$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2d0f0dec-74fd-3a75-a5de-0285c8228e3a.roa File: 2d0f0dec-74fd-3a75-a5de-0285c8228e3a.roa (raw, json) Hash identifier: 8nRgrNh8dpcSzcbD7TI8EK/XHffEkdFWUqVFu0di3rM= Subject key identifier: 24:C5:7F:77:FB:D1:49:50:F6:45:50:43:E7:15:ED:74:1A:4D:07:51 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D773A8208D403DE338A081940 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2d0f0dec-74fd-3a75-a5de-0285c8228e3a.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 23473 IP address blocks: 68.234.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:82:08:d4:03:de:33:8a:08:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=1cdd3dfe-ef7e-4aac-aba8-ba2cc60e2f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:d5:74:c5:a6:62:3f:19:1d:bc:b4:bd:22: 87:e8:bf:27:b5:d3:9d:4e:01:4e:26:be:87:81:c8: 9b:31:bf:50:7f:20:89:d9:1b:aa:3c:85:9a:83:2e: 24:b9:8b:c7:b2:5b:98:1b:b2:d9:84:57:85:c4:76: 70:ff:3d:52:6f:9c:7d:0e:0d:a6:52:1d:44:a8:fe: 19:f2:60:70:69:8d:c1:d1:73:24:3b:35:03:fc:8b: 0b:5a:ad:9d:2d:7c:74:a2:b4:be:db:e0:34:c5:9b: ad:96:af:00:07:d0:b3:86:fb:0e:09:4f:1a:1e:1d: 0a:30:52:db:73:a2:c1:ce:53:91:13:7e:5a:2f:cd: 0d:65:b4:69:b2:e7:80:1e:e2:10:1c:2d:da:73:d9: ca:cb:32:6a:9a:2c:d6:b0:5f:38:94:b9:c7:58:1f: 4d:30:b9:d8:b1:02:ee:7d:77:d8:c4:71:60:84:b8: 8c:63:17:53:a3:c0:d7:03:3d:e8:14:7f:7e:33:f9: 35:63:b1:41:e9:a1:69:44:4a:22:c1:f3:fb:2d:f6: 6e:45:b0:08:0b:4b:53:74:18:b5:ca:4d:2d:3f:53: 1e:63:d5:66:01:60:08:03:62:08:10:08:ec:77:09: 43:7a:86:78:ed:ce:18:51:38:bd:99:80:56:fc:06: a4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:7F:77:FB:D1:49:50:F6:45:50:43:E7:15:ED:74:1A:4D:07:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2d0f0dec-74fd-3a75-a5de-0285c8228e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:08:62:55:66:76:e4:34:5a:d4:06:69:21:21:b2:f3:db:08: 29:a9:74:55:4c:ff:b7:ac:d5:a3:98:dd:36:ba:31:9c:a6:7c: a5:a4:bb:89:ac:ed:92:7e:38:c4:57:85:0a:ed:1a:81:66:cb: 92:81:1c:f7:c2:27:6d:d6:d6:8e:3b:ee:88:50:d0:19:cf:f7: 98:9e:02:84:40:8e:71:de:21:04:88:82:5a:80:f4:52:df:e0: f9:c4:2d:8c:35:61:63:7b:e8:35:38:3c:5e:7c:24:62:70:b6: 58:27:32:5d:42:f7:e9:8c:11:55:ef:82:97:bc:16:c2:d3:b8: 87:2a:5a:4f:17:29:dc:b2:1c:4d:c4:a1:6b:36:01:85:a4:2c: 14:1e:4f:61:46:82:f4:f5:42:53:58:bb:a4:bb:5e:8b:08:21: f5:15:a1:c7:b0:57:b8:cc:f8:8b:6a:0f:d3:b6:2a:92:b8:ba: 32:7b:b5:5f:58:2b:cd:ea:ee:0c:20:b4:48:20:02:2e:c7:e6: 1d:98:ea:39:80:77:ce:f9:7a:01:5b:6e:1e:f1:41:f3:dc:4b: e1:d5:eb:4e:d0:9f:30:3b:a8:ac:52:1e:3f:4d:61:66:44:67: 31:a3:f5:39:0c:d1:d4:06:57:8d:98:72:e6:6e:64:f2:02:04: c6:56:27:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoII1APeM4oIGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MWNkZDNkZmUtZWY3ZS00YWFjLWFiYTgtYmEyY2M2MGUyZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUXVdMWmYj8ZHby0vSKH6L8ntdOdTgFOJr6H gcibMb9QfyCJ2RuqPIWagy4kuYvHsluYG7LZhFeFxHZw/z1Sb5x9Dg2mUh1EqP4Z 8mBwaY3B0XMkOzUD/IsLWq2dLXx0orS+2+A0xZutlq8AB9CzhvsOCU8aHh0KMFLb c6LBzlORE35aL80NZbRpsueAHuIQHC3ac9nKyzJqmizWsF84lLnHWB9NMLnYsQLu fXfYxHFghLiMYxdTo8DXAz3oFH9+M/k1Y7FB6aFpREoiwfP7LfZuRbAIC0tTdBi1 yk0tP1MeY9VmAWAIA2IIEAjsdwlDeoZ47c4YUTi9mYBW/AakqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTFf3f70UlQ9kVQQ+cV7XQaTQdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmQwZjBkZWMtNzRmZC0z YTc1LWE1ZGUtMDI4NWM4MjI4ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAIYlVmduQ0WtQGaSEhsvPbCCmpdFVM/7es1aOY3Ta6MZymfKWku4ms 7ZJ+OMRXhQrtGoFmy5KBHPfCJ23W1o477ohQ0BnP95ieAoRAjnHeIQSIglqA9FLf 4PnELYw1YWN76DU4PF58JGJwtlgnMl1C9+mMEVXvgpe8FsLTuIcqWk8XKdyyHE3E oWs2AYWkLBQeT2FGgvT1QlNYu6S7XosIIfUVocewV7jM+ItqD9O2KpK4ujJ7tV9Y K83q7gwgtEggAi7H5h2Y6jmAd875egFbbh7xQfPcS+HV607QnzA7qKxSHj9NYWZE ZzGj9TkM0dQGV42YcuZuZPICBMZWJ9U= -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:28 2026 by rpki-client