$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c23a28d-939d-344b-9816-02b592813f56.roa File: 9c23a28d-939d-344b-9816-02b592813f56.roa (raw, json) Hash identifier: 3AKRywrO7cLhmybdQe+14Lv5LnRUNfxQpSJqpEot6uo= Subject key identifier: 4F:0B:DF:9A:66:55:0B:17:A6:64:82:A5:48:06:BB:C8:1B:B0:29:FA Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584CE36221858BBF3DCE1013E300 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c23a28d-939d-344b-9816-02b592813f56.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 23473 IP address blocks: 68.180.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:21:85:8b:bf:3d:ce:10:13:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=1d80e97d-dbee-4f22-9962-d5b2a5e752ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:25:5f:a7:f4:c2:58:01:1b:43:3a:47:de:9b: 0e:ed:f3:35:72:9c:e2:0c:56:7d:07:54:f7:73:65: 84:e4:75:3b:c6:b7:a2:8c:98:0b:a9:f9:93:bf:a6: b2:c7:98:28:44:34:9e:ef:ee:51:b4:82:2d:56:aa: 39:30:1b:43:72:41:3f:e1:48:3a:a5:0d:de:2d:14: 85:ca:5b:66:45:4e:20:dd:27:b8:f3:f9:98:d8:f9: c2:e0:90:93:02:06:2d:ce:b1:b6:e6:48:5c:31:ee: bb:83:03:fc:bf:16:34:78:ec:ef:ab:a8:d7:da:96: 86:31:45:00:75:5c:76:6f:0f:08:6d:b3:21:92:88: e2:6d:c4:33:99:80:01:fd:93:95:0e:0e:cb:11:ce: 08:d7:06:5c:cd:b9:6a:d2:85:a7:21:53:1e:6a:53: f9:22:d7:99:97:ba:73:fc:93:4a:5d:8b:bb:84:a1: 20:99:82:db:46:8e:a7:f7:5b:0f:af:2e:d9:04:7f: e0:9e:8d:57:1f:bb:bd:51:b0:4b:62:00:83:cb:84: 3d:55:56:3a:7a:b2:84:46:70:b1:ce:03:f6:ba:db: 02:b9:24:9e:e8:0f:02:02:ca:08:39:c5:70:e2:ea: fb:18:01:d3:29:6b:6c:b8:a9:cf:79:94:01:10:02: dc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0B:DF:9A:66:55:0B:17:A6:64:82:A5:48:06:BB:C8:1B:B0:29:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c23a28d-939d-344b-9816-02b592813f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2d:18:a2:36:37:22:6b:66:d4:9f:cc:a2:88:28:37:60:ad: 34:ed:85:fe:d9:d5:20:b8:b4:7b:b8:42:b6:27:c2:80:9b:87: 8a:03:ad:d6:d6:f6:3d:da:05:27:1b:7b:1e:ca:93:91:91:69: 5e:80:57:c9:52:6d:4e:5e:fd:47:4a:7c:6f:06:99:9e:f6:e3: ba:24:a5:0f:f8:aa:e0:df:68:8f:cb:af:28:db:12:11:66:c2: de:41:99:89:7b:5d:25:ef:f7:97:ec:48:0e:ba:44:63:25:09: 58:c8:98:09:b4:e6:22:b2:80:26:e6:71:b7:74:b7:6e:5a:68: b7:cd:b4:4e:a9:d4:50:d6:49:72:5b:b9:4e:f1:db:32:0f:e7: e9:3b:09:aa:62:e6:0d:d1:9e:f3:e5:16:a9:98:d7:32:cd:cd: d8:91:d2:10:4f:19:1f:c1:b2:81:2b:06:d8:b9:6b:ad:2d:90: 63:32:aa:3e:f6:59:8f:12:eb:76:39:7d:88:c0:1e:39:ce:45: b0:a6:40:10:f4:1e:c0:c1:65:1e:21:c9:27:60:0c:12:84:b6: 20:4f:2b:72:21:92:72:43:39:88:5d:fc:60:16:b3:12:44:9b: 92:eb:32:5c:65:b5:4e:2d:34:07:6c:f4:39:37:d8:83:9c:35: 51:2c:67:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYiGFi789zhAT4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk MWQ4MGU5N2QtZGJlZS00ZjIyLTk5NjItZDViMmE1ZTc1MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSVfp/TCWAEbQzpH3psO7fM1cpziDFZ9B1T3 c2WE5HU7xreijJgLqfmTv6ayx5goRDSe7+5RtIItVqo5MBtDckE/4Ug6pQ3eLRSF yltmRU4g3Se48/mY2PnC4JCTAgYtzrG25khcMe67gwP8vxY0eOzvq6jX2paGMUUA dVx2bw8IbbMhkojibcQzmYAB/ZOVDg7LEc4I1wZczblq0oWnIVMealP5IteZl7pz /JNKXYu7hKEgmYLbRo6n91sPry7ZBH/gno1XH7u9UbBLYgCDy4Q9VVY6erKERnCx zgP2utsCuSSe6A8CAsoIOcVw4ur7GAHTKWtsuKnPeZQBEALc2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8L35pmVQsXpmSCpUgGu8gbsCn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOWMyM2EyOGQtOTM5ZC0z NDRiLTk4MTYtMDJiNTkyODEzZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0tGKI2NyJrZtSfzKKIKDdgrTTthf7Z1SC4tHu4QrYnwoCbh4oDrdbW 9j3aBScbex7Kk5GRaV6AV8lSbU5e/UdKfG8GmZ7247okpQ/4quDfaI/LryjbEhFm wt5BmYl7XSXv95fsSA66RGMlCVjImAm05iKygCbmcbd0t25aaLfNtE6p1FDWSXJb uU7x2zIP5+k7Capi5g3RnvPlFqmY1zLNzdiR0hBPGR/BsoErBti5a60tkGMyqj72 WY8S63Y5fYjAHjnORbCmQBD0HsDBZR4hySdgDBKEtiBPK3IhknJDOYhd/GAWsxJE m5LrMlxltU4tNAds9Dk32IOcNVEsZ/s= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:17 2026 by rpki-client