$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa File: 28914dd1-0593-3a05-8bae-dc7ef054b587.roa (raw, json) Hash identifier: +ITxauGlpFehdL4BB0CygdjVZaLBFR8QTduD1CR1dv0= Subject key identifier: 34:28:0D:D9:8B:18:41:D9:B2:35:DF:01:38:A2:F3:8C:0F:55:99:8B Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584CA32C71D78E3528F8DA89A380 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 26744 IP address blocks: 68.170.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:71:d7:8e:35:28:f8:da:89:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=d3bea4f1-aa45-4106-9c81-d2f95e5b2454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:df:b0:6f:3c:69:a0:e8:98:1d:6c:7e:df: a1:2d:2d:a2:41:76:70:6b:0c:9b:e1:5a:c0:e5:5c: 17:5b:8f:67:7a:53:b4:fc:8b:44:31:e4:49:06:d2: fd:c2:7a:09:59:5b:89:cc:eb:1b:58:04:90:12:94: ac:5a:28:52:19:ac:43:e6:b0:aa:71:b1:e1:2c:5a: e2:75:07:f4:3e:d7:99:ce:a0:a6:de:ed:e4:72:9f: 49:21:f6:e2:09:6f:2c:7d:28:22:70:3d:98:c7:3d: a8:95:f2:98:8d:8f:f2:d4:83:6e:99:db:35:3a:a9: 96:f8:a4:5d:32:de:5e:2b:2f:56:f6:fc:33:53:ab: fd:9a:26:5c:e7:ea:e2:d5:35:da:ee:19:b5:cb:08: 33:60:c3:8b:c4:98:e0:19:7a:76:a1:b9:dc:6c:11: 54:0b:b7:94:03:25:97:1f:06:5b:c0:15:70:19:80: bf:6e:fc:ec:7f:db:7d:3d:06:0e:3d:57:3f:6d:9e: c8:56:2a:29:02:2b:75:00:50:0a:b2:8a:89:06:e5: 6b:37:39:0c:f5:1f:a9:5b:07:7b:7c:79:3d:16:22: 45:91:d7:19:83:ff:a4:38:57:65:e0:53:d2:6a:45: 2b:c4:9b:55:4f:5b:a0:74:95:e2:49:68:ad:6c:66: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:28:0D:D9:8B:18:41:D9:B2:35:DF:01:38:A2:F3:8C:0F:55:99:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:78:c8:43:4e:d9:c8:48:36:af:91:8a:9b:4f:77:15:8c:27: d0:43:e3:d0:7a:b5:9a:20:01:af:b7:9e:23:4a:94:b7:c9:a9: d4:e3:28:a4:e6:df:97:01:3c:f4:52:82:57:67:89:ff:29:f3: af:65:9a:be:ac:da:54:44:ae:c4:e9:d3:0e:0d:54:73:59:67: c1:4a:06:70:c5:eb:96:02:9b:b7:8e:32:eb:01:e6:0e:fd:2a: 2a:60:e3:04:c9:b2:74:d3:34:91:0b:1b:e2:25:42:c5:2e:cd: 7e:8c:eb:92:9a:be:b4:de:3c:9d:fd:2f:58:1d:b4:7e:33:12: cb:69:51:21:a2:01:c7:cc:6d:aa:26:08:c9:54:41:73:8d:67: 3b:80:18:a4:63:3c:40:c0:27:ee:ef:5f:ca:ce:41:18:35:ab: 7e:f8:dd:d7:ab:2c:9e:49:b5:13:55:ef:0e:92:c0:e2:e0:b8: 63:ca:8b:f3:c8:c2:80:3f:5d:45:55:88:ea:2a:07:44:20:47: e2:f7:74:78:1a:c3:36:da:1a:d4:15:41:e1:81:fe:92:fd:2c: 59:e0:9e:69:78:90:5b:21:4d:be:18:08:38:f0:99:fb:71:61: 8d:7a:c6:22:01:d3:cc:fb:94:5f:fc:59:fb:ea:96:30:07:7c: 04:91:42:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLHHXjjUo+NqJo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZDNiZWE0ZjEtYWE0NS00MTA2LTljODEtZDJmOTVlNWIyNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqunfsG88aaDomB1sft+hLS2iQXZwawyb4VrA 5VwXW49nelO0/ItEMeRJBtL9wnoJWVuJzOsbWASQEpSsWihSGaxD5rCqcbHhLFri dQf0PteZzqCm3u3kcp9JIfbiCW8sfSgicD2Yxz2olfKYjY/y1INumds1OqmW+KRd Mt5eKy9W9vwzU6v9miZc5+ri1TXa7hm1ywgzYMOLxJjgGXp2obncbBFUC7eUAyWX HwZbwBVwGYC/bvzsf9t9PQYOPVc/bZ7IViopAit1AFAKsoqJBuVrNzkM9R+pWwd7 fHk9FiJFkdcZg/+kOFdl4FPSakUrxJtVT1ugdJXiSWitbGagdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQoDdmLGEHZsjXfATii84wPVZmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMjg5MTRkZDEtMDU5My0z YTA1LThiYWUtZGM3ZWYwNTRiNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKr+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx4yENO2chINq+RiptPdxWMJ9BD49B6tZogAa+3niNKlLfJqdTjKKTm 35cBPPRSgldnif8p869lmr6s2lRErsTp0w4NVHNZZ8FKBnDF65YCm7eOMusB5g79 Kipg4wTJsnTTNJELG+IlQsUuzX6M65KavrTePJ39L1gdtH4zEstpUSGiAcfMbaom CMlUQXONZzuAGKRjPEDAJ+7vX8rOQRg1q3743derLJ5JtRNV7w6SwOLguGPKi/PI woA/XUVViOoqB0QgR+L3dHgawzbaGtQVQeGB/pL9LFngnml4kFshTb4YCDjwmftx YY16xiIB08z7lF/8WfvqljAHfASRQmI= -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:23 2026 by rpki-client