$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa File: ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa (raw, json) Hash identifier: OrgN7FtxhNlFKRjDXjlYhi+5fHC9RNsCW5X/mAycWnU= Subject key identifier: B9:97:2E:DC:21:03:C9:13:2C:EE:5D:BB:B6:77:6B:E4:23:AC:C4:60 Certificate issuer: /CN=c68f99cd-e059-4345-ac58-8ebecccac84e Certificate serial: 010D0C9F4328584D6944FDA19EBA5F52A3DD2200 Authority key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa Signing time: Mon 06 Apr 2026 01:00:24 +0000 ROA not before: Mon 06 Apr 2026 01:00:24 +0000 ROA not after: Sun 05 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 74.123.52.0/24 maxlen: 24 74.123.53.0/24 maxlen: 24 74.123.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:44:fd:a1:9e:ba:5f:52:a3:dd:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68f99cd-e059-4345-ac58-8ebecccac84e Validity Not Before: Apr 6 01:00:24 2026 GMT Not After : Jul 5 01:00:24 2026 GMT Subject: CN=e329f9bf-cc2a-42b5-8a06-028ca8d16cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:c9:54:ff:47:34:e7:86:18:a1:0c:6c:1d: 6c:cb:eb:b4:b8:b1:b6:85:98:ac:bd:c0:84:4d:41: c1:ea:d7:d8:2f:3d:de:7a:19:f5:30:6c:31:e5:d0: 58:34:0e:c9:f9:d0:c0:cb:ae:99:6d:a0:bb:68:57: 83:1e:45:08:df:83:c5:dc:4c:da:7b:75:82:01:f9: 49:47:b9:17:52:ef:2d:89:e5:79:6e:b9:c9:42:24: 2c:bc:e6:bc:cc:af:cc:02:1c:ff:f8:64:d6:64:0a: 27:35:6f:77:71:67:27:7d:4d:f5:7c:7f:a1:b6:d0: be:17:61:ad:86:40:3e:47:e2:15:07:3a:9a:f6:d6: 8c:18:b9:fd:9f:c2:87:89:5a:30:4f:77:68:cf:67: cd:7c:bd:b2:0a:fe:24:27:56:97:4e:f5:19:46:3d: 68:21:5a:54:f4:37:70:2d:3f:b1:76:f5:4a:eb:12: 5e:f3:8e:4b:1f:69:7d:1a:6a:57:7b:1e:44:6c:9a: 76:9a:28:d5:ea:48:02:76:d9:ff:15:0f:ce:56:ea: eb:32:09:c8:c6:fa:89:7d:1f:54:39:c0:f5:24:e0: 38:90:4a:b1:84:71:3f:e0:69:a6:0b:6b:bc:c3:f3: 10:f5:3b:7b:73:a6:06:f6:60:3f:d5:48:01:10:6e: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:97:2E:DC:21:03:C9:13:2C:EE:5D:BB:B6:77:6B:E4:23:AC:C4:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl X509v3 Authority Key Identifier: keyid:0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer sbgp-ipAddrBlock: critical IPv4: 74.123.52.0-74.123.54.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5a:74:97:af:09:14:b1:c8:5f:dd:f4:2b:1e:1b:d0:8e:a4: 6b:bb:9e:29:38:3c:aa:de:d0:57:5c:ae:0c:79:1f:c1:d8:8a: 98:55:07:bb:c0:8e:97:fb:17:e1:e0:b5:f4:cc:1b:23:64:4e: 57:d4:a7:68:24:1e:1a:70:19:4f:f0:87:1b:72:e9:d6:3b:e2: f8:0f:30:3f:f4:4e:42:fa:f4:d8:a0:95:ff:52:12:d9:0f:6a: 22:31:1c:cc:e6:d2:e0:55:84:0d:9a:d2:17:df:a0:8c:12:54: 9a:7e:43:60:b8:aa:81:2d:16:aa:68:12:7d:12:b8:98:35:bf: e8:87:93:e9:25:e1:05:ef:89:93:07:a2:dd:10:e9:4a:11:f8: 51:18:90:ef:db:38:44:ae:f3:35:bc:8d:b2:13:16:63:03:12: 13:c9:39:61:60:2e:e4:cf:54:d2:00:5c:42:25:0f:10:e2:9f: 94:28:d3:94:a2:b9:b9:72:15:8a:86:e7:a5:0a:42:8d:b0:c7: f3:36:43:9b:26:a8:ff:17:a7:6b:e7:9c:ef:1e:8b:bf:7c:ba: 9f:c9:11:e6:b3:34:0d:11:41:f0:7b:c7:72:e4:69:d8:8d:03: 34:2d:c8:1f:9d:bb:52:45:64:55:41:bc:5d:12:7b:63:2e:77: b0:13:52:d5 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1pRP2hnrpfUqPdIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4Zjk5Y2QtZTA1OS00MzQ1LWFjNTgtOGViZWNjY2Fj ODRlMB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk ZTMyOWY5YmYtY2MyYS00MmI1LThhMDYtMDI4Y2E4ZDE2Y2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZnJVP9HNOeGGKEMbB1sy+u0uLG2hZisvcCE TUHB6tfYLz3eehn1MGwx5dBYNA7J+dDAy66ZbaC7aFeDHkUI34PF3Ezae3WCAflJ R7kXUu8tieV5brnJQiQsvOa8zK/MAhz/+GTWZAonNW93cWcnfU31fH+httC+F2Gt hkA+R+IVBzqa9taMGLn9n8KHiVowT3doz2fNfL2yCv4kJ1aXTvUZRj1oIVpU9Ddw LT+xdvVK6xJe845LH2l9GmpXex5EbJp2mijV6kgCdtn/FQ/OVurrMgnIxvqJfR9U OcD1JOA4kEqxhHE/4GmmC2u8w/MQ9Tt7c6YG9mA/1UgBEG7/3wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLmXLtwhA8kTLO5du7Z3a+QjrMRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhm OTljZC1lMDU5LTQzNDUtYWM1OC04ZWJlY2NjYWM4NGUvZmYzZDllYWEtZWRkNS0z MmZiLWIzZDYtNGM3NTI2YjhiZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzY4Zjk5Y2QtZTA1OS00MzQ1LWFj NTgtOGViZWNjY2FjODRlL2M2OGY5OWNkLWUwNTktNDM0NS1hYzU4LThlYmVjY2Nh Yzg0ZS5jcmwwHwYDVR0jBBgwFoAUCmbGteBfw7Z8RupGiPW6HoYMDDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhmOTljZC1lMDU5LTQzNDUtYWM1OC04ZWJl Y2NjYWM4NGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJKezQD BABKezYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEARVp0l68JFLHIX930Kx4b0I6ka7ueKTg8qt7QV1yuDHkf wdiKmFUHu8COl/sX4eC19MwbI2ROV9SnaCQeGnAZT/CHG3Lp1jvi+A8wP/ROQvr0 2KCV/1IS2Q9qIjEczObS4FWEDZrSF9+gjBJUmn5DYLiqgS0WqmgSfRK4mDW/6IeT 6SXhBe+Jkwei3RDpShH4URiQ79s4RK7zNbyNshMWYwMSE8k5YWAu5M9U0gBcQiUP EOKflCjTlKK5uXIViobnpQpCjbDH8zZDmyao/xena+ec7x6Lv3y6n8kR5rM0DRFB 8HvHcuRp2I0DNC3IH527UkVkVUG8XRJ7Yy53sBNS1Q== -----END CERTIFICATE-----Generated at Fri Apr 17 06:00:45 2026 by rpki-client