$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/88ae4c46-728f-3e77-a5e6-68cd27b6c870.roa File: 88ae4c46-728f-3e77-a5e6-68cd27b6c870.roa (raw, json) Hash identifier: +H0prt3lOSMiT2rdbe6JbQtUAOuxBdBkjK1BFvY29L4= Subject key identifier: 9C:57:4B:A5:55:AB:80:9A:71:FF:C0:9E:06:04:EF:56:52:E6:8C:FC Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584DD4C066651FC0005C107E5898 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/88ae4c46-728f-3e77-a5e6-68cd27b6c870.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 23473 IP address blocks: 68.234.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:66:65:1f:c0:00:5c:10:7e:58:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=e311ea84-6d1a-43ea-a2bf-0844148566ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:58:83:a6:03:90:f4:bc:9f:59:59:01:37: 3d:89:c3:81:be:a5:e9:e1:35:cb:dc:bf:9c:1e:7e: 35:49:f1:2c:54:f9:bf:c4:00:e0:24:c1:d7:32:c1: b5:a8:5b:15:a2:7f:8b:5a:e9:6a:7f:95:d0:99:d7: 56:e2:a7:0e:b1:37:3b:99:c0:8d:3d:c3:10:89:36: a6:54:28:c8:b0:59:1e:cc:6e:64:00:bc:27:86:84: b3:72:63:54:b1:bf:3a:42:24:fa:24:02:03:8c:4b: 78:0d:b6:53:f5:84:95:e1:18:25:a4:80:4b:3e:a8: 93:54:b4:1b:15:59:be:27:19:2e:a6:4b:2e:13:6a: e3:89:60:06:7b:23:f1:e0:e4:7c:9d:a0:fb:df:89: 48:5e:94:b6:5d:82:44:41:ce:28:ad:f2:5b:90:2c: 33:7b:9c:ab:89:0c:c3:8d:7f:ed:6f:a1:b2:ed:bb: 62:4d:e4:ee:6b:f7:83:8c:21:56:ef:f9:47:96:b6: a3:5c:9b:33:f1:fd:57:2c:ea:59:72:83:5c:dd:60: f0:84:b7:0a:c5:5c:9f:80:13:31:fb:13:9e:f2:f9: 11:95:49:7d:4c:1b:da:12:cb:64:f0:f9:fe:ae:9f: 27:0d:b2:5c:00:9d:37:0e:7a:25:da:8c:06:27:80: 51:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:57:4B:A5:55:AB:80:9A:71:FF:C0:9E:06:04:EF:56:52:E6:8C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/88ae4c46-728f-3e77-a5e6-68cd27b6c870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0b:62:28:6b:ae:d4:10:e9:8c:1d:ee:d8:9e:47:2d:73:61: 04:fd:8c:46:c6:7a:e1:d5:90:22:dc:d8:73:f4:43:b0:df:4f: ae:6a:01:4c:b7:23:41:64:62:f3:83:d9:8a:e7:31:a7:bc:e9: 0c:04:89:90:c9:bf:25:2a:3b:b3:e7:a9:ed:41:47:73:9d:74: 2d:db:b4:bb:7f:c1:29:03:1e:38:75:12:68:8a:d1:23:74:26: ac:57:67:59:83:17:bd:0f:05:57:46:43:89:5f:ef:4f:14:5b: 02:a1:54:eb:97:44:9f:a7:ff:02:d0:4f:87:9d:d1:46:72:43: 7f:1c:29:5c:cd:88:5d:74:6f:d1:aa:70:a0:fe:1a:a3:1b:23: 8e:8b:09:8d:1d:0a:74:17:f8:4c:e3:59:bd:38:46:96:6d:49: e2:be:cb:8a:30:85:3c:e7:7f:15:7e:de:62:ea:c2:27:9a:10: c7:be:5b:58:37:63:62:b2:2d:53:3e:e2:6f:2a:f6:09:93:7a: 9f:77:db:10:80:4b:32:0f:b8:cd:9f:80:27:23:94:3d:47:e1: 32:e2:b4:e1:19:3b:60:55:58:88:8d:7c:81:d9:90:96:35:62: af:f9:3e:32:4d:8a:dd:0c:88:ff:8d:66:46:6f:10:95:90:74: fa:0d:d6:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwGZlH8AAXBB+WJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk ZTMxMWVhODQtNmQxYS00M2VhLWEyYmYtMDg0NDE0ODU2NmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllBYg6YDkPS8n1lZATc9icOBvqXp4TXL3L+c Hn41SfEsVPm/xADgJMHXMsG1qFsVon+LWulqf5XQmddW4qcOsTc7mcCNPcMQiTam VCjIsFkezG5kALwnhoSzcmNUsb86QiT6JAIDjEt4DbZT9YSV4RglpIBLPqiTVLQb FVm+JxkupksuE2rjiWAGeyPx4OR8naD734lIXpS2XYJEQc4orfJbkCwze5yriQzD jX/tb6Gy7btiTeTua/eDjCFW7/lHlrajXJsz8f1XLOpZcoNc3WDwhLcKxVyfgBMx +xOe8vkRlUl9TBvaEstk8Pn+rp8nDbJcAJ03Dnol2owGJ4BR+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxXS6VVq4Cacf/AngYE71ZS5oz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODhhZTRjNDYtNzI4Zi0z ZTc3LWE1ZTYtNjhjZDI3YjZjODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0LYihrrtQQ6Ywd7tieRy1zYQT9jEbGeuHVkCLc2HP0Q7DfT65qAUy3 I0FkYvOD2YrnMae86QwEiZDJvyUqO7Pnqe1BR3OddC3btLt/wSkDHjh1EmiK0SN0 JqxXZ1mDF70PBVdGQ4lf708UWwKhVOuXRJ+n/wLQT4ed0UZyQ38cKVzNiF10b9Gq cKD+GqMbI46LCY0dCnQX+EzjWb04RpZtSeK+y4owhTznfxV+3mLqwieaEMe+W1g3 Y2KyLVM+4m8q9gmTep932xCASzIPuM2fgCcjlD1H4TLitOEZO2BVWIiNfIHZkJY1 Yq/5PjJNit0MiP+NZkZvEJWQdPoN1sk= -----END CERTIFICATE-----Generated at Sat Jun 13 18:48:21 2026 by rpki-client