$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35f29218-f963-3644-9a2b-4ab3af6f8f79.roa File: 35f29218-f963-3644-9a2b-4ab3af6f8f79.roa (raw, json) Hash identifier: yffkASI/DL/HrIvMS+XFN8krGuyLz2AgC50w2t0euP4= Subject key identifier: 2C:21:3C:C6:82:C4:E0:C2:6B:91:69:ED:B2:28:E7:D8:DA:58:9E:11 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584CF15773B67A34F3DDB67B1480 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35f29218-f963-3644-9a2b-4ab3af6f8f79.roa Signing time: Sun 22 Feb 2026 02:00:32 +0000 ROA not before: Sun 22 Feb 2026 02:00:32 +0000 ROA not after: Sat 23 May 2026 01:00:32 +0000 asID: 22652 IP address blocks: 68.67.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:57:73:b6:7a:34:f3:dd:b6:7b:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Feb 22 02:00:32 2026 GMT Not After : May 23 01:00:32 2026 GMT Subject: CN=93ec6eea-bc20-408d-871a-28d18b8a8f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:ec:43:3a:2e:3a:a8:3d:b1:fb:a7:2f:a8: d0:21:7c:b7:0f:de:0e:5c:be:f3:0e:39:d9:74:54: c6:a5:b4:a9:44:6a:48:20:d0:c5:92:35:91:33:bd: c2:45:51:96:dc:65:e0:e9:83:64:30:32:01:6a:ac: b5:7a:07:83:17:3c:16:50:6b:d6:ea:c3:d8:42:b5: 93:95:14:80:b0:e2:42:e1:4c:e4:4d:69:15:d5:91: 8c:e1:6b:07:af:89:54:c2:80:5b:23:67:a3:0a:f4: 0f:5a:5d:35:03:78:c8:e7:c2:36:3c:c3:fa:b1:5f: 25:07:cf:1c:48:0a:48:86:fd:2b:40:71:3a:10:9f: 3e:e4:b9:9a:1d:67:d4:28:ee:4c:7d:83:03:ea:1b: b4:be:70:cc:3d:9f:31:34:bb:dd:31:62:13:39:5a: ee:9a:0e:6f:5d:6c:e2:40:ae:0d:d1:60:8e:b6:0e: df:65:0e:82:4a:1f:a3:52:f7:fb:71:7c:32:7b:99: 3f:00:c6:1f:73:0e:a5:d9:5c:9c:67:27:24:f7:a3: 62:20:b9:09:15:db:3b:e1:1e:25:e8:51:6a:8e:04: 1c:56:89:6f:2a:ff:81:0c:19:2d:6d:2d:5e:a7:ef: c4:f3:03:41:04:f9:45:78:7c:04:ce:90:ff:77:bc: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:21:3C:C6:82:C4:E0:C2:6B:91:69:ED:B2:28:E7:D8:DA:58:9E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35f29218-f963-3644-9a2b-4ab3af6f8f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 68.67.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8a:50:0a:9e:cf:4e:5c:58:13:64:13:f8:2f:97:6c:fe:c7: 8b:9c:aa:f2:61:0f:42:8b:6c:ce:36:6b:85:25:b8:68:cb:00: 20:88:87:bb:a9:5a:e7:dd:a4:34:c0:14:60:70:1e:1e:8c:73: 91:1f:44:cc:00:a0:7c:b0:c2:59:17:c5:f0:79:82:cb:19:6b: 71:24:49:6e:79:09:24:86:bb:1b:39:3e:de:9b:b2:f4:87:88: dc:f7:f4:e3:b0:f7:5e:a0:1c:af:98:26:53:be:21:cb:ae:bf: 7c:75:e3:4d:7d:aa:4c:83:31:6a:93:a7:94:0e:10:8a:eb:f5: 3e:9f:84:ff:db:51:c7:33:fc:e5:19:3b:04:3b:c2:a8:9c:0b: 2e:d6:4e:0e:5c:d4:1b:65:09:80:af:0a:97:a2:6b:6a:54:de: ba:a1:24:5a:14:61:73:e3:28:da:48:e7:16:4b:25:6c:f2:2d: 00:16:6d:e3:0e:6b:16:fb:9c:c5:5d:b0:f7:7f:9d:69:57:fb: b3:5f:c8:a7:7f:99:e8:83:18:47:bd:ff:87:3b:0d:03:e1:f4: 7a:47:cc:86:61:9d:9c:71:0b:9f:08:39:71:e2:49:31:2d:b8: 26:c0:b0:e1:16:23:98:c4:b0:ff:c8:e4:eb:7a:43:b0:c6:35: cd:b7:16:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzxV3O2ejTz3bZ7FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDIyMjAyMDAzMloXDTI2MDUyMzAxMDAzMlowLzEtMCsGA1UEAxMk OTNlYzZlZWEtYmMyMC00MDhkLTg3MWEtMjhkMThiOGE4ZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06LsQzouOqg9sfunL6jQIXy3D94OXL7zDjnZ dFTGpbSpRGpIINDFkjWRM73CRVGW3GXg6YNkMDIBaqy1egeDFzwWUGvW6sPYQrWT lRSAsOJC4UzkTWkV1ZGM4WsHr4lUwoBbI2ejCvQPWl01A3jI58I2PMP6sV8lB88c SApIhv0rQHE6EJ8+5LmaHWfUKO5MfYMD6hu0vnDMPZ8xNLvdMWITOVrumg5vXWzi QK4N0WCOtg7fZQ6CSh+jUvf7cXwye5k/AMYfcw6l2VycZyck96NiILkJFds74R4l 6FFqjgQcVolvKv+BDBktbS1ep+/E8wNBBPlFeHwEzpD/d7zEVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwhPMaCxODCa5Fp7bIo59jaWJ4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzVmMjkyMTgtZjk2My0z NjQ0LTlhMmItNGFiM2FmNmY4Zjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREM8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6KUAqez05cWBNkE/gvl2z+x4ucqvJhD0KLbM42a4UluGjLACCIh7up WufdpDTAFGBwHh6Mc5EfRMwAoHywwlkXxfB5gssZa3EkSW55CSSGuxs5Pt6bsvSH iNz39OOw916gHK+YJlO+Icuuv3x14019qkyDMWqTp5QOEIrr9T6fhP/bUccz/OUZ OwQ7wqicCy7WTg5c1BtlCYCvCpeia2pU3rqhJFoUYXPjKNpI5xZLJWzyLQAWbeMO axb7nMVdsPd/nWlX+7NfyKd/meiDGEe9/4c7DQPh9HpHzIZhnZxxC58IOXHiSTEt uCbAsOEWI5jEsP/I5Ot6Q7DGNc23Fmc= -----END CERTIFICATE-----Generated at Mon Mar 2 12:17:33 2026 by rpki-client