$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa File: ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa (raw, json) Hash identifier: 4xcua3r99ppR1JlVTDbfnINIvbHXRwMfH3LrgCXj7hI= Subject key identifier: 5E:B4:C8:3D:0E:05:C7:A7:FF:63:44:51:95:24:66:BB:1C:15:35:7F Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F4328584D3F64D874CBD6556F1B8DF670 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 6939 IP address blocks: 209.142.68.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d8:74:cb:d6:55:6f:1b:8d:f6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=a1da03ee-6d6f-4978-9893-a50fb0b37f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:dd:93:c0:68:48:05:7f:5c:4a:36:a8:71: 5c:57:21:f2:4a:31:f1:00:cd:aa:e1:81:ec:4c:ca: fc:60:f9:04:ea:a7:e2:5b:bb:6a:b8:cc:56:5d:e1: 60:a0:4c:b5:d9:53:e0:31:7f:81:f0:bd:41:9c:2d: c6:e0:2f:2e:20:ad:3f:0c:1f:0a:af:ca:84:07:aa: 12:9a:5c:a5:b7:45:4c:1f:2f:27:5e:1b:85:c6:92: 24:ca:0f:67:58:2f:f4:3b:f0:91:bb:9c:f7:39:45: ed:ef:e5:4a:5f:59:8a:b6:8e:9d:ac:05:81:12:b4: 04:72:73:17:56:e7:51:76:c5:77:83:77:0d:e6:d3: f6:f6:e2:db:c4:b0:10:dc:b6:c4:40:6e:61:9f:e3: bf:19:9f:98:3c:50:0c:a9:2f:8b:00:6c:31:b7:de: c8:df:d8:2e:fb:f5:6a:5f:99:e9:20:ab:3c:10:7a: 30:81:49:0c:01:58:f3:1d:43:d4:c7:58:06:ab:6a: d2:c0:5f:6e:c2:78:bd:de:f1:21:1f:14:d1:ce:39: a5:47:83:37:68:7a:d0:ce:72:1b:8a:7f:db:f2:6d: 1b:a4:93:93:70:c4:bb:24:5c:bc:20:2e:68:70:a6: 45:ec:dd:c9:17:2c:e6:0d:69:0e:77:98:32:5d:10: 73:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B4:C8:3D:0E:05:C7:A7:FF:63:44:51:95:24:66:BB:1C:15:35:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ec2e42b1-0c5f-342d-8e2f-c3fde025b575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 209.142.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d9:01:10:a6:d2:9a:de:13:30:93:fb:8f:fa:19:bb:9a:1e: 16:1f:16:97:9f:9b:9b:f1:ef:73:69:22:9c:8d:96:64:9e:64: 17:b8:37:9f:d1:5b:04:2f:c4:77:bc:64:f2:9f:2f:93:7b:56: 85:fd:8d:32:09:14:8c:ba:6a:f9:f7:be:4b:b6:96:bd:d2:af: 3a:c6:1f:5b:94:e5:04:8d:d5:72:ab:a6:c8:e9:32:44:49:ce: 49:4b:d4:ce:78:27:74:d5:7f:cd:00:6e:1a:b4:0c:ab:3a:d1: 91:f0:8c:69:92:64:97:93:2c:ca:57:f3:71:f6:60:93:47:fe: 56:18:d3:28:7b:87:f6:f7:4b:59:0c:e8:7e:ec:06:69:d3:3f: e2:06:21:3a:8b:f4:6e:27:4d:a4:38:80:05:67:3a:fd:8c:fd: 94:65:d1:fe:4b:5f:f7:ef:2f:ed:6d:20:72:14:a5:1d:5f:ff: 7c:45:9a:6b:f2:45:b6:13:77:0f:46:56:b4:a2:32:ae:52:e0: 9e:cc:9a:36:53:a3:2e:37:27:b8:ca:e7:80:22:2c:52:c9:d6: 73:e4:b4:30:dc:d6:a3:cf:11:c8:41:00:89:73:48:70:a1:1a: d6:31:1d:8d:a2:84:46:87:e0:79:e6:3c:f8:e9:a1:b5:45:9d: 50:f2:b5:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNh0y9ZVbxuN9nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YTFkYTAzZWUtNmQ2Zi00OTc4LTk4OTMtYTUwZmIwYjM3ZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsLdk8BoSAV/XEo2qHFcVyHySjHxAM2q4YHs TMr8YPkE6qfiW7tquMxWXeFgoEy12VPgMX+B8L1BnC3G4C8uIK0/DB8Kr8qEB6oS mlylt0VMHy8nXhuFxpIkyg9nWC/0O/CRu5z3OUXt7+VKX1mKto6drAWBErQEcnMX VudRdsV3g3cN5tP29uLbxLAQ3LbEQG5hn+O/GZ+YPFAMqS+LAGwxt97I39gu+/Vq X5npIKs8EHowgUkMAVjzHUPUx1gGq2rSwF9uwni93vEhHxTRzjmlR4M3aHrQznIb in/b8m0bpJOTcMS7JFy8IC5ocKZF7N3JFyzmDWkOd5gyXRBz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF60yD0OBcen/2NEUZUkZrscFTV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvZWMyZTQyYjEtMGM1Zi0z NDJkLThlMmYtYzNmZGUwMjViNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXZARCm0preEzCT+4/6GbuaHhYfFpefm5vx73NpIpyNlmSeZBe4N5/R WwQvxHe8ZPKfL5N7VoX9jTIJFIy6avn3vku2lr3SrzrGH1uU5QSN1XKrpsjpMkRJ zklL1M54J3TVf80Abhq0DKs60ZHwjGmSZJeTLMpX83H2YJNH/lYY0yh7h/b3S1kM 6H7sBmnTP+IGITqL9G4nTaQ4gAVnOv2M/ZRl0f5LX/fvL+1tIHIUpR1f/3xFmmvy RbYTdw9GVrSiMq5S4J7MmjZToy43J7jK54AiLFLJ1nPktDDc1qPPEchBAIlzSHCh GtYxHY2ihEaH4HnmPPjpobVFnVDytew= -----END CERTIFICATE-----Generated at Wed Mar 25 23:25:30 2026 by rpki-client