$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/eb0e1499-7a04-3c62-bf9d-0a8f57552058.roa File: eb0e1499-7a04-3c62-bf9d-0a8f57552058.roa (raw, json) Hash identifier: ZZFhOLmwxFn/sqJR9uiAIaN3cuYknQqke/u9he6JEFU= Subject key identifier: 60:FD:05:96:1A:9B:3C:7E:A5:BF:70:8D:B1:74:FB:11:1B:C8:64:9F Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F4328584D492A5E8F428081EF331D2380 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/eb0e1499-7a04-3c62-bf9d-0a8f57552058.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 2906 IP address blocks: 108.175.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5e:8f:42:80:81:ef:33:1d:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=62e24c7e-8c7c-4d70-9f7d-fc701ab17b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:fe:77:ba:fb:39:f4:61:2e:2d:da:e1:c3: c6:8d:1e:bf:85:f5:a0:08:34:b4:ab:e6:0b:3e:43: 93:ba:92:85:1e:5c:65:d3:e6:f1:a5:1b:57:98:e3: 80:82:4a:95:ac:45:f5:64:7e:a3:de:16:6e:80:96: df:58:4c:78:7f:fa:ee:02:36:de:72:84:2e:43:cd: e8:52:37:f1:5d:51:31:90:83:da:f4:78:4a:9c:c5: 57:a9:81:bf:7e:62:1f:8e:ac:a5:df:6c:e2:67:43: d8:49:f8:8f:05:99:be:22:34:fb:f8:d7:3f:de:74: 12:f0:14:cb:44:2e:ab:2b:06:7b:f1:e1:a1:3f:90: 67:75:99:d1:49:26:cd:05:18:10:28:68:9c:c9:36: 60:f1:0b:14:ea:07:ee:29:93:a3:68:62:cf:31:d8: d4:e2:73:bb:99:63:db:00:b7:81:ef:0a:04:81:c6: c7:d5:82:17:1a:b2:a6:69:5d:9a:72:79:aa:71:f0: 66:2b:de:2f:0f:e0:ab:a4:63:89:70:e6:b1:41:d3: 49:8b:41:15:17:12:a8:f2:ca:e9:73:5b:cc:95:41: 59:f3:c5:97:11:30:78:fe:17:55:4f:24:28:d8:45: 91:69:7c:65:7d:b4:a3:ab:c0:7c:99:ef:11:68:ca: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FD:05:96:1A:9B:3C:7E:A5:BF:70:8D:B1:74:FB:11:1B:C8:64:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/eb0e1499-7a04-3c62-bf9d-0a8f57552058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 108.175.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:de:78:51:98:41:bc:b4:d5:aa:a5:41:9b:c2:87:bf:0b:d9: d9:4e:5f:d5:ed:f8:1e:f4:9d:41:7a:db:aa:1f:60:0b:f6:f5: 92:41:d5:e2:78:8f:0d:58:99:93:49:46:a8:d5:e5:b1:38:36: 90:33:91:2a:36:bd:0e:a9:ec:98:d2:a5:5f:15:ad:de:b3:6b: 10:44:d8:8a:60:3d:df:97:fb:24:91:88:b0:ee:ff:8a:ff:1a: 14:74:a4:df:0c:7c:fa:32:a3:cc:26:c9:1a:2e:9f:09:f0:24: 8a:19:04:a5:32:a0:67:cb:95:85:57:b2:29:32:57:f6:b9:d4: 21:b6:6b:41:7a:98:01:09:0a:a6:0a:c2:e8:17:17:6d:40:0f: 09:e2:e5:95:a5:06:75:a6:ed:28:70:5e:63:a9:d4:1c:9c:58: 0c:aa:13:03:02:f5:18:83:35:d5:47:f2:bf:4a:ff:9e:80:88: b8:4a:64:a2:47:5c:ff:15:c9:cb:fc:e1:64:18:24:20:09:0a: 3e:c1:3c:28:fb:e1:09:0a:83:63:fc:90:8b:67:02:b9:a0:4c: 9c:67:2e:66:7e:95:45:c8:97:74:f5:fd:70:79:5b:f6:29:de: 34:52:7b:4a:1f:15:02:86:f1:3a:da:d5:6f:ad:03:7b:91:95: 72:61:0c:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKl6PQoCB7zMdI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NjJlMjRjN2UtOGM3Yy00ZDcwLTlmN2QtZmM3MDFhYjE3YjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk7+d7r7OfRhLi3a4cPGjR6/hfWgCDS0q+YL PkOTupKFHlxl0+bxpRtXmOOAgkqVrEX1ZH6j3hZugJbfWEx4f/ruAjbecoQuQ83o UjfxXVExkIPa9HhKnMVXqYG/fmIfjqyl32ziZ0PYSfiPBZm+IjT7+Nc/3nQS8BTL RC6rKwZ78eGhP5BndZnRSSbNBRgQKGicyTZg8QsU6gfuKZOjaGLPMdjU4nO7mWPb ALeB7woEgcbH1YIXGrKmaV2acnmqcfBmK94vD+CrpGOJcOaxQdNJi0EVFxKo8srp c1vMlUFZ88WXETB4/hdVTyQo2EWRaXxlfbSjq8B8me8RaMqLxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGD9BZYamzx+pb9wjbF0+xEbyGSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvZWIwZTE0OTktN2EwNC0z YzYyLWJmOWQtMGE4ZjU3NTUyMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbK8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbeeFGYQby01aqlQZvCh78L2dlOX9Xt+B70nUF626ofYAv29ZJB1eJ4 jw1YmZNJRqjV5bE4NpAzkSo2vQ6p7JjSpV8Vrd6zaxBE2IpgPd+X+ySRiLDu/4r/ GhR0pN8MfPoyo8wmyRounwnwJIoZBKUyoGfLlYVXsikyV/a51CG2a0F6mAEJCqYK wugXF21ADwni5ZWlBnWm7ShwXmOp1BycWAyqEwMC9RiDNdVH8r9K/56AiLhKZKJH XP8Vycv84WQYJCAJCj7BPCj74QkKg2P8kItnArmgTJxnLmZ+lUXIl3T1/XB5W/Yp 3jRSe0ofFQKG8Tra1W+tA3uRlXJhDFI= -----END CERTIFICATE-----Generated at Thu Mar 26 03:49:16 2026 by rpki-client