$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f7d06b9d-c355-35e9-9b4f-6411a38b7520.roa File: f7d06b9d-c355-35e9-9b4f-6411a38b7520.roa (raw, json) Hash identifier: gUYKTJ8jdScTgalP/FKgK5YQ4/t9trJm6vRYsro1ffQ= Subject key identifier: FE:8E:94:DF:1A:2D:87:45:7B:CA:9F:42:CD:2B:E2:4A:9F:70:E5:8A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D87FA88C8D331F38ED0199C80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f7d06b9d-c355-35e9-9b4f-6411a38b7520.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 23473 IP address blocks: 68.234.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:88:c8:d3:31:f3:8e:d0:19:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=01d3acd9-9b64-480a-9925-32ac616bb937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:d3:e3:4f:99:b6:f4:cb:de:1b:13:eb:99: 3f:9d:3a:86:23:2c:47:55:2f:80:81:af:eb:53:9b: 53:e5:9f:f0:c9:e8:5c:94:bd:43:bb:69:f0:8e:ca: 66:ec:56:3d:f2:f7:e7:d1:ea:cd:0f:0c:54:8f:d9: 59:bb:5b:5f:c3:16:0a:f7:1f:50:03:e0:ec:02:e5: cb:86:40:f3:d9:f9:52:58:dd:38:d9:34:85:df:a6: ae:ca:44:4b:1b:3f:17:e3:68:aa:1f:16:98:9f:cd: b8:34:d7:43:c8:fa:25:5b:53:ac:04:04:8c:14:91: 0e:9f:c7:28:a5:d8:db:2f:80:e7:ad:a0:b0:fc:33: 2b:e6:4b:95:2c:de:67:b2:06:bc:4e:9b:65:ed:f9: ac:39:26:b3:72:eb:24:9c:2b:c9:11:1e:f6:64:71: f1:3e:cc:b1:72:13:57:1b:a6:d4:e1:d4:d2:99:eb: 0a:25:54:43:dc:df:a8:ce:bf:02:b6:df:40:f9:1c: 71:5c:5b:f8:7a:15:04:06:4e:d5:bb:a1:03:53:37: 0d:5f:78:bb:a0:3a:5c:00:73:70:39:a0:3c:25:97: 82:45:9b:0e:28:15:53:6a:b4:36:bc:51:72:31:2d: 85:ea:92:a7:79:51:a1:20:2a:8d:9a:b2:a2:c8:56: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8E:94:DF:1A:2D:87:45:7B:CA:9F:42:CD:2B:E2:4A:9F:70:E5:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f7d06b9d-c355-35e9-9b4f-6411a38b7520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:29:b9:d6:18:6e:ef:7b:14:31:0d:39:c0:ae:71:ce:27:5d: be:17:e5:39:4d:fd:06:8e:ad:34:3c:02:11:b1:8c:a1:be:07: 38:11:97:67:d0:b4:4d:96:6a:a6:63:0b:d6:fc:cc:1b:64:9d: 83:95:c7:5f:d8:a4:66:73:6c:ee:0a:0d:49:5b:8e:d5:d0:05: 12:8b:85:a2:af:6f:35:2f:d2:1c:1a:57:2f:8d:22:ba:da:c4: 73:a1:a5:4f:ec:5d:bb:4d:62:ef:f8:6c:64:95:b8:24:71:ce: d5:7e:66:79:79:d9:1c:c1:ed:03:17:3c:f7:6e:76:a1:e1:ba: 3a:b0:fd:d3:52:db:16:5f:e2:6d:19:87:4f:33:db:76:ee:66: cf:cc:fa:d5:a9:08:ce:c9:ec:99:78:92:03:77:4c:14:ce:7d: 45:7f:60:ab:94:a7:d9:3b:e6:bd:6d:ff:34:ae:41:53:06:66: a4:21:69:af:dd:00:6d:72:13:ac:99:70:31:3d:34:8b:d3:a9: 48:76:54:c6:1b:a2:3f:c9:0c:fa:77:e3:0c:70:35:7e:6b:27: e9:6c:75:1a:2f:a1:42:41:a8:cc:31:9a:45:5b:25:7f:4f:7c: b5:a9:3b:6e:aa:c1:dc:1a:71:7e:ef:cc:29:a6:19:d2:0f:b6: 63:a3:e8:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+ojI0zHzjtAZnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk MDFkM2FjZDktOWI2NC00ODBhLTk5MjUtMzJhYzYxNmJiOTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzTT40+ZtvTL3hsT65k/nTqGIyxHVS+Aga/r U5tT5Z/wyehclL1Du2nwjspm7FY98vfn0erNDwxUj9lZu1tfwxYK9x9QA+DsAuXL hkDz2flSWN042TSF36auykRLGz8X42iqHxaYn824NNdDyPolW1OsBASMFJEOn8co pdjbL4DnraCw/DMr5kuVLN5nsga8Tptl7fmsOSazcusknCvJER72ZHHxPsyxchNX G6bU4dTSmesKJVRD3N+ozr8Ctt9A+RxxXFv4ehUEBk7Vu6EDUzcNX3i7oDpcAHNw OaA8JZeCRZsOKBVTarQ2vFFyMS2F6pKneVGhICqNmrKiyFZZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6OlN8aLYdFe8qfQs0r4kqfcOWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjdkMDZiOWQtYzM1NS0z NWU5LTliNGYtNjQxMWEzOGI3NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwpudYYbu97FDENOcCucc4nXb4X5TlN/QaOrTQ8AhGxjKG+BzgRl2fQ tE2WaqZjC9b8zBtknYOVx1/YpGZzbO4KDUlbjtXQBRKLhaKvbzUv0hwaVy+NIrra xHOhpU/sXbtNYu/4bGSVuCRxztV+Znl52RzB7QMXPPdudqHhujqw/dNS2xZf4m0Z h08z23buZs/M+tWpCM7J7Jl4kgN3TBTOfUV/YKuUp9k75r1t/zSuQVMGZqQhaa/d AG1yE6yZcDE9NIvTqUh2VMYboj/JDPp34wxwNX5rJ+lsdRovoUJBqMwxmkVbJX9P fLWpO26qwdwacX7vzCmmGdIPtmOj6LQ= -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:05 2026 by rpki-client