$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa File: 5f969a12-5cb2-36ef-aaab-e4b979add84d.roa (raw, json) Hash identifier: MkGBovisp26+sZkSM/qqwfzZluW2et4DmbysyfazMPo= Subject key identifier: 09:F4:43:C2:7A:B8:75:A7:88:C4:42:04:46:2E:10:3C:AD:1B:45:C3 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584C470BC4722D6E11D7E7E15080 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 10430 IP address blocks: 68.179.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:c4:72:2d:6e:11:d7:e7:e1:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=f8ad895d-2b6c-43b6-b0d3-8206203142e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:74:de:ab:2e:c5:8f:8f:41:49:c7:85:3a: 1d:ad:8e:2c:fd:a7:01:eb:c7:08:2c:e0:50:6f:f0: 6a:1d:51:7c:d4:53:65:89:01:0f:54:6b:59:67:27: 1d:33:5b:6b:b3:3b:bb:fd:16:81:cc:c4:49:c1:f9: 97:dc:c6:5c:5b:80:d8:15:37:3b:59:f8:77:b4:94: f0:8e:d4:bc:8f:25:ff:6b:e1:13:b0:42:8f:e4:1d: ef:94:e5:20:0f:02:a9:7c:22:8d:04:77:22:58:94: 33:a4:a7:17:ea:f0:c2:45:6e:55:d3:7b:00:af:93: 47:1d:8b:72:39:86:a8:92:89:d6:20:8b:9c:73:4c: f3:f2:6a:ce:bc:b1:c8:a4:f4:71:43:32:e6:74:9d: e6:2f:b4:c3:69:35:de:78:7c:32:bc:58:75:03:ca: 33:fc:b7:cc:dd:9d:a4:84:43:01:36:0e:25:14:4c: 09:ab:5e:35:fb:ac:a1:6f:0c:79:b1:34:d6:a0:00: 0a:03:ac:04:5d:d5:fa:64:ad:b4:30:44:e9:f4:6a: 6b:91:4a:d1:cd:db:56:d3:84:84:75:08:81:07:19: 91:4c:af:55:bd:21:e8:c9:0e:4a:2d:5b:4e:13:65: 53:ac:20:a2:d7:ee:ed:39:3c:7c:ff:5f:77:ce:4b: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F4:43:C2:7A:B8:75:A7:88:C4:42:04:46:2E:10:3C:AD:1B:45:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 68.179.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:84:06:d8:ba:ab:bd:20:4c:17:94:34:15:4f:e1:24:3c:f9: 50:ab:c4:5c:a0:c6:e6:60:f7:71:79:00:6c:e4:58:32:92:57: 35:70:36:43:12:28:27:9f:38:b2:5d:b6:53:24:ad:a1:35:46: bb:46:15:62:90:88:b2:a0:ac:81:cd:20:ce:25:5f:f6:3b:43: 22:65:d2:ef:4c:29:84:6e:39:c2:7e:54:f1:da:e9:00:0d:28: 7f:77:c1:40:7a:e6:58:c9:02:40:de:9e:97:07:95:1e:ca:9c: b8:bc:35:b8:65:13:69:e5:12:96:09:44:31:e9:2c:d4:cf:ec: cf:27:3d:ff:c7:92:d7:d9:5d:51:e3:bc:e7:aa:aa:40:f0:b9: 79:a0:50:74:52:02:61:b9:0c:ab:f7:b1:34:04:f2:d3:4e:30: 20:bc:37:b1:b0:6e:70:c0:a0:0a:db:33:0f:86:1e:01:db:67: c4:ae:ee:7c:cc:51:4d:81:fd:12:08:ad:1d:29:23:dd:f7:f2: 6d:b3:c8:4b:30:2a:a3:cb:9e:6a:d4:ef:8d:40:62:e8:7d:ae: b5:cb:65:69:1d:51:7f:0c:79:4f:d1:a8:4e:22:ce:54:50:4f: b3:54:03:b1:41:e3:11:6f:19:ec:64:d9:b0:70:44:a2:8c:3a: 14:cd:9e:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC8RyLW4R1+fhUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk ZjhhZDg5NWQtMmI2Yy00M2I2LWIwZDMtODIwNjIwMzE0MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCF03qsuxY+PQUnHhTodrY4s/acB68cILOBQ b/BqHVF81FNliQEPVGtZZycdM1trszu7/RaBzMRJwfmX3MZcW4DYFTc7Wfh3tJTw jtS8jyX/a+ETsEKP5B3vlOUgDwKpfCKNBHciWJQzpKcX6vDCRW5V03sAr5NHHYty OYaokonWIIucc0zz8mrOvLHIpPRxQzLmdJ3mL7TDaTXeeHwyvFh1A8oz/LfM3Z2k hEMBNg4lFEwJq141+6yhbwx5sTTWoAAKA6wEXdX6ZK20METp9GprkUrRzdtW04SE dQiBBxmRTK9VvSHoyQ5KLVtOE2VTrCCi1+7tOTx8/193zksmcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn0Q8J6uHWniMRCBEYuEDytG0XDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNWY5NjlhMTItNWNiMi0z NmVmLWFhYWItZTRiOTc5YWRkODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRLPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyEBti6q70gTBeUNBVP4SQ8+VCrxFygxuZg93F5AGzkWDKSVzVwNkMS KCefOLJdtlMkraE1RrtGFWKQiLKgrIHNIM4lX/Y7QyJl0u9MKYRuOcJ+VPHa6QAN KH93wUB65ljJAkDenpcHlR7KnLi8NbhlE2nlEpYJRDHpLNTP7M8nPf/HktfZXVHj vOeqqkDwuXmgUHRSAmG5DKv3sTQE8tNOMCC8N7GwbnDAoArbMw+GHgHbZ8Su7nzM UU2B/RIIrR0pI9338m2zyEswKqPLnmrU741AYuh9rrXLZWkdUX8MeU/RqE4izlRQ T7NUA7FB4xFvGexk2bBwRKKMOhTNnvI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:56 2026 by rpki-client