$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/febd8a44-adaf-3df0-a222-e5a2d23c7470.roa File: febd8a44-adaf-3df0-a222-e5a2d23c7470.roa (raw, json) Hash identifier: 3p0OyHK4azxnhXWVuPklbHeGAOmWeJ6nO1+NGEGakM8= Subject key identifier: 38:DC:C8:94:5B:F1:00:B9:43:B0:00:00:E0:2B:E2:AC:C8:CE:50:8A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D1DE49313590BCA84A3DDE8A0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/febd8a44-adaf-3df0-a222-e5a2d23c7470.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 7029 IP address blocks: 68.164.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:93:13:59:0b:ca:84:a3:dd:e8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=9dfaf141-bd21-4893-b940-d3ece1591612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:61:3d:31:d1:1e:f3:dc:33:37:0d:72:67: 30:55:aa:18:34:ad:30:0a:ae:56:a6:49:c6:45:71: 5b:74:35:63:07:c6:14:d2:71:21:90:ad:5e:68:e3: 04:8c:37:10:95:cf:52:9e:13:e1:4e:8c:3b:43:5e: 06:fd:72:62:c0:d7:9d:89:af:66:36:ed:ca:3e:5c: 32:01:27:5b:90:8e:a8:3e:58:2e:f2:d6:d2:45:c6: 07:80:79:b2:f6:47:44:2e:9f:4d:1d:0f:d4:a7:53: 35:ff:c3:29:a6:a9:2e:e8:72:bb:fa:a9:11:ef:59: f9:ea:54:97:ca:46:3f:02:ac:44:91:5a:93:f4:57: b4:13:48:aa:30:d0:a8:97:df:00:22:fb:1e:12:49: 06:f7:a4:bb:6b:c0:11:fe:9c:35:0f:37:f4:b1:84: 11:7d:d7:8d:3f:ac:14:86:8d:7e:51:cc:21:d0:23: a3:b1:25:e0:20:44:10:88:2c:85:f7:af:9f:df:1e: 77:33:ba:f9:b6:2e:bc:46:70:3c:17:81:07:ab:28: bf:30:79:cb:08:79:66:f6:c6:38:d4:27:7d:1f:6d: 8b:88:34:a5:61:79:1e:e0:37:e3:1c:d2:c6:be:d8: 2c:c9:0d:5a:0e:4a:e7:52:7f:e5:b6:00:23:44:95: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DC:C8:94:5B:F1:00:B9:43:B0:00:00:E0:2B:E2:AC:C8:CE:50:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/febd8a44-adaf-3df0-a222-e5a2d23c7470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:73:c6:92:d9:15:96:84:f2:dc:60:f1:d7:62:97:64:66:71: ec:8d:5f:1c:63:d5:d5:93:db:a4:08:5c:fe:fc:7d:bc:73:a8: 0f:8e:a1:21:bd:39:0a:4e:78:c0:4d:d8:eb:a2:86:d1:a6:1b: f7:e5:0d:9f:f2:a5:81:1f:97:05:b1:06:74:ed:cb:9d:8f:57: e2:8f:7b:77:e5:48:20:01:7d:9b:f3:3d:69:ae:68:20:17:30: e2:26:b5:c4:1f:bd:8d:14:25:15:c3:f4:b8:5a:b5:ee:dc:34: da:75:d0:c8:df:57:de:bc:22:69:0b:b6:1b:73:20:6a:1d:c4: c3:43:74:bd:de:ee:fd:1e:2f:f6:92:0d:75:fc:85:eb:62:1a: 59:1d:11:b6:59:5a:38:7d:72:9d:57:92:98:f1:01:0e:c8:96: ee:5f:3d:e0:70:0f:6f:09:52:8f:37:17:de:80:bd:f3:88:14: c8:b0:48:52:e6:c0:05:f2:30:c1:9a:f4:ad:1a:06:6e:9a:08: 02:d3:19:c1:2f:fb:2b:b4:fe:dc:95:3b:21:9d:50:34:54:18: 44:43:1d:26:93:73:77:27:13:b9:cd:6c:11:e5:bb:c7:c5:93: b4:5d:a3:1c:85:a1:7e:b3:94:f3:2e:ac:07:75:00:24:40:c2: c7:70:80:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5JMTWQvKhKPd6KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk OWRmYWYxNDEtYmQyMS00ODkzLWI5NDAtZDNlY2UxNTkxNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5NhPTHRHvPcMzcNcmcwVaoYNK0wCq5WpknG RXFbdDVjB8YU0nEhkK1eaOMEjDcQlc9SnhPhTow7Q14G/XJiwNedia9mNu3KPlwy ASdbkI6oPlgu8tbSRcYHgHmy9kdELp9NHQ/Up1M1/8Mppqku6HK7+qkR71n56lSX ykY/AqxEkVqT9Fe0E0iqMNCol98AIvseEkkG96S7a8AR/pw1Dzf0sYQRfdeNP6wU ho1+Ucwh0COjsSXgIEQQiCyF96+f3x53M7r5ti68RnA8F4EHqyi/MHnLCHlm9sY4 1Cd9H22LiDSlYXke4DfjHNLGvtgsyQ1aDkrnUn/ltgAjRJX8aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjcyJRb8QC5Q7AAAOAr4qzIzlCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmViZDhhNDQtYWRhZi0z ZGYwLWEyMjItZTVhMmQyM2M3NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFzxpLZFZaE8txg8ddil2RmceyNXxxj1dWT26QIXP78fbxzqA+OoSG9 OQpOeMBN2OuihtGmG/flDZ/ypYEflwWxBnTty52PV+KPe3flSCABfZvzPWmuaCAX MOImtcQfvY0UJRXD9Lhate7cNNp10MjfV968ImkLthtzIGodxMNDdL3e7v0eL/aS DXX8hetiGlkdEbZZWjh9cp1XkpjxAQ7Ilu5fPeBwD28JUo83F96AvfOIFMiwSFLm wAXyMMGa9K0aBm6aCALTGcEv+yu0/tyVOyGdUDRUGERDHSaTc3cnE7nNbBHlu8fF k7RdoxyFoX6zlPMurAd1ACRAwsdwgBo= -----END CERTIFICATE-----Generated at Thu Mar 26 06:17:20 2026 by rpki-client