$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa File: 0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa (raw, json) Hash identifier: Ud3p0T3YhHB3c5ekKwrS+TAE8JbCgaGcRiljSJkCcvg= Subject key identifier: 71:D3:BD:F9:25:9E:FB:D6:61:7B:96:31:C0:4B:79:46:43:03:40:C3 Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F4328584D19B4D280D9E180A584A94180 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 5650 IP address blocks: 68.170.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d2:80:d9:e1:80:a5:84:a9:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=5d6f31d6-6804-4147-afd6-c31e527778d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a5:5d:b5:d7:f2:91:a7:77:48:22:54:a5:78: ea:26:21:04:08:5c:fa:39:1b:da:a8:06:62:8f:2d: a5:57:4e:ce:a1:bb:54:cf:ca:7e:4f:19:dc:1b:5a: 57:ad:f7:3d:64:db:3d:cb:26:70:e3:3e:82:b8:ea: d2:19:13:98:09:f2:c7:b4:e8:b9:23:5f:84:bb:8c: 46:e4:77:df:e7:6f:08:00:fc:9c:de:fa:2c:9e:55: af:0a:58:bb:6e:15:f6:f8:7e:71:6b:51:cb:9b:a6: 32:b7:a2:28:07:91:8c:dd:60:5a:bc:39:a6:18:ef: c3:cd:ea:5d:d1:0d:14:09:02:50:db:87:92:24:73: f8:31:49:59:f4:82:e3:c1:dc:be:46:a4:2b:5c:2c: cf:cc:31:04:90:79:ae:fc:4b:65:95:55:e5:25:29: 14:c5:8d:13:94:c3:cb:06:07:96:17:d4:d3:9b:e5: 73:e5:e3:79:cf:5d:f6:5e:0f:06:12:35:34:1c:3c: 0e:73:39:b3:7a:b9:17:68:5b:35:9c:e5:5d:b5:1c: 53:e0:b3:04:26:ac:9e:7e:ec:e3:ed:ab:ef:1f:13: 4c:97:be:e9:2a:09:af:27:34:73:22:fd:f6:95:45: 59:62:49:66:81:31:f4:4a:65:ee:2d:89:da:68:38: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D3:BD:F9:25:9E:FB:D6:61:7B:96:31:C0:4B:79:46:43:03:40:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:bc:b5:b0:e1:39:71:f0:10:16:ce:8a:cd:bf:ae:74:79:9e: 77:d4:80:83:6b:b4:f8:20:b5:95:5d:cc:16:e8:de:8f:62:97: 10:2a:3c:35:ec:6f:76:53:69:69:0a:82:9f:93:9e:f3:eb:d7: 27:fb:a4:a7:71:d3:4e:71:0c:af:27:5e:c0:23:15:d1:96:f0: b7:56:9b:34:63:c8:07:c0:bb:f6:d4:55:79:87:47:e3:28:22: c3:6a:96:10:e7:59:bc:c5:59:9c:e0:89:ce:b1:cb:21:cf:86: c4:0f:0b:66:61:2e:e2:d9:e9:f8:fe:6d:17:35:f2:fb:58:f6: 07:ac:ca:88:ae:66:81:1e:8f:c2:7c:33:40:03:75:b4:66:ce: d2:78:5b:b6:76:a0:b8:3b:4b:20:2a:a0:5b:e5:05:08:da:da: 91:df:d1:81:04:a7:0c:ad:e1:64:cb:58:a3:d2:13:f2:59:f0: 28:47:29:f8:05:58:1d:75:91:b4:67:7a:b9:ff:af:dd:62:2f: 26:3e:55:32:f3:18:9a:59:70:10:02:7a:19:92:03:db:91:d2: ea:15:3c:35:47:fe:b7:93:b3:ea:50:c7:27:04:6a:88:d8:58: b1:c2:cc:43:c3:1f:e3:fd:ca:85:86:2b:e3:b4:5b:de:dd:2d: 4b:37:9c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNKA2eGApYSpQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NWQ2ZjMxZDYtNjgwNC00MTQ3LWFmZDYtYzMxZTUyNzc3OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Vdtdfykad3SCJUpXjqJiEECFz6ORvaqAZi jy2lV07OobtUz8p+TxncG1pXrfc9ZNs9yyZw4z6CuOrSGROYCfLHtOi5I1+Eu4xG 5Hff528IAPyc3vosnlWvCli7bhX2+H5xa1HLm6Yyt6IoB5GM3WBavDmmGO/Dzepd 0Q0UCQJQ24eSJHP4MUlZ9ILjwdy+RqQrXCzPzDEEkHmu/EtllVXlJSkUxY0TlMPL BgeWF9TTm+Vz5eN5z132Xg8GEjU0HDwOczmzerkXaFs1nOVdtRxT4LMEJqyefuzj 7avvHxNMl77pKgmvJzRzIv32lUVZYklmgTH0SmXuLYnaaDhu5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHTvfklnvvWYXuWMcBLeUZDA0DDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMGY1NjRkMjktNDUwYi0z N2I4LTljNjctNWY4MWVjMGM3YWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq8tbDhOXHwEBbOis2/rnR5nnfUgINrtPggtZVdzBbo3o9ilxAqPDXs b3ZTaWkKgp+TnvPr1yf7pKdx005xDK8nXsAjFdGW8LdWmzRjyAfAu/bUVXmHR+Mo IsNqlhDnWbzFWZzgic6xyyHPhsQPC2ZhLuLZ6fj+bRc18vtY9gesyoiuZoEej8J8 M0ADdbRmztJ4W7Z2oLg7SyAqoFvlBQja2pHf0YEEpwyt4WTLWKPSE/JZ8ChHKfgF WB11kbRnern/r91iLyY+VTLzGJpZcBACehmSA9uR0uoVPDVH/reTs+pQxycEaojY WLHCzEPDH+P9yoWGK+O0W97dLUs3nJQ= -----END CERTIFICATE-----Generated at Thu Mar 26 04:15:42 2026 by rpki-client