$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa File: 308c77f3-049f-350a-ba83-1535cc6dfb51.roa (raw, json) Hash identifier: DFwX1o8hkvCyTIoB5PUj3hltPYSKi8bAE1cjLrxnJcU= Subject key identifier: 07:FC:23:62:0A:17:E2:9C:D0:BA:A2:7D:AE:72:0C:24:6B:39:7E:90 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584CA32C7334AF27E7EE02CED400 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 26744 IP address blocks: 68.170.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:73:34:af:27:e7:ee:02:ce:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=138441a5-9b83-4ae0-a578-cf34da7f85eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:35:1e:07:95:d4:87:c2:06:84:e0:10:00: fd:ad:d0:ea:e1:2d:56:f8:c8:a9:5e:1e:31:1d:3b: b9:f7:67:e3:2a:fe:af:a2:b4:cd:41:a3:ac:78:63: b1:41:b5:76:29:c4:17:74:f9:05:37:00:71:50:9e: 8a:38:97:22:83:fd:19:21:f9:1f:79:27:8c:92:a8: 78:3d:b0:77:43:f6:49:40:36:e1:2e:8d:05:32:f0: 65:ec:7f:40:cf:a7:08:27:74:19:f3:23:f7:fd:17: cd:01:28:80:9d:4a:94:08:19:1e:45:4d:df:1d:38: f9:b2:ab:0e:a9:34:b6:b4:d2:72:30:ac:45:db:cf: 13:c6:92:0a:e5:ad:a5:a7:87:0e:ff:4d:d0:9f:54: 30:b0:c5:72:a7:cc:35:09:aa:ab:d9:6b:8d:0e:3a: 9b:01:13:96:10:59:47:3b:42:b3:bd:96:01:b6:5b: ae:a6:4a:5f:62:86:c2:f9:1c:21:dd:fb:ae:02:27: 89:76:e4:f0:4f:17:c8:e6:3e:5c:41:1a:8b:c6:43: 03:de:31:42:ec:e2:82:41:5b:e5:cc:ab:3e:55:55: f2:0c:cb:29:af:09:b9:e6:11:6a:9a:7a:48:4e:96: 64:bd:a4:31:c3:ac:84:d1:da:b0:fd:18:73:c5:8d: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FC:23:62:0A:17:E2:9C:D0:BA:A2:7D:AE:72:0C:24:6B:39:7E:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/308c77f3-049f-350a-ba83-1535cc6dfb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 68.170.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:47:43:f9:dd:1d:c6:b6:94:f4:25:9f:39:8f:dd:6f:32:69: 07:1d:df:9a:51:64:e7:30:db:55:6f:a2:79:df:fd:c8:5b:a0: 9f:3a:9c:0e:77:33:d8:6c:43:a8:bc:e4:80:ac:ec:32:ea:77: 6f:d9:72:16:a3:36:10:da:55:04:52:73:e3:b0:37:6b:cf:26: 8e:b3:c7:99:67:79:5f:ac:e4:29:8f:61:d3:57:f1:21:21:d0: 70:9c:36:c0:7d:64:14:70:2c:f5:35:d8:26:27:33:91:a6:b9: 4a:e6:3e:f9:3a:82:04:0b:a0:5b:e1:9a:91:ab:70:c2:ab:ba: 05:a2:d0:e8:7d:bc:58:f4:4f:cd:4e:a0:8f:39:f5:1d:0e:43: 78:82:b9:91:ab:00:46:f6:84:8e:54:4d:b9:41:5c:57:7e:5e: 4d:52:97:dc:5f:db:e9:82:55:9a:51:87:03:46:3a:ce:8d:e0: b8:16:cf:fa:04:3e:01:17:e5:64:3a:20:eb:29:a2:28:50:d2: ab:ba:38:a4:95:2f:22:7e:f8:36:d8:75:3b:08:20:27:27:fa: 69:c4:b2:fc:4b:17:cf:b3:7e:9f:33:7e:73:73:bb:26:d9:c3: 6e:1c:f5:29:d1:e4:fc:20:df:14:5d:61:d1:33:93:b4:ac:0a: ae:c9:9b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLHM0ryfn7gLO1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk MTM4NDQxYTUtOWI4My00YWUwLWE1NzgtY2YzNGRhN2Y4NWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/o1HgeV1IfCBoTgEAD9rdDq4S1W+MipXh4x HTu592fjKv6vorTNQaOseGOxQbV2KcQXdPkFNwBxUJ6KOJcig/0ZIfkfeSeMkqh4 PbB3Q/ZJQDbhLo0FMvBl7H9Az6cIJ3QZ8yP3/RfNASiAnUqUCBkeRU3fHTj5sqsO qTS2tNJyMKxF288TxpIK5a2lp4cO/03Qn1QwsMVyp8w1Caqr2WuNDjqbAROWEFlH O0KzvZYBtluupkpfYobC+Rwh3fuuAieJduTwTxfI5j5cQRqLxkMD3jFC7OKCQVvl zKs+VVXyDMsprwm55hFqmnpITpZkvaQxw6yE0dqw/RhzxY2dHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAf8I2IKF+Kc0Lqifa5yDCRrOX6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMzA4Yzc3ZjMtMDQ5Zi0z NTBhLWJhODMtMTUzNWNjNmRmYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKryMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1HQ/ndHca2lPQlnzmP3W8yaQcd35pRZOcw21Vvonnf/chboJ86nA53 M9hsQ6i85ICs7DLqd2/ZchajNhDaVQRSc+OwN2vPJo6zx5lneV+s5CmPYdNX8SEh 0HCcNsB9ZBRwLPU12CYnM5GmuUrmPvk6ggQLoFvhmpGrcMKrugWi0Oh9vFj0T81O oI859R0OQ3iCuZGrAEb2hI5UTblBXFd+Xk1Sl9xf2+mCVZpRhwNGOs6N4LgWz/oE PgEX5WQ6IOspoihQ0qu6OKSVLyJ++DbYdTsIICcn+mnEsvxLF8+zfp8zfnNzuybZ w24c9SnR5Pwg3xRdYdEzk7SsCq7Jm74= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:25 2026 by rpki-client