$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa File: a10965b1-15bc-387b-be67-ebfa65ef6972.roa (raw, json) Hash identifier: 52/qfj8oIfprRRRf3b36jtPTy6ShWvyvfzAveG/EO/g= Subject key identifier: CB:2D:2F:C5:B7:9A:12:60:5C:34:76:5D:C2:9F:65:61:29:F2:42:82 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584CF6ECE537CD482DD738ED3F20 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 23473 IP address blocks: 68.234.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:e5:37:cd:48:2d:d7:38:ed:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=186ecd09-bd1f-4f4c-9399-531e747ce85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:22:c8:86:f0:64:00:a1:7f:6b:cd:e6:a5: dd:6f:7b:91:30:c1:99:64:2f:10:29:48:28:45:4b: 73:a5:e2:a2:7c:23:e5:78:6c:11:07:22:94:3e:c7: 41:14:62:cb:36:ba:62:dd:e8:6d:db:24:64:03:09: 1e:3c:41:ab:56:62:95:56:1f:06:a5:f0:eb:6b:88: 35:97:5b:f6:91:38:4c:2f:3d:90:cd:af:81:5b:08: fc:df:6d:e3:c7:10:b1:75:ac:41:05:11:66:af:8f: 8c:5a:44:6b:e4:ae:68:4a:41:37:8a:48:36:2d:24: 8d:e5:d2:67:75:a9:f6:ae:9f:bd:25:4c:93:9a:08: 93:7d:06:61:14:e6:f3:cb:2e:ab:5c:9d:21:1f:b6: cb:2c:10:3a:ad:4d:db:ff:33:fd:65:65:81:93:5b: 34:14:74:6c:32:8e:42:0f:cf:7b:d5:8b:59:b7:40: ba:55:21:3f:88:40:de:36:96:6a:03:7c:3a:44:01: 1e:89:30:5e:21:2e:09:7d:03:f6:38:a5:56:9e:83: 06:6e:94:6b:9a:8e:d4:e4:0f:c3:91:dd:1a:09:29: 3c:b7:53:f9:86:fd:3c:b9:7d:d0:94:3a:28:34:39: 27:9a:4a:dd:b6:5a:e2:24:22:0a:bf:ba:fe:10:25: 42:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2D:2F:C5:B7:9A:12:60:5C:34:76:5D:C2:9F:65:61:29:F2:42:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:02:df:65:88:74:d1:2f:1a:71:da:63:33:69:92:c6:69:54: b2:e5:bd:76:63:c9:cc:e4:6c:53:99:30:1b:ef:e7:77:c3:25: a3:5c:3f:6c:d1:39:1a:e3:a7:61:a6:85:70:3a:14:f8:34:5b: b1:42:2e:9e:5e:f8:d7:dd:f4:cc:33:fc:e9:03:82:39:8d:f0: 42:10:d9:bc:e8:66:63:24:70:bc:65:9f:70:90:82:02:e4:eb: eb:b6:31:bc:2d:71:30:b6:00:8f:53:2c:21:47:7b:c6:15:32: cc:22:eb:14:1d:e4:50:c2:d2:d0:3e:b9:89:c2:d4:fa:07:80: d5:d4:32:2f:5a:2f:12:19:53:d4:d1:bc:9c:15:3f:d9:eb:e5: 9b:43:44:a1:48:2d:41:b4:93:8d:96:29:9a:6c:a7:2a:01:6a: 1f:d0:f9:99:66:c0:55:7c:12:ed:d4:30:0c:01:84:08:f3:11: 6b:79:0d:c6:60:5d:78:49:2d:80:87:38:53:00:fe:cc:48:c1: e1:92:3d:71:46:c5:2c:c7:be:73:70:fc:9f:aa:bb:c0:fe:2e: 73:0f:1a:fe:92:19:3f:2f:30:de:bf:59:b4:14:18:6c:d1:7b: ed:cc:d4:52:7b:8a:87:1a:9e:37:ad:e6:61:b5:30:e2:68:1c: 85:46:fd:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27OU3zUgt1zjtPyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk MTg2ZWNkMDktYmQxZi00ZjRjLTkzOTktNTMxZTc0N2NlODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwAiyIbwZAChf2vN5qXdb3uRMMGZZC8QKUgo RUtzpeKifCPleGwRByKUPsdBFGLLNrpi3eht2yRkAwkePEGrVmKVVh8GpfDra4g1 l1v2kThMLz2Qza+BWwj8323jxxCxdaxBBRFmr4+MWkRr5K5oSkE3ikg2LSSN5dJn dan2rp+9JUyTmgiTfQZhFObzyy6rXJ0hH7bLLBA6rU3b/zP9ZWWBk1s0FHRsMo5C D8971YtZt0C6VSE/iEDeNpZqA3w6RAEeiTBeIS4JfQP2OKVWnoMGbpRrmo7U5A/D kd0aCSk8t1P5hv08uX3QlDooNDknmkrdtlriJCIKv7r+ECVCbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMstL8W3mhJgXDR2XcKfZWEp8kKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTEwOTY1YjEtMTViYy0z ODdiLWJlNjctZWJmYTY1ZWY2OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4C32WIdNEvGnHaYzNpksZpVLLlvXZjyczkbFOZMBvv53fDJaNcP2zR ORrjp2GmhXA6FPg0W7FCLp5e+Nfd9Mwz/OkDgjmN8EIQ2bzoZmMkcLxln3CQggLk 6+u2MbwtcTC2AI9TLCFHe8YVMswi6xQd5FDC0tA+uYnC1PoHgNXUMi9aLxIZU9TR vJwVP9nr5ZtDRKFILUG0k42WKZpspyoBah/Q+ZlmwFV8Eu3UMAwBhAjzEWt5DcZg XXhJLYCHOFMA/sxIweGSPXFGxSzHvnNw/J+qu8D+LnMPGv6SGT8vMN6/WbQUGGzR e+3M1FJ7iocanjet5mG1MOJoHIVG/ZQ= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:35 2026 by rpki-client