$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa File: ceeaa841-ed82-33d1-843a-3a411e6fee58.roa (raw, json) Hash identifier: en8YV0fILoXbWax7Vcc84D26dWogF3Ce6CDy+PSfX7Y= Subject key identifier: 9B:35:FE:C4:CE:31:63:FA:79:92:5E:A7:12:F9:65:76:31:F6:B8:79 Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F4328584D07AD0202823ADE9A00EAEB40 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 394195 IP address blocks: 68.64.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:02:02:82:3a:de:9a:00:ea:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=539cd6ee-9dad-4917-bdff-68cfbae96f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4e:77:04:44:49:08:c9:cf:50:11:c5:62:0e: 03:44:2d:d6:a3:36:a2:33:26:29:e8:1f:c8:29:58: 90:2f:37:55:0e:67:f5:11:73:97:79:0e:93:25:88: 9c:03:1b:96:b1:11:91:be:31:fb:89:af:8f:2a:e0: 62:08:79:ed:18:cc:67:89:a7:39:bb:b7:67:26:10: f3:20:d0:6b:10:0d:3b:b2:17:49:da:3c:f3:1b:28: 0b:b4:e4:ae:e0:a7:b6:25:74:54:b0:27:41:24:e8: 01:4e:7e:3e:36:e5:92:ac:35:41:f7:51:4c:ab:6a: 4e:a1:0f:c9:b9:fc:32:42:b5:cc:46:0b:20:18:73: 92:60:53:8c:53:9e:53:ec:61:5f:5f:de:67:1e:75: 52:7f:0d:b5:8c:06:87:7e:30:12:99:bd:20:3a:6c: 7e:ba:24:70:15:81:29:c4:d8:d0:90:15:d0:ad:8d: 46:a5:98:49:ea:bf:22:3b:85:d1:bb:81:b2:6e:48: 8c:db:c6:e0:6e:e3:41:f0:15:f1:df:79:be:2c:1f: d8:a3:4b:a1:c9:d8:9e:3d:90:8c:7c:a7:b7:0c:da: 03:cc:d3:c1:25:09:ad:19:cf:37:bb:6f:0f:ab:2c: 63:7e:11:49:1f:51:54:bd:9f:3a:c4:23:b8:4e:38: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:35:FE:C4:CE:31:63:FA:79:92:5E:A7:12:F9:65:76:31:F6:B8:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv4: 68.64.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1c:b7:a7:c4:2b:16:83:3c:54:79:7c:08:8d:63:fa:7b:ac: b4:56:ea:72:92:8a:3e:4f:ca:8f:95:ac:09:b7:11:ce:37:24: 10:e8:0e:16:01:4f:20:b8:5d:2e:1c:b7:42:66:99:87:97:3a: fd:ab:ec:64:ba:4d:9d:ec:b2:92:7e:3b:81:cc:f6:27:01:47: 66:e6:be:ae:12:a8:90:4d:08:3b:c0:c8:6c:76:99:5c:b7:e4: cc:9e:56:03:d8:b1:92:34:4a:f1:bb:87:46:ba:12:d5:b0:ab: 9d:57:85:46:60:4b:cb:31:06:f4:65:4d:a2:17:05:b8:17:e0: 88:b9:8b:26:42:cb:a3:87:03:7d:08:85:2d:dc:f1:d5:90:7b: 24:3e:ad:8f:30:04:99:a7:c3:82:9c:cd:22:1e:9d:7c:cf:d9: 63:86:d1:8e:06:fe:27:20:6c:73:99:43:6c:4b:73:33:77:cc: 9c:ba:dc:16:50:81:5b:8f:3a:81:c2:0e:74:ab:0d:69:f6:f6: 19:54:10:f2:e4:8b:29:e7:1b:1e:40:51:2e:e1:9e:e8:d0:1b: 8d:27:c0:9a:ca:4b:86:09:a7:09:db:60:4c:8b:79:7e:eb:af: 7a:dd:9b:98:99:84:71:c4:77:5c:ef:3b:0a:d2:cd:d4:92:8d: b0:45:28:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrQICgjremgDq60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NTM5Y2Q2ZWUtOWRhZC00OTE3LWJkZmYtNjhjZmJhZTk2Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU53BERJCMnPUBHFYg4DRC3WozaiMyYp6B/I KViQLzdVDmf1EXOXeQ6TJYicAxuWsRGRvjH7ia+PKuBiCHntGMxniac5u7dnJhDz INBrEA07shdJ2jzzGygLtOSu4Ke2JXRUsCdBJOgBTn4+NuWSrDVB91FMq2pOoQ/J ufwyQrXMRgsgGHOSYFOMU55T7GFfX95nHnVSfw21jAaHfjASmb0gOmx+uiRwFYEp xNjQkBXQrY1GpZhJ6r8iO4XRu4GybkiM28bgbuNB8BXx33m+LB/Yo0uhydiePZCM fKe3DNoDzNPBJQmtGc83u28PqyxjfhFJH1FUvZ86xCO4TjjfDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJs1/sTOMWP6eZJepxL5ZXYx9rh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvY2VlYWE4NDEtZWQ4Mi0z M2QxLTg0M2EtM2E0MTFlNmZlZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREDeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkct6fEKxaDPFR5fAiNY/p7rLRW6nKSij5Pyo+VrAm3Ec43JBDoDhYB TyC4XS4ct0JmmYeXOv2r7GS6TZ3sspJ+O4HM9icBR2bmvq4SqJBNCDvAyGx2mVy3 5MyeVgPYsZI0SvG7h0a6EtWwq51XhUZgS8sxBvRlTaIXBbgX4Ii5iyZCy6OHA30I hS3c8dWQeyQ+rY8wBJmnw4KczSIenXzP2WOG0Y4G/icgbHOZQ2xLczN3zJy63BZQ gVuPOoHCDnSrDWn29hlUEPLkiynnGx5AUS7hnujQG40nwJrKS4YJpwnbYEyLeX7r r3rdm5iZhHHEd1zvOwrSzdSSjbBFKD4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:49 2026 by rpki-client