$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2d2c0e28-515e-3760-af23-0dd63c0c2a60.roa File: 2d2c0e28-515e-3760-af23-0dd63c0c2a60.roa (raw, json) Hash identifier: s/re+JJZ/7O3nNSv2j2y71LsYZzYVqaDQcRWo/Y5Qi0= Subject key identifier: 24:04:5F:44:7B:FD:CD:00:70:27:BA:32:E0:0F:5C:DA:D6:AF:C7:BA Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D4EE75F48BB94A6718C7F9E00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2d2c0e28-515e-3760-af23-0dd63c0c2a60.roa Signing time: Fri 27 Mar 2026 14:20:49 +0000 ROA not before: Fri 27 Mar 2026 14:20:49 +0000 ROA not after: Thu 25 Jun 2026 14:20:49 +0000 asID: 23473 IP address blocks: 68.180.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:e7:5f:48:bb:94:a6:71:8c:7f:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 27 14:20:49 2026 GMT Not After : Jun 25 14:20:49 2026 GMT Subject: CN=80e55415-55e5-47b0-88fb-43e0fd84993b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:15:a1:64:21:52:f3:14:52:be:66:b4:82: fb:db:07:c5:a1:a2:3f:e7:17:06:27:62:85:30:6e: a5:e4:78:d5:7b:fa:1b:60:a9:7e:3d:fa:bf:b9:b8: 17:1c:08:df:75:1f:c7:f3:8b:db:03:46:95:96:68: 70:11:d4:14:61:22:b0:b5:56:8b:5b:30:8c:72:8b: 23:94:77:81:d3:c6:97:46:28:28:51:ad:28:31:47: 7b:bd:50:f4:6e:ae:49:e5:1b:3a:04:d4:21:e0:fd: 05:f2:df:fd:a0:16:1a:51:94:82:f6:33:12:ff:52: 73:24:12:0e:f0:db:46:88:a1:bf:c3:e8:3e:b8:2a: 91:2c:d9:3f:ed:7f:93:f4:1a:cd:bd:ab:cd:58:c9: 80:0e:4a:1e:30:e0:9a:06:be:9b:31:79:71:ee:4f: 30:28:c3:28:9a:a8:a1:21:f0:23:9c:e7:7d:b3:82: 91:f4:88:e2:2f:89:84:2d:ba:b1:bc:13:81:67:75: d5:9a:f9:c2:2b:e7:a3:d5:48:e6:43:3b:1c:97:4f: cd:45:93:7d:63:6a:0d:3e:72:f2:f8:9e:de:9c:22: a6:65:61:77:6a:aa:05:dc:f2:6c:c4:59:d6:97:75: a9:ab:76:f6:e6:df:e0:82:ce:63:e7:e5:ab:80:30: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:04:5F:44:7B:FD:CD:00:70:27:BA:32:E0:0F:5C:DA:D6:AF:C7:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2d2c0e28-515e-3760-af23-0dd63c0c2a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:7a:8a:2c:33:73:83:51:35:80:78:c6:73:49:06:30:4b:e5: f6:ae:b0:cc:ef:9d:e6:63:31:08:a8:3d:ce:2c:e4:27:87:f6: f6:e0:24:56:b7:2c:62:0d:f6:b0:73:19:42:0d:06:5b:77:dc: d6:3e:ff:1d:34:23:59:d7:87:db:4d:f3:7f:96:48:13:2d:c1: c8:ff:4c:1d:f8:31:ad:0d:93:87:82:8c:2a:67:05:78:9f:20: 1d:48:15:53:c1:03:08:0b:e1:74:d8:33:4c:f4:29:cf:41:3a: 48:1a:39:c2:f4:41:db:f7:c6:7e:2f:e4:b0:58:17:bf:5c:2a: a0:b8:e6:3e:95:f2:fe:a7:e6:c5:cc:e8:b5:d3:fc:44:4f:93: 73:a6:dd:b3:bd:1b:73:1f:53:43:74:ed:c5:65:98:ec:a3:13: 28:97:55:78:c4:53:ac:b0:fe:6c:5b:76:9d:fb:83:d6:7a:07: 06:6f:05:76:f3:1a:8f:9c:a4:8a:95:a5:22:fa:73:e0:ec:be: e0:ba:d4:50:2a:94:db:93:9d:cf:86:64:89:27:7b:fc:a5:94: a2:e7:d3:2b:1d:72:22:12:10:a1:0a:fd:f0:bf:93:e4:9e:60: f7:8d:f8:37:4a:12:63:de:d6:2c:5b:b2:a3:6d:3d:0b:99:00: 02:02:e1:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1O519Iu5SmcYx/ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyNzE0MjA0OVoXDTI2MDYyNTE0MjA0OVowLzEtMCsGA1UEAxMk ODBlNTU0MTUtNTVlNS00N2IwLTg4ZmItNDNlMGZkODQ5OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsoVoWQhUvMUUr5mtIL72wfFoaI/5xcGJ2KF MG6l5HjVe/obYKl+Pfq/ubgXHAjfdR/H84vbA0aVlmhwEdQUYSKwtVaLWzCMcosj lHeB08aXRigoUa0oMUd7vVD0bq5J5Rs6BNQh4P0F8t/9oBYaUZSC9jMS/1JzJBIO 8NtGiKG/w+g+uCqRLNk/7X+T9BrNvavNWMmADkoeMOCaBr6bMXlx7k8wKMMomqih IfAjnOd9s4KR9IjiL4mELbqxvBOBZ3XVmvnCK+ej1UjmQzscl0/NRZN9Y2oNPnLy +J7enCKmZWF3aqoF3PJsxFnWl3Wpq3b25t/ggs5j5+WrgDCnjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQEX0R7/c0AcCe6MuAPXNrWr8e6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmQyYzBlMjgtNTE1ZS0z NzYwLWFmMjMtMGRkNjNjMGMyYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp6iiwzc4NRNYB4xnNJBjBL5fausMzvneZjMQioPc4s5CeH9vbgJFa3 LGIN9rBzGUINBlt33NY+/x00I1nXh9tN83+WSBMtwcj/TB34Ma0Nk4eCjCpnBXif IB1IFVPBAwgL4XTYM0z0Kc9BOkgaOcL0Qdv3xn4v5LBYF79cKqC45j6V8v6n5sXM 6LXT/ERPk3Om3bO9G3MfU0N07cVlmOyjEyiXVXjEU6yw/mxbdp37g9Z6BwZvBXbz Go+cpIqVpSL6c+DsvuC61FAqlNuTnc+GZIkne/yllKLn0ysdciISEKEK/fC/k+Se YPeN+DdKEmPe1ixbsqNtPQuZAAIC4dc= -----END CERTIFICATE-----Generated at Fri Apr 17 12:43:15 2026 by rpki-client