$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c169edc5-7089-3398-b29d-eaebd059c4f0.roa File: c169edc5-7089-3398-b29d-eaebd059c4f0.roa (raw, json) Hash identifier: iBZfAkVyCQbkqaoyJv3vMftvXHJXoqKSIEMnaDu+cDQ= Subject key identifier: B3:89:06:3C:B8:3C:C5:6C:97:BC:4D:3F:9B:04:30:16:82:C5:09:41 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584D3DFF9535B77F48BB0BED9240 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c169edc5-7089-3398-b29d-eaebd059c4f0.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 834 IP address blocks: 68.67.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:95:35:b7:7f:48:bb:0b:ed:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=e4b9b943-c86d-4b52-bc34-77af68d77f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:7f:de:6b:b4:d1:46:e5:7f:24:e2:9d:bd: 4c:b9:dd:46:a8:61:ac:d6:03:79:56:50:1a:9c:a3: 2a:cc:da:bd:bb:3b:23:77:ac:db:a9:eb:78:a7:c2: de:23:90:0f:c9:85:45:fc:43:62:d4:e7:02:b1:4f: f6:cb:dc:fa:7d:a9:44:c9:3f:fc:ec:3e:16:37:3b: d8:19:cd:a4:fa:bf:36:7e:9e:c3:c7:ed:0c:60:4f: db:b8:56:e3:e2:80:45:81:27:13:d2:23:6a:52:80: 69:a4:e9:7a:24:c2:37:ad:8f:d7:e5:51:e6:af:18: 31:d1:a2:a1:ce:c7:08:c6:0f:cf:0a:fc:3e:b5:df: 0b:2a:55:f7:58:77:3b:db:5a:af:38:74:42:fe:66: 90:0a:1b:27:fe:db:62:fd:27:31:66:b9:9e:63:1b: b6:03:74:2d:27:27:eb:4e:df:9d:75:7a:77:f7:59: 7c:ff:ef:72:af:19:5c:8f:b3:c9:c9:53:44:74:62: cc:72:07:89:90:0a:9f:8a:81:e5:02:ab:11:9e:92: e8:c7:67:58:08:46:de:4d:2d:f5:ed:1e:0f:29:d8: c7:b9:a5:32:01:68:4f:b6:a4:12:98:b7:69:1b:92: c6:7f:93:cb:6c:c5:49:3c:48:45:b9:42:a4:fa:0e: f8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:89:06:3C:B8:3C:C5:6C:97:BC:4D:3F:9B:04:30:16:82:C5:09:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c169edc5-7089-3398-b29d-eaebd059c4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:14:c8:06:32:69:47:f4:5b:c1:9d:13:16:82:33:63:8a:17: 5c:51:68:96:45:8c:8d:a8:15:b1:c9:73:86:a1:6d:66:5f:d2: 7f:05:e5:7a:12:84:6a:f7:63:ca:65:13:89:d0:98:3e:20:4c: 4c:81:a0:f8:13:6e:12:2c:db:0e:83:63:77:2a:c3:c7:71:0d: 16:ba:15:94:67:3a:f8:a9:8d:c5:6b:bf:d5:55:83:67:1d:80: f2:aa:fc:13:ec:67:ff:a4:cb:13:e2:d9:76:69:19:f1:9c:3a: 85:7d:58:e0:15:f9:f8:a4:ea:cf:cc:f5:60:25:84:80:e2:be: 63:31:38:fe:59:06:74:aa:f6:57:5d:84:13:91:8a:96:4f:6f: 12:37:b3:34:39:c1:0d:c1:89:60:8f:4a:1c:94:b5:1d:cd:f4: fb:48:d1:27:49:78:d6:c4:7d:18:ac:17:42:4e:6a:ee:46:84: ce:8e:39:36:3e:01:13:c6:b0:7d:bd:a0:b7:d4:ee:d9:cf:a9: a0:ec:02:b3:fb:93:10:32:fe:09:44:ec:ac:bf:54:e8:fb:f0: a2:be:c7:1f:7b:91:3d:35:67:ac:67:26:62:fb:ed:4f:0a:27: 2d:78:4e:b2:8b:52:5b:36:51:a0:9f:6b:5f:a9:7a:31:2f:c1: 2a:7d:67:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5U1t39IuwvtkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZTRiOWI5NDMtYzg2ZC00YjUyLWJjMzQtNzdhZjY4ZDc3ZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1t/3mu00UblfyTinb1Mud1GqGGs1gN5VlAa nKMqzNq9uzsjd6zbqet4p8LeI5APyYVF/ENi1OcCsU/2y9z6falEyT/87D4WNzvY Gc2k+r82fp7Dx+0MYE/buFbj4oBFgScT0iNqUoBppOl6JMI3rY/X5VHmrxgx0aKh zscIxg/PCvw+td8LKlX3WHc721qvOHRC/maQChsn/tti/ScxZrmeYxu2A3QtJyfr Tt+ddXp391l8/+9yrxlcj7PJyVNEdGLMcgeJkAqfioHlAqsRnpLox2dYCEbeTS31 7R4PKdjHuaUyAWhPtqQSmLdpG5LGf5PLbMVJPEhFuUKk+g74HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOJBjy4PMVsl7xNP5sEMBaCxQlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvYzE2OWVkYzUtNzA4OS0z Mzk4LWIyOWQtZWFlYmQwNTljNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREPCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0UyAYyaUf0W8GdExaCM2OKF1xRaJZFjI2oFbHJc4ahbWZf0n8F5XoS hGr3Y8plE4nQmD4gTEyBoPgTbhIs2w6DY3cqw8dxDRa6FZRnOvipjcVrv9VVg2cd gPKq/BPsZ/+kyxPi2XZpGfGcOoV9WOAV+fik6s/M9WAlhIDivmMxOP5ZBnSq9ldd hBORipZPbxI3szQ5wQ3BiWCPShyUtR3N9PtI0SdJeNbEfRisF0JOau5GhM6OOTY+ ARPGsH29oLfU7tnPqaDsArP7kxAy/glE7Ky/VOj78KK+xx97kT01Z6xnJmL77U8K Jy14TrKLUls2UaCfa1+pejEvwSp9Zzk= -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:36 2026 by rpki-client