$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/9632c414-89db-304c-bf1d-7e66cbea85d4.roa File: 9632c414-89db-304c-bf1d-7e66cbea85d4.roa (raw, json) Hash identifier: LAHGXmrhW3FkVHpQUoCSwxpDe+Ky7ijImQuB6PSl1fE= Subject key identifier: FD:1E:80:38:12:41:C0:93:86:48:4C:00:3B:7C:78:91:30:53:4C:32 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584DF4DB8F72CAD5423D982E0300 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/9632c414-89db-304c-bf1d-7e66cbea85d4.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 16509 IP address blocks: 68.71.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:8f:72:ca:d5:42:3d:98:2e:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=8a10b07a-82f5-4f32-a7b3-f40239fb9531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:56:dd:3a:f2:a0:f5:51:b2:2d:1c:b7:a0:2a: 9c:86:a1:a2:86:4a:ed:9e:c2:5c:e1:12:2e:9d:8a: 6d:14:1a:90:ec:d0:b9:8f:3b:a2:20:aa:25:b7:b3: 5e:f4:b5:b5:ef:16:94:f3:69:a3:b7:5b:4a:0f:50: 6b:94:50:e1:3f:32:0a:ee:63:46:72:c4:a6:5f:5e: 40:ca:4c:6c:dd:cc:5b:c3:d8:62:2f:7d:f5:0b:05: 24:cb:2f:0d:37:86:e4:47:77:da:e8:14:fd:50:7c: a1:84:79:3f:e7:d9:f9:67:68:81:0f:02:b0:cb:d4: 33:4a:68:d6:46:13:ab:c9:63:e8:d4:3b:0d:29:a7: 15:00:37:b9:aa:a7:d8:44:f0:5e:ef:ed:29:68:a9: ad:71:70:3e:20:87:80:f6:39:20:3c:61:80:18:34: 9d:06:8e:a7:86:55:47:5b:10:61:07:9f:8f:6c:e7: 09:3d:1c:42:44:e6:84:f3:bf:1c:34:c9:4a:04:0f: 19:3a:a6:de:57:e0:08:1c:a6:70:56:98:cf:a4:4c: c9:bc:9f:5c:0c:d8:f3:00:43:d7:ab:f1:67:0c:8e: 8c:5a:0b:44:61:a8:6d:81:55:bc:3a:b7:86:d2:e1: bf:04:bc:9c:fa:09:ea:31:53:0f:f4:ac:a1:8a:22: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1E:80:38:12:41:C0:93:86:48:4C:00:3B:7C:78:91:30:53:4C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/9632c414-89db-304c-bf1d-7e66cbea85d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d6:47:c6:24:55:4f:87:90:b5:3c:d7:30:09:c5:d2:68:1e: 77:33:c8:21:96:a8:ae:c9:2c:76:52:17:4b:16:e1:49:b3:18: dc:81:f0:2f:43:87:5f:b1:8e:80:58:e2:ce:84:8c:48:fe:22: 23:6e:bc:0f:d8:1f:a8:c3:98:31:f4:6a:01:4c:fa:08:c8:d3: 12:a0:b9:aa:d0:f8:37:7e:5a:35:2e:73:c2:a2:60:75:b6:b5: 0b:13:7e:3f:92:8b:32:b2:49:42:17:fd:f5:9f:f2:ff:4f:81: fb:0a:7a:77:8e:f7:61:77:9f:12:07:2a:49:88:9e:07:bc:15: 4c:91:c6:b1:9e:95:e7:41:3d:6c:c2:ed:ad:23:cd:23:36:e1: 75:72:11:b1:2e:a0:bf:32:e6:56:d6:83:09:80:7f:5a:6a:24: f7:38:5c:2f:df:e0:da:6f:ff:07:0b:04:4d:ef:1c:07:77:69: 94:2a:ff:b9:43:e4:91:f8:92:d0:32:79:ea:97:9c:5f:e7:13: e4:aa:97:3e:f7:d9:22:a2:c0:0e:da:da:84:d5:91:1c:35:52: 81:23:5f:c9:56:2f:f2:50:05:8a:37:a5:97:b9:e4:0f:bf:8a: c0:d2:f7:e9:83:34:46:a5:41:8f:74:6d:20:ab:78:1b:36:1f: c0:76:0c:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30249yytVCPZguAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk OGExMGIwN2EtODJmNS00ZjMyLWE3YjMtZjQwMjM5ZmI5NTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFbdOvKg9VGyLRy3oCqchqGihkrtnsJc4RIu nYptFBqQ7NC5jzuiIKolt7Ne9LW17xaU82mjt1tKD1BrlFDhPzIK7mNGcsSmX15A ykxs3cxbw9hiL331CwUkyy8NN4bkR3fa6BT9UHyhhHk/59n5Z2iBDwKwy9QzSmjW RhOryWPo1DsNKacVADe5qqfYRPBe7+0paKmtcXA+IIeA9jkgPGGAGDSdBo6nhlVH WxBhB5+PbOcJPRxCROaE878cNMlKBA8ZOqbeV+AIHKZwVpjPpEzJvJ9cDNjzAEPX q/FnDI6MWgtEYahtgVW8OreG0uG/BLyc+gnqMVMP9KyhiiIi8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0egDgSQcCThkhMADt8eJEwU0wyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvOTYzMmM0MTQtODlkYi0z MDRjLWJmMWQtN2U2NmNiZWE4NWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7WR8YkVU+HkLU81zAJxdJoHnczyCGWqK7JLHZSF0sW4UmzGNyB8C9D h1+xjoBY4s6EjEj+IiNuvA/YH6jDmDH0agFM+gjI0xKguarQ+Dd+WjUuc8KiYHW2 tQsTfj+SizKySUIX/fWf8v9PgfsKeneO92F3nxIHKkmInge8FUyRxrGeledBPWzC 7a0jzSM24XVyEbEuoL8y5lbWgwmAf1pqJPc4XC/f4Npv/wcLBE3vHAd3aZQq/7lD 5JH4ktAyeeqXnF/nE+Sqlz732SKiwA7a2oTVkRw1UoEjX8lWL/JQBYo3pZe55A+/ isDS9+mDNEalQY90bSCreBs2H8B2DOE= -----END CERTIFICATE-----Generated at Sat Jun 13 09:52:07 2026 by rpki-client