$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/52bbcfba-ccdc-30ee-bfea-8949f2b17ab4.roa File: 52bbcfba-ccdc-30ee-bfea-8949f2b17ab4.roa (raw, json) Hash identifier: 6Di4UKvIdhPnDOZDBHlrtefOzNrT66oQQF6uzic7YEw= Subject key identifier: 9A:4B:09:D9:AD:22:1D:F3:AA:AD:E3:1F:38:9D:16:4E:68:FB:33:4C Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D1707D8BA70B00A6DE3CD1D80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/52bbcfba-ccdc-30ee-bfea-8949f2b17ab4.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 68.64.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:d8:ba:70:b0:0a:6d:e3:cd:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=3d301a13-925c-40f7-89fe-425b1d81158e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:51:14:52:26:7f:0c:32:30:13:44:a3:23: 3d:3c:9a:c0:28:5c:54:68:04:af:cf:5b:e9:08:c9: 1b:d4:ed:f7:fd:b6:db:5f:5c:2e:9c:4d:d1:ef:19: 0c:2b:ca:a7:e9:46:5f:bc:c6:e9:3a:5b:ce:97:bf: 68:ac:3b:ee:7d:a5:4a:33:84:77:37:c0:19:89:1c: 4f:f6:a8:bc:0a:38:6a:da:40:d8:76:75:f9:57:93: f5:7d:cb:4a:eb:8f:b0:fd:0b:65:3e:30:e0:2e:7d: 5d:07:ca:93:7f:5c:34:05:e9:54:8b:e0:3e:c0:5b: 63:50:8f:ae:f1:ab:11:75:96:dc:01:8b:46:3d:e9: df:6c:74:6b:21:b1:ff:09:d7:ea:08:73:a5:6c:16: 84:20:d3:b9:6f:39:51:5b:26:6d:08:83:54:a7:65: a1:88:65:49:65:d4:cd:40:7c:98:f0:d7:a8:58:3f: 1e:18:f8:de:59:ef:af:20:3e:84:bb:a0:ea:59:8b: f2:1a:c8:ef:46:56:43:07:1a:ed:dc:af:e1:e6:82: fe:92:e8:ab:90:54:7d:cc:da:a3:f5:57:c1:e3:14: 6a:55:ff:03:8b:25:e2:e8:3d:17:24:04:02:7e:37: 95:b7:83:7e:0a:1d:70:64:55:44:43:4b:4a:e1:00: 2b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4B:09:D9:AD:22:1D:F3:AA:AD:E3:1F:38:9D:16:4E:68:FB:33:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/52bbcfba-ccdc-30ee-bfea-8949f2b17ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ef:e7:3d:48:e0:1b:ea:ba:ad:52:e4:42:9b:0e:c5:ec:90: 5b:4d:2d:41:7f:55:b0:f0:84:ef:2a:e9:07:3c:3c:fd:0d:69: 69:07:30:4b:a1:5b:4a:ab:ec:68:99:7d:f0:45:84:21:84:ab: f6:d9:af:ae:0a:54:bb:c8:71:91:60:ce:98:95:9c:a0:24:4f: c6:19:6f:20:38:cc:8a:e1:29:50:4d:28:9b:4e:40:58:2d:68: 3f:37:11:13:b7:03:4b:6e:bb:8a:0e:3d:56:af:6c:f6:3c:db: 6e:72:eb:09:d4:01:6d:56:75:b1:fe:b8:0e:59:95:54:e9:bb: 50:d4:b6:55:95:d5:36:69:44:71:c0:1f:bb:5c:e0:0d:84:4f: 76:46:57:e0:69:ff:0b:60:00:33:af:ec:0d:41:e0:d5:29:72: 73:a6:57:6b:23:97:47:eb:c0:8a:88:08:61:55:76:14:79:ce: 44:51:ee:da:af:6d:93:47:ca:c9:b1:a4:43:dc:d0:29:e0:dd: 3b:08:9a:85:ba:22:b9:4e:98:9a:b9:94:75:42:c7:9e:6a:66: 66:a6:89:37:86:4c:3d:96:4e:0c:4e:0c:8f:b8:42:bb:2b:78: 95:4a:7f:98:a4:2c:45:aa:de:fa:f5:4d:32:03:8c:1b:1d:5e: 8f:f1:4a:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB9i6cLAKbePNHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk M2QzMDFhMTMtOTI1Yy00MGY3LTg5ZmUtNDI1YjFkODExNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBZRFFImfwwyMBNEoyM9PJrAKFxUaASvz1vp CMkb1O33/bbbX1wunE3R7xkMK8qn6UZfvMbpOlvOl79orDvufaVKM4R3N8AZiRxP 9qi8Cjhq2kDYdnX5V5P1fctK64+w/QtlPjDgLn1dB8qTf1w0BelUi+A+wFtjUI+u 8asRdZbcAYtGPenfbHRrIbH/CdfqCHOlbBaEINO5bzlRWyZtCINUp2WhiGVJZdTN QHyY8NeoWD8eGPjeWe+vID6Eu6DqWYvyGsjvRlZDBxrt3K/h5oL+kuirkFR9zNqj 9VfB4xRqVf8DiyXi6D0XJAQCfjeVt4N+Ch1wZFVEQ0tK4QArQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpLCdmtIh3zqq3jHzidFk5o+zNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNTJiYmNmYmEtY2NkYy0z MGVlLWJmZWEtODk0OWYyYjE3YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7v5z1I4Bvquq1S5EKbDsXskFtNLUF/VbDwhO8q6Qc8PP0NaWkHMEuh W0qr7GiZffBFhCGEq/bZr64KVLvIcZFgzpiVnKAkT8YZbyA4zIrhKVBNKJtOQFgt aD83ERO3A0tuu4oOPVavbPY8225y6wnUAW1WdbH+uA5ZlVTpu1DUtlWV1TZpRHHA H7tc4A2ET3ZGV+Bp/wtgADOv7A1B4NUpcnOmV2sjl0frwIqICGFVdhR5zkRR7tqv bZNHysmxpEPc0Cng3TsImoW6IrlOmJq5lHVCx55qZmamiTeGTD2WTgxODI+4Qrsr eJVKf5ikLEWq3vr1TTIDjBsdXo/xSis= -----END CERTIFICATE-----Generated at Thu Mar 26 02:05:58 2026 by rpki-client