c2:df:ad:ef:8d: 91:b8:d5:92:ff:65:b6:a9:3a:e2:72:94:50:58:6d:4d:f8:62: 55:2c:a9:32:62:a2:1e:28:2d:87:e2:ce:ff:ac:2a:77:4d:bc: 99:82:5d:ef:a0:a5:1b:73:2d:8d:66:dc:09:e8:c9:be:f5:53: df:36:94:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPVoPSIq2rYmor5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YTFiYmFiN2ItN2Y2Ni00ZGNjLWFhYTctNGMyNmQ2NTNhZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFqXc7JCZXPghva+Ef/H3lgKndPjHUxImqwf Pnxk/Mde5EkjiTV3+e/NKkOd6L63w+mXUrJ9sqxVPQlRlj4DzGTc3OZSPbESMqsI z24T+KYAP+wP9TCzq5HOVLB4++UYZW0pJE1HicXaTnrjUNF2CUvI/FHeCS4BwpKy RAlTMifufca+rxMhF86L9p8ThG5tMu+TyAqRlKhajfUuW6piY6vlAYkie2rrLBB5 tK5/NzKflNTNuUHDC/N3sSTIdsMIDUn9XlTdf54dnno7ZEYdeLw1AxtE6OQlWI8V ibqtDl+7I7aS7YckxheyWzrGKSUlWKfCFEUFsFRUy9thwKU+3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgf2H2H4URj6kElBtwFD/7TpRo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTk5MTM0YTAtYWQxYS0z M2I4LThmYjEtNmFmNDdjOTgxYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKcyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUjqLGgilqZdpIy0WBHhRIVT+W8MKdzd2Rcl0YsS7k/b8PmGD3W9mXZ dGTCIUBY6VAlffpouHdhk6dNTcZDrpWCdM2qJ+0CLOC5M5G/diANTJheBiAjblge r38Xu6ceFknJog6+Tct+6noWsInR6rbh5xEMOp34j+iqQtOcwp2L9ACaPAI/o3km QjqL0ldsO5HgxrglNgUgQmr1TVNbyuBEKCH/Dq36w+MXAiiw0tGCeiIr1tkxsLAf f57ZM9pxoFnC363vjZG41ZL/ZbapOuJylFBYbU34YlUsqTJioh4oLYfizv+sKndN vJmCXe+gpRtzLY1m3Anoyb71U982lEA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:23:05 2026 by rpki-client