$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa File: b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa (raw, json) Hash identifier: wiBxnJD3sZP4SRd/rmv2aLF14ycs6cwU4WEbMf+WVvo= Subject key identifier: 49:E1:17:B9:39:68:07:CB:D1:70:C9:10:14:9B:DB:F6:64:F6:96:52 Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Certificate serial: 010D0C9F4328584D746FCC4556C11E303B643B80 Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 4476 IP address blocks: 192.68.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:cc:45:56:c1:1e:30:3b:64:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=21e49d76-0790-450e-807b-0f23ac34e7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:22:e5:66:36:d9:88:71:ba:ae:23:76:77: ed:07:74:8b:36:7d:77:55:d2:e8:f5:f5:9e:88:28: 09:de:21:64:34:3e:31:f8:84:42:21:ef:a7:47:52: 3a:35:3e:3e:5d:48:80:59:3b:0e:1b:79:b0:ca:d9: 8b:10:c7:db:9d:f1:a2:4c:be:25:6d:6d:6c:5a:36: 1b:9e:8f:89:c5:7c:69:99:28:15:26:0d:9c:03:ac: 2c:68:b0:d6:d8:e3:c7:9d:26:ea:a3:9c:dd:2f:c6: 03:6d:d1:d9:5f:2e:83:b2:9a:1c:cb:bb:60:6d:18: 36:d7:c5:e0:59:a9:65:56:4b:22:76:b7:b4:6c:c4: bf:5c:67:c8:4f:c4:cb:00:75:85:b7:fd:ce:35:85: 62:26:6b:ba:c5:4a:3c:f7:96:2c:8d:1d:0b:63:31: f5:2a:34:5f:7d:3d:40:81:c7:c8:01:b2:dc:5c:86: 94:4a:6c:27:50:5e:16:6d:cb:0c:50:07:73:19:a1: 15:99:33:2d:27:a1:2b:00:9c:35:20:6f:dc:f3:15: 45:d4:4d:11:86:ee:aa:4e:98:b3:02:6b:53:c4:94: 6c:8a:34:ab:9a:8e:0a:85:c4:6b:16:fb:02:49:aa: 49:84:48:7e:62:2c:91:06:df:28:a7:69:72:4f:ff: b0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:17:B9:39:68:07:CB:D1:70:C9:10:14:9B:DB:F6:64:F6:96:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/b654fd10-88c8-3281-aca6-2f8d7da12ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl X509v3 Authority Key Identifier: keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer sbgp-ipAddrBlock: critical IPv4: 192.68.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:12:67:d7:20:c8:fc:19:5d:e9:a5:97:33:f1:2b:3c:e0:5f: f7:81:f3:e8:17:a3:bb:51:0d:c7:09:6e:43:49:ad:ec:98:cc: 87:1c:11:58:7e:48:73:5d:03:94:6f:a5:de:cb:01:fd:81:df: e1:87:e0:60:d8:52:6b:75:dd:d0:46:40:0a:33:b1:4f:bb:03: 92:26:12:be:5f:56:e2:7e:7a:2c:25:da:64:38:de:b2:d0:d4: c1:1d:8e:1a:1d:ab:77:c1:f4:b8:3a:f0:e6:ed:ca:28:8d:7e: 1b:6c:41:ae:33:e4:eb:a7:bf:57:3a:77:28:4a:f2:1e:74:f9: 37:ce:0c:3d:b2:05:ed:1b:0a:91:e7:d7:31:78:4e:85:1d:f4: e6:3a:95:50:e8:6d:30:0b:55:a2:50:ab:20:21:f6:08:e3:e9: 74:12:c1:f8:68:e1:d7:97:6f:15:b7:77:a6:88:a0:24:cf:a1: dc:91:12:34:30:b7:ba:43:06:be:ed:0d:d2:1d:12:0b:e2:b5: 5b:e1:f9:09:4c:a8:50:f9:b3:a6:43:9f:b0:2a:71:9b:db:be: 4d:50:38:7a:02:45:92:54:43:c7:db:59:44:f9:ba:e8:89:8a: 64:4d:96:81:14:b4:d0:8b:46:5e:a2:7a:ec:f1:5c:9e:75:a2: f0:b4:51:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8xFVsEeMDtkO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzOWE5NzMtY2YyZS00NGIxLTk4NGEtNjU5NmRjMGI2 OTYzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MjFlNDlkNzYtMDc5MC00NTBlLTgwN2ItMGYyM2FjMzRlN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfYi5WY22Yhxuq4jdnftB3SLNn13VdLo9fWe iCgJ3iFkND4x+IRCIe+nR1I6NT4+XUiAWTsOG3mwytmLEMfbnfGiTL4lbW1sWjYb no+JxXxpmSgVJg2cA6wsaLDW2OPHnSbqo5zdL8YDbdHZXy6Dspocy7tgbRg218Xg WallVksidre0bMS/XGfIT8TLAHWFt/3ONYViJmu6xUo895YsjR0LYzH1KjRffT1A gcfIAbLcXIaUSmwnUF4WbcsMUAdzGaEVmTMtJ6ErAJw1IG/c8xVF1E0Rhu6qTpiz AmtTxJRsijSrmo4KhcRrFvsCSapJhEh+YiyRBt8op2lyT/+waQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnhF7k5aAfL0XDJEBSb2/Zk9pZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5 YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2ZGMwYjY5NjMvYjY1NGZkMTAtODhjOC0z MjgxLWFjYTYtMmY4ZDdkYTEyY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2MzOWE5NzMtY2YyZS00NGIxLTk4 NGEtNjU5NmRjMGI2OTYzL2NjMzlhOTczLWNmMmUtNDRiMS05ODRhLTY1OTZkYzBi Njk2My5jcmwwHwYDVR0jBBgwFoAURaGd2u0urqKIyrHJ+roNx0DS2I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2 ZGMwYjY5NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUSZ9cgyPwZXemllzPxKzzgX/eB8+gXo7tRDccJbkNJreyYzIccEVh+ SHNdA5Rvpd7LAf2B3+GH4GDYUmt13dBGQAozsU+7A5ImEr5fVuJ+eiwl2mQ43rLQ 1MEdjhodq3fB9Lg68ObtyiiNfhtsQa4z5Ounv1c6dyhK8h50+TfODD2yBe0bCpHn 1zF4ToUd9OY6lVDobTALVaJQqyAh9gjj6XQSwfho4deXbxW3d6aIoCTPodyREjQw t7pDBr7tDdIdEgvitVvh+QlMqFD5s6ZDn7AqcZvbvk1QOHoCRZJUQ8fbWUT5uuiJ imRNloEUtNCLRl6ieuzxXJ51ovC0UVg= -----END CERTIFICATE-----Generated at Fri Apr 17 20:49:18 2026 by rpki-client