$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b5943ed8-f2ba-334a-900a-2d6f021e9c81.roa File: b5943ed8-f2ba-334a-900a-2d6f021e9c81.roa (raw, json) Hash identifier: HGJik/e4kmuvcFvnNXOpeN55N7/X4qjciJjQOCEMcVk= Subject key identifier: CE:2C:BA:B7:32:2D:D2:24:18:52:94:D7:30:A0:4E:50:DA:A3:D3:FD Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584CF42221C5470050BC8847E300 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b5943ed8-f2ba-334a-900a-2d6f021e9c81.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 23473 IP address blocks: 68.234.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:21:c5:47:00:50:bc:88:47:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=033559a6-0b9e-4322-a283-469d2bf00573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:74:9c:3c:81:c7:78:e2:4f:86:3b:b2:dc:b1: 57:f9:20:eb:88:e3:a6:fd:74:98:38:2f:42:79:8d: 63:15:08:16:c8:03:3e:31:8e:28:0b:30:b1:bf:78: 3d:d8:22:76:3a:ef:20:21:1f:40:26:36:7a:bb:5c: 50:2a:8e:96:a5:0e:a7:bb:6f:c5:bf:7a:72:82:8c: 5b:c2:0b:ee:55:ae:43:4c:2d:bb:c1:53:af:a6:3d: 8e:fa:83:e3:9b:ea:24:c0:20:f3:15:b2:a5:21:ba: cf:04:c9:c8:41:66:f4:58:91:02:9f:59:21:12:76: fe:03:3f:a0:cb:33:9d:fd:24:6b:a5:09:5b:16:53: 5f:99:03:0c:f4:01:86:ec:11:50:41:a0:7a:10:30: b5:a2:2d:5f:3b:09:e2:bb:ee:a8:03:5d:c4:be:72: 4c:a2:b0:15:5c:fb:dd:13:cb:d7:94:07:74:38:d9: 4e:5d:af:4b:85:dd:ab:f1:65:bd:bb:6b:24:1e:8b: 71:af:00:43:66:fa:28:ea:b1:9e:4b:69:0d:6a:bf: d4:73:80:c5:c9:d7:48:88:eb:f4:dc:85:a9:a1:9a: 3c:24:c4:20:a8:e6:89:32:f4:1c:7e:3c:47:77:36: dc:2b:57:c8:1c:11:91:45:3f:46:ad:9c:41:0c:d1: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2C:BA:B7:32:2D:D2:24:18:52:94:D7:30:A0:4E:50:DA:A3:D3:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b5943ed8-f2ba-334a-900a-2d6f021e9c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:96:45:45:6e:72:4d:54:6e:10:80:ca:b0:f6:49:62:91:17: 4e:a4:3d:79:70:47:86:e2:b6:5a:b6:60:7d:13:26:36:1c:b1: 3d:97:ac:d6:a3:f7:83:f1:a9:ba:ae:ba:ab:4a:c0:78:3d:83: c7:54:3f:7e:9b:1d:03:fe:c5:ea:13:03:26:e7:af:90:24:e5: 71:8d:68:57:9e:1f:f6:09:12:ef:62:66:64:94:b4:6a:05:a7: e9:2c:ac:6e:15:d5:db:79:4e:a5:9b:18:f0:c6:64:df:38:a3: 4b:6e:17:96:60:fa:09:33:5b:98:49:eb:aa:81:71:a6:fc:ff: 6d:25:ce:3d:d5:c7:74:11:2c:3d:bc:34:0f:69:a5:6d:83:55: 3a:fd:01:14:5a:cc:4a:3b:86:37:99:e9:a7:29:2b:aa:b1:55: d9:89:fd:a6:75:b4:6f:d0:a3:c1:5d:7c:58:0a:e8:8a:31:81: 0e:0e:63:ed:ed:1f:26:fa:29:40:7e:32:bb:e5:1e:70:e7:df: 09:86:fe:36:9e:e5:2d:70:73:ee:e8:61:1f:62:b9:2e:e7:3d: 0d:10:d7:f8:27:a4:18:2c:9a:72:02:7c:e3:10:8f:1b:ca:84: 21:69:68:66:30:da:38:9e:ed:5f:23:89:1a:76:73:11:73:a1: e0:fd:f9:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IiHFRwBQvIhH4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk MDMzNTU5YTYtMGI5ZS00MzIyLWEyODMtNDY5ZDJiZjAwNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XScPIHHeOJPhjuy3LFX+SDriOOm/XSYOC9C eY1jFQgWyAM+MY4oCzCxv3g92CJ2Ou8gIR9AJjZ6u1xQKo6WpQ6nu2/Fv3pygoxb wgvuVa5DTC27wVOvpj2O+oPjm+okwCDzFbKlIbrPBMnIQWb0WJECn1khEnb+Az+g yzOd/SRrpQlbFlNfmQMM9AGG7BFQQaB6EDC1oi1fOwniu+6oA13EvnJMorAVXPvd E8vXlAd0ONlOXa9Lhd2r8WW9u2skHotxrwBDZvoo6rGeS2kNar/Uc4DFyddIiOv0 3IWpoZo8JMQgqOaJMvQcfjxHdzbcK1fIHBGRRT9GrZxBDNHhAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4surcyLdIkGFKU1zCgTlDao9P9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYjU5NDNlZDgtZjJiYS0z MzRhLTkwMGEtMmQ2ZjAyMWU5YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOWRUVuck1UbhCAyrD2SWKRF06kPXlwR4bitlq2YH0TJjYcsT2XrNaj 94PxqbquuqtKwHg9g8dUP36bHQP+xeoTAybnr5Ak5XGNaFeeH/YJEu9iZmSUtGoF p+ksrG4V1dt5TqWbGPDGZN84o0tuF5Zg+gkzW5hJ66qBcab8/20lzj3Vx3QRLD28 NA9ppW2DVTr9ARRazEo7hjeZ6acpK6qxVdmJ/aZ1tG/Qo8FdfFgK6IoxgQ4OY+3t Hyb6KUB+MrvlHnDn3wmG/jae5S1wc+7oYR9iuS7nPQ0Q1/gnpBgsmnICfOMQjxvK hCFpaGYw2jie7V8jiRp2cxFzoeD9+ZE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:38 2026 by rpki-client