$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa File: 2cc7e6d7-52d1-305c-a917-da2148e02567.roa (raw, json) Hash identifier: ezT8hAUnEWJQjUdpcmX6bjsylnuhQG2U1A/9PC2uhn0= Subject key identifier: 2E:38:A4:82:B8:05:63:C8:4A:43:25:77:77:91:9C:6D:CD:CC:67:F5 Certificate issuer: /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Certificate serial: 010D0C9F4328584D09125E5F72D506250170DAF8 Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 397122 IP address blocks: 68.234.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5e:5f:72:d5:06:25:01:70:da:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=77168cf2-74d6-43a0-9fee-7e256de3d564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8b:7d:a2:12:32:05:68:e4:5d:88:19:f0:b3: 59:20:e2:31:33:54:86:6a:f1:6e:72:72:6b:87:c4: d3:64:f2:50:54:7a:63:78:78:ea:2c:8e:f2:ab:54: 52:f6:ac:1b:08:f7:b6:94:a2:0f:ec:8f:b9:46:d9: a2:5e:90:ca:f2:f1:50:cd:3e:75:6b:fa:25:f2:3f: db:a8:4c:3c:e4:0f:fa:ba:ae:0f:a2:4e:2e:e7:eb: e9:f4:a0:41:33:0b:cd:3d:a0:32:60:ed:b2:32:ba: 39:28:4c:d4:f9:8e:aa:34:6a:5b:20:56:87:7b:57: 87:78:8f:bf:46:8e:f1:39:b9:80:dd:53:45:9c:cc: 20:0b:c1:0f:7b:51:39:65:33:be:e0:24:aa:4e:fa: 45:f3:c3:93:6b:74:48:9a:e7:ee:ab:6c:1d:66:ba: 26:0c:2c:a4:5d:c1:5e:40:ba:92:30:bd:4c:0e:8d: 60:77:d6:ba:7c:20:ef:eb:34:14:be:bf:c9:51:7d: 29:16:56:35:a3:09:59:32:81:34:0a:fb:01:13:dc: b9:b8:8e:56:86:6c:56:ca:1f:8f:5a:5a:41:48:2b: d4:d8:29:92:db:34:79:9e:80:1e:35:a3:b7:a1:13: 45:ec:9e:80:d7:12:bc:71:d7:64:0a:cc:54:55:88: 30:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:38:A4:82:B8:05:63:C8:4A:43:25:77:77:91:9C:6D:CD:CC:67:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl X509v3 Authority Key Identifier: keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer sbgp-ipAddrBlock: critical IPv4: 68.234.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:6e:1e:11:64:cb:00:dd:e8:40:b4:9a:ce:92:c0:22:a6:59: 82:3f:f1:46:2c:1d:13:95:f2:c7:11:8a:71:ce:58:2e:a3:e4: 81:4b:99:d9:d7:99:be:16:0d:7a:0c:80:30:e1:d8:74:34:37: d3:d8:a7:f3:dc:12:55:1e:a2:46:a8:24:de:8c:32:65:03:bc: 2d:33:72:ef:40:a0:9c:a9:e1:d7:46:54:18:e9:ca:10:4b:90: 68:de:a8:1e:41:41:15:d6:39:56:e7:f1:bf:42:71:72:af:b3: c4:32:cb:58:a1:48:b7:8a:b6:3c:58:d2:0c:9a:67:c7:3e:eb: 8e:5c:6a:16:fc:3b:a8:b7:77:95:25:e5:e3:fe:45:69:4b:50: 82:ae:1b:07:31:3c:66:23:0c:d1:94:a7:f1:11:7d:f5:d6:f1: 73:16:79:8c:67:2a:70:ab:c7:d0:65:a0:e2:93:bf:dd:29:1d: 12:40:9e:d3:b8:8c:20:a8:ed:ed:c9:0d:59:e5:ce:b0:a0:2b: 56:ec:1e:2f:41:96:74:ef:5c:06:48:90:65:29:fa:07:f7:aa: e9:6d:92:8c:81:38:da:cf:24:b6:4f:b5:85:4d:67:5a:1a:21: 27:28:7d:cd:e6:64:94:67:26:6e:05:1f:1f:a9:31:18:e5:55: 2f:90:e7:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEl5fctUGJQFw2vgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY0MTRiOTktYmI5Zi00OTJhLWExYWMtOTM1YTQ5OTM1 ZDlkMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NzcxNjhjZjItNzRkNi00M2EwLTlmZWUtN2UyNTZkZTNkNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIt9ohIyBWjkXYgZ8LNZIOIxM1SGavFucnJr h8TTZPJQVHpjeHjqLI7yq1RS9qwbCPe2lKIP7I+5RtmiXpDK8vFQzT51a/ol8j/b qEw85A/6uq4Pok4u5+vp9KBBMwvNPaAyYO2yMro5KEzU+Y6qNGpbIFaHe1eHeI+/ Ro7xObmA3VNFnMwgC8EPe1E5ZTO+4CSqTvpF88OTa3RImufuq2wdZromDCykXcFe QLqSML1MDo1gd9a6fCDv6zQUvr/JUX0pFlY1owlZMoE0CvsBE9y5uI5WhmxWyh+P WlpBSCvU2CmS2zR5noAeNaO3oRNF7J6A1xK8cddkCsxUVYgw1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC44pIK4BWPISkMld3eRnG3NzGf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNjQx NGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVhNDk5MzVkOWQvMmNjN2U2ZDctNTJkMS0z MDVjLWE5MTctZGEyMTQ4ZTAyNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjY0MTRiOTktYmI5Zi00OTJhLWEx YWMtOTM1YTQ5OTM1ZDlkL2Y2NDE0Yjk5LWJiOWYtNDkyYS1hMWFjLTkzNWE0OTkz NWQ5ZC5jcmwwHwYDVR0jBBgwFoAUXyjgr3R9K6UUhQRsKCjt7dfyvZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNjQxNGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVh NDk5MzVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEROpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpuHhFkywDd6EC0ms6SwCKmWYI/8UYsHROV8scRinHOWC6j5IFLmdnX mb4WDXoMgDDh2HQ0N9PYp/PcElUeokaoJN6MMmUDvC0zcu9AoJyp4ddGVBjpyhBL kGjeqB5BQRXWOVbn8b9CcXKvs8Qyy1ihSLeKtjxY0gyaZ8c+645cahb8O6i3d5Ul 5eP+RWlLUIKuGwcxPGYjDNGUp/ERffXW8XMWeYxnKnCrx9BloOKTv90pHRJAntO4 jCCo7e3JDVnlzrCgK1bsHi9BlnTvXAZIkGUp+gf3qultkoyBONrPJLZPtYVNZ1oa IScofc3mZJRnJm4FHx+pMRjlVS+Q570= -----END CERTIFICATE-----Generated at Mon Mar 2 17:07:01 2026 by rpki-client