$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa File: 0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa (raw, json) Hash identifier: iepjvM0PUPQtvo+0GxidebqVyUe7u3neo/37TqFRCF0= Subject key identifier: 39:56:81:F7:07:8B:95:F2:06:A5:54:B7:63:53:D2:61:2B:B7:AC:7A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D40CAD6C5A37BE49C6ECDEAC0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 68.191.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:d6:c5:a3:7b:e4:9c:6e:cd:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=b3dfe313-7837-4e5e-b803-bc6eab83e96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:25:25:bb:e4:57:2e:39:b9:6f:47:45:7a: a0:c8:16:7a:2d:b7:b9:b3:83:e2:72:06:72:f2:67: 6a:47:e5:cc:ed:3c:a8:25:31:94:ab:dc:a2:18:19: b1:7c:88:54:64:51:03:2d:b1:02:9b:9d:be:7d:53: c2:a6:25:b6:d9:7a:50:10:e8:0d:66:74:dd:02:ad: 7d:e2:dc:0e:6c:0d:65:4f:a0:b2:45:51:33:23:23: 98:31:c1:54:5a:ec:3b:f4:37:48:78:bf:41:51:3c: 75:a4:2d:a8:90:84:f6:da:31:9e:be:96:1d:af:97: 58:3f:40:a5:a6:1c:a1:ec:c9:b1:21:2a:cc:c0:24: 93:14:52:55:b5:31:a3:9f:30:de:74:ac:98:42:47: 2c:28:f8:3a:26:70:bd:ae:2e:85:22:15:74:74:17: 23:a3:21:6d:cc:ce:de:71:68:76:05:af:b7:94:44: df:6d:2e:94:c7:fc:cb:8b:97:d4:72:ff:9b:ff:eb: 30:9b:87:e2:3a:22:89:12:fc:bb:7b:99:2f:fd:35: 93:bc:e8:b4:76:0b:40:8c:d5:3c:3b:53:ef:3b:bf: 66:7d:2f:29:b3:e8:44:93:b7:56:38:b7:b6:f2:34: 4e:1c:2c:4a:e5:61:30:41:c8:07:69:ca:07:41:4d: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:56:81:F7:07:8B:95:F2:06:A5:54:B7:63:53:D2:61:2B:B7:AC:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:24:7a:f3:6e:bb:5f:3e:7a:b6:77:25:95:e8:b1:3d:9b:6e: 76:8b:45:48:19:00:10:69:b5:a6:7d:bb:6c:6e:b5:f5:29:f0: ba:85:4e:9a:53:5b:ec:53:54:83:0d:26:c9:ab:b3:5c:f2:b3: 25:96:a1:ee:32:92:0f:0b:5d:14:60:94:64:83:d7:25:cd:83: ab:3c:60:36:ef:e4:57:23:c4:7a:1d:2f:72:28:ee:ea:94:65: d1:02:79:fe:07:05:30:59:20:fc:c2:9d:59:22:f0:48:9d:3f: 9f:0b:19:6d:d5:c6:50:0f:a1:bb:ef:24:36:16:a3:3b:87:80: fc:5c:68:bc:75:d9:74:06:d1:74:3c:ae:fc:d9:b8:70:14:df: a0:ba:81:c4:8c:d5:2e:eb:ac:7e:42:43:13:ae:c9:b1:f9:2c: 31:cd:78:68:07:54:ce:c9:d2:d5:8c:26:27:5c:40:52:bf:4e: fd:c2:92:3e:5f:39:a0:cf:97:80:74:17:5d:10:47:4d:07:ea: ec:01:8d:ce:06:a4:45:f2:81:6d:e4:7a:7b:90:1e:fe:8a:a9: 21:62:50:ab:fb:80:bb:27:a4:98:28:d6:04:b6:32:d4:e5:73: 55:e0:00:62:25:34:0a:de:5f:0f:9e:9a:c4:9c:dd:f1:bf:f0: b7:a8:f4:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AytbFo3vknG7N6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YjNkZmUzMTMtNzgzNy00ZTVlLWI4MDMtYmM2ZWFiODNlOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw8lJbvkVy45uW9HRXqgyBZ6Lbe5s4PicgZy 8mdqR+XM7TyoJTGUq9yiGBmxfIhUZFEDLbECm52+fVPCpiW22XpQEOgNZnTdAq19 4twObA1lT6CyRVEzIyOYMcFUWuw79DdIeL9BUTx1pC2okIT22jGevpYdr5dYP0Cl phyh7MmxISrMwCSTFFJVtTGjnzDedKyYQkcsKPg6JnC9ri6FIhV0dBcjoyFtzM7e cWh2Ba+3lETfbS6Ux/zLi5fUcv+b/+swm4fiOiKJEvy7e5kv/TWTvOi0dgtAjNU8 O1PvO79mfS8ps+hEk7dWOLe28jROHCxK5WEwQcgHacoHQU2YvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlWgfcHi5XyBqVUt2NT0mErt6x6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMGQ4NjhiZTgtMzkxMy0z ZTQ2LTlkOGYtYTBjYjdiZDEyMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQkevNuu18+erZ3JZXosT2bbnaLRUgZABBptaZ9u2xutfUp8LqFTppT W+xTVIMNJsmrs1zysyWWoe4ykg8LXRRglGSD1yXNg6s8YDbv5FcjxHodL3Io7uqU ZdECef4HBTBZIPzCnVki8EidP58LGW3VxlAPobvvJDYWozuHgPxcaLx12XQG0XQ8 rvzZuHAU36C6gcSM1S7rrH5CQxOuybH5LDHNeGgHVM7J0tWMJidcQFK/Tv3Ckj5f OaDPl4B0F10QR00H6uwBjc4GpEXygW3kenuQHv6KqSFiUKv7gLsnpJgo1gS2MtTl c1XgAGIlNAreXw+emsSc3fG/8Leo9LA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:11:30 2026 by rpki-client