$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa File: 52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa (raw, json) Hash identifier: Gfku7n2XKoXdy6c8JB8y1Jb2X4dlxt2rCCk1cS46dt0= Subject key identifier: 1B:9A:D7:53:28:46:29:A2:E1:A9:D7:B7:D5:27:B0:5E:F2:63:DA:ED Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584D343A149BA35244E4639B6740 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 834 IP address blocks: 68.67.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:14:9b:a3:52:44:e4:63:9b:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=6254306b-7d5a-4573-bd35-31ad9c3eb074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d8:f5:51:80:96:fa:f4:80:a9:9f:b0:69:32: 5b:b4:ee:ce:5f:8e:7a:99:b3:52:c8:ca:27:04:b2: d5:e8:a8:9f:f4:4d:5b:80:30:65:a8:e2:73:9a:69: 3e:73:7c:ea:8b:cd:11:98:2d:ea:28:54:a6:ae:51: e9:79:a2:96:68:48:c5:97:17:f9:4c:86:a5:51:5e: 3e:b7:69:8f:f3:ce:59:ed:c0:94:57:2c:34:bf:84: b7:0d:73:5d:c1:cb:2e:aa:62:7a:a0:40:7f:c8:2e: cb:ac:0d:35:a9:50:c8:cd:e5:60:40:ae:9d:cd:f3: 11:69:e5:45:5b:54:9e:44:dd:e0:9b:e4:4f:85:cb: 65:67:bf:88:ec:07:cb:ef:90:d7:58:82:2e:f9:13: 0b:d0:81:5d:ca:37:c4:f3:b9:f4:69:5e:bd:cd:63: e7:05:c5:65:5d:d5:06:0c:73:a2:b1:0f:f5:c0:e1: da:11:2b:8f:d1:b4:7f:b6:70:0e:1a:02:ce:8a:3c: 98:60:84:46:a9:05:89:1b:cc:08:2e:5e:41:21:a7: b0:23:e9:63:31:05:26:c4:2a:c4:2b:43:da:b5:1c: 98:b1:59:d2:c4:ff:1f:0f:14:41:b3:68:bf:a7:eb: 6f:98:b9:ec:1c:dc:1b:65:0b:3b:30:6e:ec:6f:d0: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9A:D7:53:28:46:29:A2:E1:A9:D7:B7:D5:27:B0:5E:F2:63:DA:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5e:72:e6:57:f2:1f:5c:63:6e:8e:07:3b:36:45:d3:6c:5b: c2:90:bf:dd:34:11:68:77:f3:ef:b9:65:f8:9c:f6:bd:c8:8f: f0:70:e3:43:37:a1:81:05:77:c1:83:34:55:17:d9:f7:f8:81: 59:6f:03:46:b7:3f:4c:d6:74:23:70:b7:35:30:48:f7:b0:74: 51:9b:a5:ee:f1:0b:5b:d7:8c:84:c2:4a:1b:7d:99:f5:45:f9: b8:75:0c:7f:09:21:5c:ed:87:a5:95:bf:20:11:43:fc:53:d6: d9:b2:ce:bf:55:e1:3b:92:ea:95:00:ed:15:47:c6:c0:be:cd: 89:b2:4a:46:9f:a6:a8:bd:27:14:bb:7d:82:55:31:a1:7d:fd: 68:38:77:5c:c5:ba:fa:12:19:67:44:f8:d9:4a:8d:0a:2f:7d: f1:49:6b:03:fb:b2:b0:85:55:93:f7:99:87:f8:19:3a:8c:65: 85:11:02:71:58:d9:80:67:4f:b8:25:1f:69:70:86:87:5d:45: 79:aa:d2:a2:67:4b:e1:14:39:b1:0c:8b:98:5f:4a:5c:2a:65: 3e:7c:d8:4e:09:86:77:af:0a:72:f3:d2:ed:f6:99:3d:c3:e6: 4a:28:e7:9b:fb:5b:0e:f2:11:4e:2d:b1:ee:1d:ec:4f:9d:c0: 3d:b6:67:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OhSbo1JE5GObZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk NjI1NDMwNmItN2Q1YS00NTczLWJkMzUtMzFhZDljM2ViMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9j1UYCW+vSAqZ+waTJbtO7OX456mbNSyMon BLLV6Kif9E1bgDBlqOJzmmk+c3zqi80RmC3qKFSmrlHpeaKWaEjFlxf5TIalUV4+ t2mP885Z7cCUVyw0v4S3DXNdwcsuqmJ6oEB/yC7LrA01qVDIzeVgQK6dzfMRaeVF W1SeRN3gm+RPhctlZ7+I7AfL75DXWIIu+RML0IFdyjfE87n0aV69zWPnBcVlXdUG DHOisQ/1wOHaESuP0bR/tnAOGgLOijyYYIRGqQWJG8wILl5BIaewI+ljMQUmxCrE K0PatRyYsVnSxP8fDxRBs2i/p+tvmLnsHNwbZQs7MG7sb9CHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBua11MoRimi4anXt9UnsF7yY9rtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNTJjZmU3MmUtM2QyNy0z MjU4LWJlZmYtZTgwZGIzYTJlNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBecuZX8h9cY26OBzs2RdNsW8KQv900EWh38++5Zfic9r3Ij/Bw40M3 oYEFd8GDNFUX2ff4gVlvA0a3P0zWdCNwtzUwSPewdFGbpe7xC1vXjITCSht9mfVF +bh1DH8JIVzth6WVvyARQ/xT1tmyzr9V4TuS6pUA7RVHxsC+zYmySkafpqi9JxS7 fYJVMaF9/Wg4d1zFuvoSGWdE+NlKjQovffFJawP7srCFVZP3mYf4GTqMZYURAnFY 2YBnT7glH2lwhoddRXmq0qJnS+EUObEMi5hfSlwqZT582E4JhnevCnLz0u32mT3D 5koo55v7Ww7yEU4tse4d7E+dwD22Z90= -----END CERTIFICATE-----Generated at Thu Mar 26 06:45:28 2026 by rpki-client