$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e999e441-f9fc-36c7-86cb-ce91a85a4baf.roa File: e999e441-f9fc-36c7-86cb-ce91a85a4baf.roa (raw, json) Hash identifier: qOudLIGs/3CkPyc1rWTzvLOp8oubm0dOjpoRE8Ow258= Subject key identifier: D8:C3:BE:8B:1E:DD:4E:AD:BC:88:74:74:5B:F9:A7:21:E6:EA:42:F1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D6E7FA7E2294B1129C7004EC0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e999e441-f9fc-36c7-86cb-ce91a85a4baf.roa Signing time: Tue 07 Apr 2026 21:57:42 +0000 ROA not before: Tue 07 Apr 2026 21:57:42 +0000 ROA not after: Mon 06 Jul 2026 21:57:42 +0000 asID: 23473 IP address blocks: 68.180.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:7f:a7:e2:29:4b:11:29:c7:00:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 7 21:57:42 2026 GMT Not After : Jul 6 21:57:42 2026 GMT Subject: CN=9288167a-c506-47c0-aaab-67aa34a5a490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c1:e8:44:62:2c:81:3a:85:08:6b:bd:34:60: 5d:df:ed:c4:bb:10:c9:b7:11:bf:b9:0e:bd:cc:55: 8c:4f:5a:01:56:10:07:c1:1d:75:20:36:02:73:e5: bc:7b:ac:2f:9b:27:6d:ef:89:5c:63:a2:46:3d:d8: 1e:e7:73:0e:24:5f:24:55:c1:ac:d2:de:6d:34:63: 5d:74:4e:b1:08:ec:40:29:d5:5d:c6:b7:2a:c6:a4: a5:41:97:5e:41:4b:4b:45:6e:77:c4:d6:12:fb:9b: c0:ff:e6:93:58:26:33:cc:ea:e9:7f:67:c1:9c:d7: f6:ff:a3:d7:f7:2e:35:58:90:3b:9e:38:bc:0c:c2: ba:0c:08:4a:6d:06:a6:be:98:64:01:8b:50:eb:5e: b4:39:04:54:16:9e:15:23:17:31:c2:b2:ce:98:98: 55:d5:e2:14:10:31:f1:df:43:0e:4f:57:9b:2b:10: d1:a3:0e:eb:ea:de:54:d1:dd:0a:c4:2e:21:b4:c6: 08:a5:38:54:0f:59:0a:82:44:cf:34:e8:60:22:bc: 60:69:13:f2:d8:2b:e3:ed:6b:aa:1b:d8:75:76:76: d5:8d:71:86:b9:ee:13:3d:e3:13:e4:0c:b6:95:92: 2d:bd:71:f2:69:61:d5:13:f1:ca:e8:4e:f6:79:cc: e9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C3:BE:8B:1E:DD:4E:AD:BC:88:74:74:5B:F9:A7:21:E6:EA:42:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e999e441-f9fc-36c7-86cb-ce91a85a4baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a7:d5:99:e5:a0:98:3a:78:47:57:79:76:1b:4f:41:ea:77: 9f:15:b6:47:12:59:1a:a1:e1:57:84:7e:c4:ce:8a:20:f9:a8: 02:23:95:0c:67:8f:4d:fe:2a:f9:eb:f2:eb:f4:79:60:d3:33: 68:d7:d0:47:fb:3d:04:9a:63:96:e5:c2:db:a5:a5:0f:e7:54: b2:85:83:72:63:dd:20:e0:56:ac:f3:6a:84:e7:29:20:ae:2b: 92:eb:e0:e0:13:ef:8b:a7:81:55:33:c3:93:ae:62:8f:8d:29: c1:3b:3b:6e:81:c0:ef:75:dc:7d:9c:12:d8:31:39:5f:61:e2: e3:a7:b9:b7:90:ba:c8:c3:20:d5:03:34:d0:86:6e:b8:d1:bf: c0:cb:2d:00:78:c9:45:9f:40:16:a3:4b:81:71:d3:23:c2:9f: 9b:ed:89:2c:5f:7b:08:22:62:e7:34:b7:10:3c:75:6f:74:32: ef:5e:c0:b8:eb:9a:26:98:b4:c9:24:03:f0:15:3c:67:cf:9e: fd:ba:cd:c0:a7:07:c7:74:cc:66:0c:75:92:10:80:2d:32:70: 8b:91:ce:94:3d:8f:81:55:ba:82:48:40:f2:33:f8:5a:a0:39: 58:cc:84:5d:fe:92:48:7e:84:ae:b4:b2:99:79:eb:f7:63:e5: e0:b2:4f:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1uf6fiKUsRKccATsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQwNzIxNTc0MloXDTI2MDcwNjIxNTc0MlowLzEtMCsGA1UEAxMk OTI4ODE2N2EtYzUwNi00N2MwLWFhYWItNjdhYTM0YTVhNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcHoRGIsgTqFCGu9NGBd3+3EuxDJtxG/uQ69 zFWMT1oBVhAHwR11IDYCc+W8e6wvmydt74lcY6JGPdge53MOJF8kVcGs0t5tNGNd dE6xCOxAKdVdxrcqxqSlQZdeQUtLRW53xNYS+5vA/+aTWCYzzOrpf2fBnNf2/6PX 9y41WJA7nji8DMK6DAhKbQamvphkAYtQ6160OQRUFp4VIxcxwrLOmJhV1eIUEDHx 30MOT1ebKxDRow7r6t5U0d0KxC4htMYIpThUD1kKgkTPNOhgIrxgaRPy2Cvj7Wuq G9h1dnbVjXGGue4TPeMT5Ay2lZItvXHyaWHVE/HK6E72eczpjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjDvose3U6tvIh0dFv5pyHm6kLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZTk5OWU0NDEtZjlmYy0z NmM3LTg2Y2ItY2U5MWE4NWE0YmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLQdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEen1ZnloJg6eEdXeXYbT0Hqd58VtkcSWRqh4VeEfsTOiiD5qAIjlQxn j03+Kvnr8uv0eWDTM2jX0Ef7PQSaY5blwtulpQ/nVLKFg3Jj3SDgVqzzaoTnKSCu K5Lr4OAT74ungVUzw5OuYo+NKcE7O26BwO913H2cEtgxOV9h4uOnubeQusjDINUD NNCGbrjRv8DLLQB4yUWfQBajS4Fx0yPCn5vtiSxfewgiYuc0txA8dW90Mu9ewLjr miaYtMkkA/AVPGfPnv26zcCnB8d0zGYMdZIQgC0ycIuRzpQ9j4FVuoJIQPIz+Fqg OVjMhF3+kkh+hK60spl56/dj5eCyT24= -----END CERTIFICATE-----Generated at Fri Apr 17 15:07:55 2026 by rpki-client