$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa File: 79809976-9df9-3d91-b7e8-6a3afaeac18d.roa (raw, json) Hash identifier: Wtrj3WBPzr8WHtlgdplAVw6VyHw72Zy86CSGw7IYZBI= Subject key identifier: 41:D7:9C:E4:19:71:E1:90:A9:01:E3:32:5A:00:22:A7:D7:4C:DB:81 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584C9ACC322DB3B72C58A6629C40 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa Signing time: Thu 22 Jan 2026 02:00:31 +0000 ROA not before: Thu 22 Jan 2026 02:00:31 +0000 ROA not after: Wed 22 Apr 2026 01:00:31 +0000 asID: 13649 IP address blocks: 168.245.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9a:cc:32:2d:b3:b7:2c:58:a6:62:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Jan 22 02:00:31 2026 GMT Not After : Apr 22 01:00:31 2026 GMT Subject: CN=c7e37d41-0eea-4439-bdc0-9d603552e80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a3:a4:35:fd:d8:ab:a6:f1:ff:d6:d3:f6:c6: f4:c4:3f:82:d1:17:49:6f:ed:c1:b1:a3:34:e8:63: 81:40:7a:c8:60:0e:3a:1b:dd:9c:76:08:b6:a5:95: 1e:43:1f:d1:5d:f9:b2:b8:c9:e2:d3:8d:81:8d:5c: c4:37:6a:64:84:04:52:3b:44:28:b1:4b:cc:40:ae: 5b:1f:1a:ee:84:c4:7e:29:88:28:ed:14:1c:59:49: 1e:74:77:b2:46:6d:d0:c8:8f:d4:6b:21:88:54:53: f8:0b:1c:c6:54:38:a8:ff:0c:25:2c:0b:22:eb:a4: 40:75:87:87:ff:c5:bd:92:89:f0:21:fb:d7:3b:13: 89:17:c8:21:d9:32:57:dd:0e:93:dd:e9:30:16:fc: 68:1b:52:b8:13:d6:cf:57:65:d6:29:27:95:ff:93: 01:c3:3e:ef:3c:e7:8f:19:2e:bd:6a:23:02:cb:e5: b2:a8:d1:65:3a:83:ea:af:76:72:95:28:eb:6a:39: 41:d9:88:b8:90:9f:f6:d1:39:9a:dd:69:5f:9f:a5: cb:e6:ae:aa:ec:b7:e7:32:74:97:fb:2e:3c:1a:0b: eb:72:c6:7d:83:00:8a:cc:3f:0d:c9:fa:2b:6c:d3: 7a:e4:2e:49:e4:0c:ad:0e:6c:5d:6b:d8:d6:e7:c1: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D7:9C:E4:19:71:E1:90:A9:01:E3:32:5A:00:22:A7:D7:4C:DB:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 168.245.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:34:a9:03:ea:2a:fe:9f:88:f8:62:27:64:46:b7:87:4e:f2: 3c:74:b5:56:ba:78:4d:b4:8d:ea:48:7c:f3:36:4b:f7:5a:d1: 50:73:c4:84:94:db:f0:a2:29:88:a5:52:b7:a2:58:c9:3f:5c: 5e:69:d3:1d:a2:df:6f:19:66:51:a7:29:6e:40:f4:1c:d3:b1: 97:0b:f2:0e:de:26:2b:70:a4:75:fd:21:22:61:b6:0e:58:0d: 4f:0a:51:93:71:a6:bf:b4:27:23:f2:88:b6:fd:4c:b5:92:d7: c6:fd:80:89:d6:af:16:f7:7d:9e:a5:16:eb:c8:90:a2:f1:76: 58:57:6f:4d:c8:cb:bb:8a:ad:b6:b3:e3:8f:fd:4f:1f:d3:cc: ef:03:e5:cf:42:ba:42:93:db:58:d5:36:81:99:c8:cf:c1:20: 4e:2f:df:b7:5f:e3:46:40:50:53:c5:9b:64:9b:60:b7:bc:d1: 3f:8e:86:88:23:7e:f7:8d:ac:d2:1b:96:31:fe:36:a1:22:22: 21:1c:d2:19:6f:55:d0:fa:32:7a:6b:a6:e7:3d:43:9c:9d:1a: b5:a6:03:bd:02:e1:d9:21:ba:8a:da:73:d8:9c:21:36:37:5a: 75:e4:f1:37:f4:36:06:a0:a5:bf:4f:95:66:e3:0c:2c:65:7e: 39:64:09:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyazDIts7csWKZinEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk YzdlMzdkNDEtMGVlYS00NDM5LWJkYzAtOWQ2MDM1NTJlODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KOkNf3Yq6bx/9bT9sb0xD+C0RdJb+3BsaM0 6GOBQHrIYA46G92cdgi2pZUeQx/RXfmyuMni042BjVzEN2pkhARSO0QosUvMQK5b HxruhMR+KYgo7RQcWUkedHeyRm3QyI/UayGIVFP4CxzGVDio/wwlLAsi66RAdYeH /8W9konwIfvXOxOJF8gh2TJX3Q6T3ekwFvxoG1K4E9bPV2XWKSeV/5MBwz7vPOeP GS69aiMCy+WyqNFlOoPqr3ZylSjrajlB2Yi4kJ/20Tma3Wlfn6XL5q6q7LfnMnSX +y48GgvrcsZ9gwCKzD8NyforbNN65C5J5AytDmxda9jW58HFoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHXnOQZceGQqQHjMloAIqfXTNuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvNzk4MDk5NzYtOWRmOS0z ZDkxLWI3ZTgtNmEzYWZhZWFjMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqPXKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB00qQPqKv6fiPhiJ2RGt4dO8jx0tVa6eE20jepIfPM2S/da0VBzxISU 2/CiKYilUreiWMk/XF5p0x2i328ZZlGnKW5A9BzTsZcL8g7eJitwpHX9ISJhtg5Y DU8KUZNxpr+0JyPyiLb9TLWS18b9gInWrxb3fZ6lFuvIkKLxdlhXb03Iy7uKrbaz 44/9Tx/TzO8D5c9CukKT21jVNoGZyM/BIE4v37df40ZAUFPFm2SbYLe80T+Ohogj fveNrNIbljH+NqEiIiEc0hlvVdD6Mnprpuc9Q5ydGrWmA70C4dkhuorac9icITY3 WnXk8Tf0Ngagpb9PlWbjDCxlfjlkCfg= -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:51 2026 by rpki-client