$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/91c327df-b7ae-3910-aca7-2740f7c1f6dc.roa File: 91c327df-b7ae-3910-aca7-2740f7c1f6dc.roa (raw, json) Hash identifier: EQwOIbcDyIm9+VwxDTXGrTLrzFV5Dfs45gYxIZxRWJI= Subject key identifier: 58:EB:90:A4:78:5D:81:26:C4:BB:C8:79:0F:7D:09:DA:16:5E:66:72 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584CA5F742C8EF72663B6253ACE0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/91c327df-b7ae-3910-aca7-2740f7c1f6dc.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 23473 IP address blocks: 68.234.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:42:c8:ef:72:66:3b:62:53:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=df4b148a-b3d5-49b1-9d96-e47e3622b4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:c6:16:86:c6:3d:5a:56:35:ea:9c:db:a3: e0:be:ac:84:fc:b3:4b:05:fa:30:4c:e5:e5:6d:9b: 7d:60:a6:d3:80:28:64:8e:12:c5:7e:4f:13:59:de: 06:3c:33:97:a1:48:2c:0d:77:b5:5f:0f:d4:23:5d: e1:1b:a6:90:03:03:7f:c5:4d:f3:ae:9e:23:df:49: 13:99:23:3d:24:f2:53:b3:d3:7b:4e:5f:87:ac:82: fb:c5:4d:19:f9:4d:38:dd:3f:66:80:ac:96:7e:d3: bf:ee:b1:d2:b6:4e:6a:a9:d4:0e:7d:21:95:d5:d9: 62:7a:12:55:e9:60:82:ce:2c:af:2d:69:09:a3:29: a0:ae:02:4f:53:ab:87:0b:fb:60:e4:40:a7:be:ea: a3:62:90:ad:99:57:2a:93:82:dc:7a:1f:4f:a7:34: 09:bf:45:f6:f3:a8:8a:24:20:7a:62:ae:cb:93:98: d6:db:e0:16:78:e8:03:92:f7:a8:88:e6:cc:8d:2e: cb:5f:56:6a:f3:30:69:56:16:fa:11:8b:5c:fd:9a: 09:89:02:ef:97:9b:29:bf:f3:ef:7d:fc:d2:13:f0: b5:3b:a8:08:21:81:7f:60:03:65:b6:33:1d:04:ab: 4d:96:89:a9:a7:0d:25:18:5a:9e:eb:d7:07:c2:9f: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EB:90:A4:78:5D:81:26:C4:BB:C8:79:0F:7D:09:DA:16:5E:66:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/91c327df-b7ae-3910-aca7-2740f7c1f6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d5:13:bb:5b:10:97:ef:0d:d1:09:c5:e0:ff:31:d6:95:76: 1a:a4:d9:93:14:ad:b1:e1:ab:c3:2e:45:c1:0a:d2:b0:d5:9d: 01:3b:5b:a3:f5:c5:a1:92:86:b2:f3:33:e8:79:ef:52:64:43: 6c:ff:c1:49:0c:51:e9:09:e4:b6:1a:51:3d:69:d9:d2:42:d9: 6a:ae:8a:32:d8:cf:11:3d:72:5d:29:f0:3d:3b:b7:89:8a:6e: 7e:cc:12:21:e4:c8:ce:fb:f0:c5:38:89:61:8e:05:14:82:95: 96:cb:fb:5d:1b:51:4c:1b:f5:67:01:a4:61:f1:9f:4c:5b:d1: 47:0f:2a:8c:06:76:36:87:1e:c1:2b:6d:98:24:b5:f1:88:19: 13:80:ee:c4:19:97:9d:12:b1:15:36:eb:6c:18:b6:3d:e0:5c: 20:74:aa:f9:3a:c5:a1:95:09:12:fe:e2:93:6f:10:16:dc:1f: 52:fe:04:6b:2b:de:dc:b7:8f:87:b7:ea:31:2b:ca:cb:38:2f: 07:2a:df:6e:01:03:0a:a0:41:2d:6b:22:4a:e8:b6:d2:94:a1: 76:c0:c9:02:fd:c4:ec:f5:6e:80:b6:ec:5a:21:1e:8b:8f:35: f4:ac:ed:ea:cd:a5:08:0d:62:1a:ca:91:4e:ad:f5:4c:6c:75: 29:40:83:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90LI73JmO2JTrOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZGY0YjE0OGEtYjNkNS00OWIxLTlkOTYtZTQ3ZTM2MjJiNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh/GFobGPVpWNeqc26PgvqyE/LNLBfowTOXl bZt9YKbTgChkjhLFfk8TWd4GPDOXoUgsDXe1Xw/UI13hG6aQAwN/xU3zrp4j30kT mSM9JPJTs9N7Tl+HrIL7xU0Z+U043T9mgKyWftO/7rHStk5qqdQOfSGV1dliehJV 6WCCziyvLWkJoymgrgJPU6uHC/tg5ECnvuqjYpCtmVcqk4Lceh9PpzQJv0X286iK JCB6Yq7Lk5jW2+AWeOgDkveoiObMjS7LX1Zq8zBpVhb6EYtc/ZoJiQLvl5spv/Pv ffzSE/C1O6gIIYF/YANltjMdBKtNlomppw0lGFqe69cHwp+z8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjrkKR4XYEmxLvIeQ99CdoWXmZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTFjMzI3ZGYtYjdhZS0z OTEwLWFjYTctMjc0MGY3YzFmNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROrLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7VE7tbEJfvDdEJxeD/MdaVdhqk2ZMUrbHhq8MuRcEK0rDVnQE7W6P1 xaGShrLzM+h571JkQ2z/wUkMUekJ5LYaUT1p2dJC2WquijLYzxE9cl0p8D07t4mK bn7MEiHkyM778MU4iWGOBRSClZbL+10bUUwb9WcBpGHxn0xb0UcPKowGdjaHHsEr bZgktfGIGROA7sQZl50SsRU262wYtj3gXCB0qvk6xaGVCRL+4pNvEBbcH1L+BGsr 3ty3j4e36jEryss4Lwcq324BAwqgQS1rIkrottKUoXbAyQL9xOz1boC27FohHouP NfSs7erNpQgNYhrKkU6t9UxsdSlAg1Y= -----END CERTIFICATE-----Generated at Mon Mar 2 04:37:38 2026 by rpki-client