$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/687029d7-b5e0-3fff-a306-88a32b338e0c.roa File: 687029d7-b5e0-3fff-a306-88a32b338e0c.roa (raw, json) Hash identifier: NhcLyJ0NEYR3H837ku0IJgwPNoT4MhvLtT3bL1t8+Hw= Subject key identifier: 58:65:5F:E4:51:20:F8:93:7D:54:F8:B0:C5:7B:07:0B:FE:7D:FF:EB Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584C9966F5C59A06AC74D02E7300 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/687029d7-b5e0-3fff-a306-88a32b338e0c.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 36445 IP address blocks: 198.232.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:66:f5:c5:9a:06:ac:74:d0:2e:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=8874b6db-aa87-4ed2-a428-06d2f54e90ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:e2:08:2d:28:e2:5e:bf:07:38:99:ac:ea: 06:ec:91:34:f3:78:cc:3f:92:b1:5c:8a:41:df:4d: 08:7b:20:cf:c7:04:6c:c0:e7:7f:30:ee:8e:0a:bc: 54:ca:84:97:55:51:a2:47:c9:3f:0b:57:f7:7e:58: 97:c5:79:d4:d7:ad:24:01:35:ec:c7:62:fe:90:87: 21:65:0a:c9:99:6e:78:49:f4:4c:6f:bf:ee:e2:a9: c7:82:e2:23:0d:89:02:54:a7:08:89:5e:93:6a:8a: 31:be:a8:71:f3:3e:eb:d8:5f:33:3c:26:84:f9:fc: 4c:0e:30:15:dc:1f:5e:00:e8:5e:5b:a6:ee:6a:db: 0a:7e:a9:5d:cf:c6:27:da:eb:fc:69:0a:53:a8:93: 68:2a:b1:97:41:3a:bb:fa:2f:02:b2:a0:c6:ff:6e: 97:63:fe:ce:1b:fb:62:90:45:36:d5:63:a2:00:a7: 50:3e:bf:47:f3:05:f2:c8:f4:b3:51:4c:d9:82:8a: 38:8d:ca:ee:00:00:5a:0d:1f:18:26:09:bd:39:3b: 7a:4c:6b:05:0c:34:a0:0b:08:f0:43:c7:93:91:62: c1:9d:7c:fa:4a:13:be:a7:a2:3f:08:06:cf:ed:86: 20:0b:9e:a8:87:19:6c:82:78:43:20:4e:a0:6a:11: 5b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:65:5F:E4:51:20:F8:93:7D:54:F8:B0:C5:7B:07:0B:FE:7D:FF:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/687029d7-b5e0-3fff-a306-88a32b338e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 198.232.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a9:81:8c:56:b1:74:56:2b:53:8d:9f:39:39:e0:43:fe:0c: 0f:21:00:31:58:b9:0e:ad:07:7b:89:b4:c2:77:03:fe:04:54: c0:ab:09:53:28:74:82:1c:01:79:27:3e:1e:8c:cc:55:75:fe: c7:87:5c:b9:d3:e9:6f:c0:19:9c:3d:e4:d6:6c:17:e7:56:3d: 10:f6:5a:20:7f:f2:57:48:75:06:84:e9:b1:b0:86:ec:34:f2: 41:f8:5a:28:21:fb:69:db:4c:0f:b5:18:82:f1:75:f1:8e:9c: b3:db:ee:c9:65:88:8c:71:e3:db:9d:2d:39:f7:b8:3a:8f:7d: 09:91:3b:76:81:bf:cb:74:a6:bc:89:53:e6:20:c6:34:dd:b1: 85:12:a0:6a:bb:30:fa:23:1f:11:45:df:98:ac:ba:13:63:b5: 12:5e:33:70:63:41:86:09:33:db:41:0c:c8:5a:a3:ba:5c:a2: 27:f4:b7:74:e7:99:09:c7:c8:6f:7e:04:68:c9:72:00:6b:fd: f0:76:bc:27:20:51:d5:05:6b:65:f2:81:69:fd:2b:42:0f:e2: fe:6d:ee:c9:4b:2e:b9:64:b5:fc:be:fd:6c:13:13:96:de:cf: 6a:62:8a:6b:6a:df:18:fc:30:db:2f:c0:ba:5c:fe:67:cb:62: 16:2b:9f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZvXFmgasdNAucwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk ODg3NGI2ZGItYWE4Ny00ZWQyLWE0MjgtMDZkMmY1NGU5MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFDiCC0o4l6/BziZrOoG7JE083jMP5KxXIpB 300IeyDPxwRswOd/MO6OCrxUyoSXVVGiR8k/C1f3fliXxXnU160kATXsx2L+kIch ZQrJmW54SfRMb7/u4qnHguIjDYkCVKcIiV6Taooxvqhx8z7r2F8zPCaE+fxMDjAV 3B9eAOheW6buatsKfqldz8Yn2uv8aQpTqJNoKrGXQTq7+i8CsqDG/26XY/7OG/ti kEU21WOiAKdQPr9H8wXyyPSzUUzZgoo4jcruAABaDR8YJgm9OTt6TGsFDDSgCwjw Q8eTkWLBnXz6ShO+p6I/CAbP7YYgC56ohxlsgnhDIE6gahFb8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhlX+RRIPiTfVT4sMV7Bwv+ff/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNjg3MDI5ZDctYjVlMC0z ZmZmLWEzMDYtODhhMzJiMzM4ZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxujWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqpgYxWsXRWK1ONnzk54EP+DA8hADFYuQ6tB3uJtMJ3A/4EVMCrCVMo dIIcAXknPh6MzFV1/seHXLnT6W/AGZw95NZsF+dWPRD2WiB/8ldIdQaE6bGwhuw0 8kH4Wigh+2nbTA+1GILxdfGOnLPb7slliIxx49udLTn3uDqPfQmRO3aBv8t0pryJ U+YgxjTdsYUSoGq7MPojHxFF35isuhNjtRJeM3BjQYYJM9tBDMhao7pcoif0t3Tn mQnHyG9+BGjJcgBr/fB2vCcgUdUFa2XygWn9K0IP4v5t7slLLrlktfy+/WwTE5be z2piimtq3xj8MNsvwLpc/mfLYhYrn78= -----END CERTIFICATE-----Generated at Mon Mar 2 11:02:12 2026 by rpki-client