$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa File: dfaa2688-c8ee-3021-915c-efda099beed5.roa (raw, json) Hash identifier: nMRaPANXpbEF3ncVTX+aUCSiknwnabs9GFVjqMR/ado= Subject key identifier: 1F:1F:0F:0A:82:6E:0C:04:32:63:F3:D2:BC:3F:56:3B:60:B0:4D:FF Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D359FA79928E53D9962218E00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 31898 IP address blocks: 68.64.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:a7:99:28:e5:3d:99:62:21:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=bc5a9a72-7f58-4d3c-afe8-22e27ab38942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:81:3c:74:f2:c3:3f:a3:3c:8f:5d:fa:b5: 8e:e3:92:f0:5d:b1:27:0e:0f:9b:e9:42:1c:4b:88: ee:d2:34:5f:2b:79:78:dc:d6:cc:5f:ed:94:8e:7c: 95:55:61:92:82:5a:1f:c7:57:9e:98:76:47:da:b6: 37:f8:d0:4f:2e:bc:b1:6b:ba:24:15:47:75:2d:88: 4f:bf:f1:8e:57:04:11:50:37:3e:77:40:61:cd:fe: 8c:66:73:f1:d1:95:0e:48:80:72:65:51:1b:4c:86: 8f:7e:c4:e7:f8:f4:2a:0b:09:d7:4e:7f:fd:34:6b: c4:98:d4:34:da:be:49:f1:25:e0:31:6c:83:04:1b: 31:bc:f8:77:55:5a:5e:f5:6b:46:a2:2d:65:26:6d: ff:b1:a1:46:8d:8e:92:a1:2f:87:8d:a6:44:ae:8b: 12:f6:8d:0d:7d:ab:2f:2a:22:08:2f:2e:5c:7a:7e: f4:c8:3a:25:f7:ec:0c:b7:7a:bb:62:d4:ff:8a:5c: bd:75:8d:09:69:cc:a9:38:c1:96:d4:c7:3a:78:e4: 69:81:b4:a6:b6:70:66:8a:66:68:6d:ba:19:f8:79: 88:d2:f0:ff:09:a6:c6:38:fe:5f:ae:06:f8:36:68: 6f:75:0b:94:ad:a2:59:a9:95:1c:34:43:3d:29:01: e6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1F:0F:0A:82:6E:0C:04:32:63:F3:D2:BC:3F:56:3B:60:B0:4D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:96:ab:1a:62:87:bd:f4:95:87:23:8c:d3:1b:6a:25:36:ca: ce:b9:98:9e:9d:3c:1a:2b:a8:3f:72:2f:d1:6f:93:45:10:d1: fc:64:56:07:07:47:7f:72:c2:fd:20:3a:9c:00:24:41:23:74: bb:bf:19:76:6c:86:c3:0c:7d:2b:82:01:75:70:82:1d:31:96: 01:f6:a3:6a:15:b8:06:67:95:92:9c:b7:28:80:43:26:3b:df: c4:78:93:e4:1f:42:60:0f:9a:7a:b5:d5:3f:df:a6:57:f2:87: d7:6b:ba:bf:54:ae:22:8f:bf:91:b3:35:71:cc:2d:e1:9f:22: 0f:04:28:62:04:76:12:72:42:54:4c:06:9d:a0:90:96:b4:95: e3:b1:03:0c:88:82:a7:52:d9:0e:87:16:49:46:78:6d:44:66: c5:56:40:99:f3:ec:46:78:87:38:33:a6:19:c3:a3:08:2e:4b: 61:b5:af:21:91:69:3e:4b:df:fc:88:15:d2:2a:4a:e1:c8:d4: 95:89:a4:4c:fd:94:cd:04:a7:ab:c9:7e:90:db:ac:3a:97:41: 54:19:06:59:b6:a3:4d:d9:c3:1e:92:c2:5b:ef:ea:f1:94:23: 1f:c9:2f:67:cc:00:f3:cb:7f:24:fc:73:a4:6d:c1:4c:51:99: 10:5a:f5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6eZKOU9mWIhjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YmM1YTlhNzItN2Y1OC00ZDNjLWFmZTgtMjJlMjdhYjM4OTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EOBPHTywz+jPI9d+rWO45LwXbEnDg+b6UIc S4ju0jRfK3l43NbMX+2UjnyVVWGSglofx1eemHZH2rY3+NBPLryxa7okFUd1LYhP v/GOVwQRUDc+d0Bhzf6MZnPx0ZUOSIByZVEbTIaPfsTn+PQqCwnXTn/9NGvEmNQ0 2r5J8SXgMWyDBBsxvPh3VVpe9WtGoi1lJm3/saFGjY6SoS+HjaZErosS9o0Nfasv KiIILy5cen70yDol9+wMt3q7YtT/ily9dY0JacypOMGW1Mc6eORpgbSmtnBmimZo bboZ+HmI0vD/CabGOP5frgb4NmhvdQuUraJZqZUcNEM9KQHmyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8fDwqCbgwEMmPz0rw/VjtgsE3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGZhYTI2ODgtYzhlZS0z MDIxLTkxNWMtZWZkYTA5OWJlZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMuWqxpih730lYcjjNMbaiU2ys65mJ6dPBorqD9yL9Fvk0UQ0fxkVgcH R39ywv0gOpwAJEEjdLu/GXZshsMMfSuCAXVwgh0xlgH2o2oVuAZnlZKctyiAQyY7 38R4k+QfQmAPmnq11T/fplfyh9drur9UriKPv5GzNXHMLeGfIg8EKGIEdhJyQlRM Bp2gkJa0leOxAwyIgqdS2Q6HFklGeG1EZsVWQJnz7EZ4hzgzphnDowguS2G1ryGR aT5L3/yIFdIqSuHI1JWJpEz9lM0Ep6vJfpDbrDqXQVQZBlm2o03Zwx6Swlvv6vGU Ix/JL2fMAPPLfyT8c6RtwUxRmRBa9a8= -----END CERTIFICATE-----Generated at Thu Mar 26 03:56:30 2026 by rpki-client