$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb816043-7686-3290-8a81-e7d9a6cc3d6f.roa File: bb816043-7686-3290-8a81-e7d9a6cc3d6f.roa (raw, json) Hash identifier: 5JlGpa6Uo09q6Pu/2w86BXPOX3+nRBC3zhxDGTNgUgM= Subject key identifier: 75:FA:3D:B4:AF:89:63:5E:FC:9C:FE:A7:17:00:06:B9:65:7E:E6:7B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584CEBC22D72403C92393DE796C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb816043-7686-3290-8a81-e7d9a6cc3d6f.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 23473 IP address blocks: 68.234.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:2d:72:40:3c:92:39:3d:e7:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=38922e58-e0d6-47b6-adf4-ed7af0598cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:84:29:d8:54:2e:10:98:0a:b1:54:c8:69: 67:ba:dc:af:f0:e9:44:8c:fb:a2:fc:ca:7a:ed:ab: 97:b1:07:b9:a3:0f:c4:d8:ab:89:7d:62:db:a8:79: ec:15:01:df:d1:42:8e:6c:59:3e:1a:95:f7:40:41: 5c:78:6f:b5:25:ec:87:04:49:d1:01:e7:3e:c6:52: 7a:cd:79:82:55:30:a1:0d:e5:3d:ae:72:a4:1c:ec: 6e:e0:b3:05:87:55:16:e5:75:cd:fd:e6:dc:b3:48: 81:56:00:a0:35:12:92:84:9d:a9:ac:12:16:06:3b: d4:b6:49:2b:eb:30:53:9f:8a:63:35:5b:51:59:21: 77:29:d0:ec:06:f0:a5:59:9e:93:ae:8c:6c:b1:ec: e1:dd:6f:d3:58:a9:20:4c:cd:c2:65:d3:fc:f9:e8: 32:06:87:ba:e1:97:b4:8c:0c:25:9c:7f:c6:43:c2: 4d:3d:bd:f7:f1:63:e2:01:d6:fa:63:c2:24:bf:df: 42:34:1f:79:d7:34:00:19:02:96:a1:94:df:c8:51: 1e:93:16:95:26:3e:c6:31:4b:f1:be:e2:be:03:30: 3f:83:83:ef:5c:2b:40:21:57:6c:75:06:fa:d5:ca: b6:92:ae:74:9a:d2:96:fb:e9:fe:11:e1:fe:dc:12: ae:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FA:3D:B4:AF:89:63:5E:FC:9C:FE:A7:17:00:06:B9:65:7E:E6:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bb816043-7686-3290-8a81-e7d9a6cc3d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:67:66:a3:40:eb:e2:ca:fd:f3:4f:5e:46:64:36:61:77:eb: 56:46:b2:d0:c1:f5:81:b4:c3:87:f0:8a:1c:3d:1d:03:d2:81: d6:9b:99:89:fe:d6:7b:8e:1c:fb:2a:76:25:6c:9b:84:2a:ca: ca:2b:3f:2e:ba:ac:13:9c:45:cc:f4:8b:f8:24:1e:e9:fb:78: 33:70:bc:af:08:6a:e6:b2:17:c2:d2:74:99:c9:6c:38:9d:96: ac:54:8b:cc:e9:05:e4:a4:da:c9:fa:3e:f3:d9:8e:15:e3:4d: df:15:a1:94:fb:6a:ff:c7:bf:c0:5c:45:0c:3a:1b:f7:18:d6: 58:fc:c6:95:3b:d5:a1:86:18:a7:81:4b:ad:71:be:71:53:b2: 18:d7:43:5a:3f:85:76:c7:3e:9a:71:47:a5:ce:03:36:5c:d3: 81:71:d8:fe:da:43:e3:97:c4:31:d8:fb:e8:f6:af:13:47:ca: 19:5d:79:77:a9:91:2e:7b:32:97:b5:9a:7a:85:e5:0d:5a:8f: 75:23:2d:80:81:2b:b2:4d:56:91:85:55:13:43:d4:4c:58:8d: c3:18:ba:60:9a:73:5e:ec:77:46:37:c6:7e:2b:c6:85:2f:4b: 29:bb:14:cb:4b:fa:1f:4c:d7:14:ca:f9:be:82:c0:19:5a:69: fd:3e:cb:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwi1yQDySOT3nlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk Mzg5MjJlNTgtZTBkNi00N2I2LWFkZjQtZWQ3YWYwNTk4Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0mEKdhULhCYCrFUyGlnutyv8OlEjPui/Mp6 7auXsQe5ow/E2KuJfWLbqHnsFQHf0UKObFk+GpX3QEFceG+1JeyHBEnRAec+xlJ6 zXmCVTChDeU9rnKkHOxu4LMFh1UW5XXN/ebcs0iBVgCgNRKShJ2prBIWBjvUtkkr 6zBTn4pjNVtRWSF3KdDsBvClWZ6Troxssezh3W/TWKkgTM3CZdP8+egyBoe64Ze0 jAwlnH/GQ8JNPb338WPiAdb6Y8Ikv99CNB951zQAGQKWoZTfyFEekxaVJj7GMUvx vuK+AzA/g4PvXCtAIVdsdQb61cq2kq50mtKW++n+EeH+3BKuAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHX6PbSviWNe/Jz+pxcABrllfuZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmI4MTYwNDMtNzY4Ni0z MjkwLThhODEtZTdkOWE2Y2MzZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtnZqNA6+LK/fNPXkZkNmF361ZGstDB9YG0w4fwihw9HQPSgdabmYn+ 1nuOHPsqdiVsm4QqysorPy66rBOcRcz0i/gkHun7eDNwvK8IauayF8LSdJnJbDid lqxUi8zpBeSk2sn6PvPZjhXjTd8VoZT7av/Hv8BcRQw6G/cY1lj8xpU71aGGGKeB S61xvnFTshjXQ1o/hXbHPppxR6XOAzZc04Fx2P7aQ+OXxDHY++j2rxNHyhldeXep kS57Mpe1mnqF5Q1aj3UjLYCBK7JNVpGFVRND1ExYjcMYumCac17sd0Y3xn4rxoUv Sym7FMtL+h9M1xTK+b6CwBlaaf0+yxA= -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:21 2026 by rpki-client