$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa File: a6b88847-a0c7-3626-975e-b5416d5337c7.roa (raw, json) Hash identifier: WkBcWukPpFTxYaMkuf8BbAfxEh5/sn9oZDfKfJC+FZw= Subject key identifier: D0:97:4E:38:C1:1B:6D:BB:4D:7E:F1:F7:03:44:D3:7E:E9:65:37:2F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D117269E4A14722E1972A9EE0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 8075 IP address blocks: 40.47.0.0/16 maxlen: 16 40.146.0.0/16 maxlen: 16 40.148.0.0/16 maxlen: 16 40.155.0.0/16 maxlen: 16 40.159.0.0/16 maxlen: 16 40.212.0.0/16 maxlen: 16 40.253.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:69:e4:a1:47:22:e1:97:2a:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=87863486-420b-483f-8c72-0921b5bb6336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:75:a3:a7:ef:99:01:ad:6c:c7:eb:e7:80: 79:e8:a0:e2:0a:f9:f9:c6:fd:b8:39:43:c1:61:4c: c6:e9:4f:6c:5a:75:93:c3:4b:91:10:05:4d:2c:71: 70:11:e8:5d:22:02:fb:0e:ef:61:99:c5:e3:3a:ec: 58:e8:ee:13:e9:5c:9c:fd:d7:22:bd:d3:7f:48:58: 81:f1:1b:ab:6f:90:89:e1:f4:5b:58:2f:8f:31:61: 36:4b:7b:80:ec:c3:9f:c2:90:27:fd:f0:31:b2:c2: 0b:77:95:86:9d:36:00:62:ed:f3:91:73:6e:8e:53: aa:02:14:dc:e5:38:36:77:41:ff:b7:a9:33:e4:69: ca:b4:63:4f:54:9f:88:2e:28:ae:bb:2d:f1:fb:5d: 49:f7:17:27:da:a3:e7:1f:30:89:0c:61:05:4a:c6: b4:de:5d:4d:59:8a:4c:71:c4:0c:3c:78:d0:29:65: 2e:f3:05:cc:5d:ba:22:20:7a:c0:2b:f3:4a:70:b4: 3f:d6:94:a6:7a:d2:87:31:f4:0d:b6:c6:a2:4e:37: e6:49:a1:22:1f:50:6f:03:66:0d:5a:9a:03:e4:a5: e6:1b:7e:3f:40:5f:9c:be:07:dc:ed:1e:72:fe:d6: 5d:2b:c2:ad:cc:d2:26:9f:dc:fa:59:ff:0f:58:f2: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:97:4E:38:C1:1B:6D:BB:4D:7E:F1:F7:03:44:D3:7E:E9:65:37:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.47.0.0/16 40.146.0.0/16 40.148.0.0/16 40.155.0.0/16 40.159.0.0/16 40.212.0.0/16 40.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1d:e0:12:b7:60:06:36:2f:88:ef:b8:ca:f4:63:54:30:92: 7d:cb:f1:ca:a2:fd:ec:21:73:5d:91:d1:e6:5f:05:3c:ac:72: bd:5d:9b:f5:cc:26:bb:23:5c:19:d0:33:0e:7a:9e:d2:a2:f7: 6c:5a:1e:f7:81:c5:25:21:29:08:4f:a9:b7:cb:71:38:7d:3b: ed:65:09:07:b4:9e:f0:58:97:72:cc:84:4f:98:c8:e4:bf:1b: 55:04:c1:b0:4f:14:e3:f7:e3:bd:cd:a7:1c:5f:07:ec:15:aa: d5:e6:73:36:81:54:14:43:cc:1d:85:0e:4c:f4:61:02:25:7a: 86:48:7c:b2:44:85:c2:5c:f9:81:21:c4:8d:c7:5f:39:1f:43: 45:e2:c1:a5:8f:cb:d9:cc:ae:5e:f2:b9:40:3a:30:72:a8:04: cb:3b:2f:f2:4d:aa:a8:38:6f:e0:dc:d6:d1:23:d2:a7:5c:d3: 79:c7:d0:8b:f0:12:be:7b:5b:8d:74:0a:e4:aa:93:55:47:2c: bf:48:40:80:f1:f7:ad:dc:8a:7a:5f:80:6d:4b:67:78:b9:0f: d2:ea:fb:7e:90:ab:37:1f:08:61:8e:74:5b:6e:eb:05:59:dc: 14:37:5f:8d:7e:12:50:90:9c:79:b1:60:be:f4:0c:fb:c6:94: 70:a5:46:ad -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWE0RcmnkoUci4ZcqnuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ODc4NjM0ODYtNDIwYi00ODNmLThjNzItMDkyMWI1YmI2MzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc11o6fvmQGtbMfr54B56KDiCvn5xv24OUPB YUzG6U9sWnWTw0uREAVNLHFwEehdIgL7Du9hmcXjOuxY6O4T6Vyc/dcivdN/SFiB 8Rurb5CJ4fRbWC+PMWE2S3uA7MOfwpAn/fAxssILd5WGnTYAYu3zkXNujlOqAhTc 5Tg2d0H/t6kz5GnKtGNPVJ+ILiiuuy3x+11J9xcn2qPnHzCJDGEFSsa03l1NWYpM ccQMPHjQKWUu8wXMXboiIHrAK/NKcLQ/1pSmetKHMfQNtsaiTjfmSaEiH1BvA2YN WpoD5KXmG34/QF+cvgfc7R5y/tZdK8KtzNImn9z6Wf8PWPK5VwIDAQABo4IDcjCC A24wHQYDVR0OBBYEFNCXTjjBG227TX7x9wNE037pZTcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTZiODg4NDctYTBjNy0z NjI2LTk3NWUtYjU0MTZkNTMzN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAATAjAwMAKC8DAwAo kgMDACiUAwMAKJsDAwAonwMDACjUAwMAKP0wVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkR3gErdgBjYviO+4 yvRjVDCSfcvxyqL97CFzXZHR5l8FPKxyvV2b9cwmuyNcGdAzDnqe0qL3bFoe94HF JSEpCE+pt8txOH077WUJB7Se8FiXcsyET5jI5L8bVQTBsE8U4/fjvc2nHF8H7BWq 1eZzNoFUFEPMHYUOTPRhAiV6hkh8skSFwlz5gSHEjcdfOR9DReLBpY/L2cyuXvK5 QDowcqgEyzsv8k2qqDhv4NzW0SPSp1zTecfQi/ASvntbjXQK5KqTVUcsv0hAgPH3 rdyKel+AbUtneLkP0ur7fpCrNx8IYY50W27rBVncFDdfjX4SUJCcebFgvvQM+8aU cKVGrQ== -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:34 2026 by rpki-client