$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1c5abbb-e10d-3fea-81eb-57d58eb16054.roa File: e1c5abbb-e10d-3fea-81eb-57d58eb16054.roa (raw, json) Hash identifier: lKTc8z7/kBtv4bevFLsmSw+B9eyoDgRIwigONlIAaLo= Subject key identifier: 65:9E:8E:5A:60:C3:5B:9E:B2:66:4E:51:59:AD:6A:15:35:35:14:62 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D00B245D4EE3C31C39925F280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1c5abbb-e10d-3fea-81eb-57d58eb16054.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 5650 IP address blocks: 68.167.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:45:d4:ee:3c:31:c3:99:25:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=5f1ccf5d-28e2-447e-88d9-83f3243d409d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:ed:68:dd:fd:77:ce:9d:5c:44:4f:9e:ea: 0c:90:9a:d3:a6:7f:d7:28:3d:5c:bd:d9:0b:ed:98: 3b:75:44:5a:b6:b5:b4:c5:01:6e:c8:4f:ed:61:58: 44:73:cd:ae:b0:8d:51:6e:93:b4:f3:59:ff:9d:19: ee:2d:71:c5:e5:61:ca:4e:ed:f1:6a:74:f2:6e:3d: 25:22:68:a6:5d:24:64:1b:51:25:35:51:03:ab:a5: 51:9e:d8:00:e9:2d:f8:f0:19:35:fa:8d:23:28:ce: 06:51:0b:6a:66:80:a5:0c:54:a8:49:17:88:1a:01: c8:3b:ce:89:8f:29:8d:8a:0b:73:50:69:e9:44:44: bc:c8:e9:f2:82:f9:d0:b7:c6:4d:4f:10:1f:03:88: e5:5d:9b:9d:6c:9e:c0:1f:6a:9b:6f:1b:0c:aa:a4: b5:47:06:48:79:f7:5d:20:4f:18:4e:a1:93:74:d5: bc:66:9b:a5:d8:eb:5b:6e:fb:74:0a:7a:24:e9:49: 6b:83:92:24:17:11:08:32:0b:4a:ce:da:02:91:5b: 7f:a4:f4:14:cc:40:f0:21:6a:61:f0:e0:99:a2:78: c8:9b:14:96:5f:d6:3d:0f:8f:05:78:ea:3c:c2:80: 16:69:7e:53:f9:5b:8d:ec:95:c5:93:ab:71:e4:a3: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9E:8E:5A:60:C3:5B:9E:B2:66:4E:51:59:AD:6A:15:35:35:14:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1c5abbb-e10d-3fea-81eb-57d58eb16054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f9:e1:58:0a:fb:fd:15:44:a9:ab:a0:b1:b4:af:e2:58:9d: ba:f1:1e:bd:4e:1c:72:99:3a:eb:df:fc:99:1f:66:90:81:20: a6:c3:4a:c1:ae:4f:1f:32:01:5d:8d:35:00:6f:c5:b3:43:73: 8d:1f:37:9d:e7:fe:1a:62:cb:4e:29:c0:19:b2:17:76:e7:1b: cb:5b:9f:2e:35:f8:7a:b6:9a:16:86:d6:31:4d:5f:a5:8b:73: 68:35:04:3d:37:84:86:33:73:9c:08:f4:80:b9:3b:5b:d3:05: 78:6f:89:f6:67:b3:d2:52:f6:db:9d:c3:75:1c:14:5a:25:74: 67:6c:45:41:51:7e:19:9f:62:c0:0a:d2:64:1c:df:bf:6a:4d: 85:f2:80:e3:35:09:e4:d0:75:26:13:93:64:b6:c7:3f:7e:3a: 1d:2c:a3:c8:b9:09:42:17:87:9d:8e:cf:97:d5:16:b3:a1:26: 7d:b7:dc:85:b1:65:e8:ca:68:1f:d3:95:24:b4:8e:1a:86:35: b7:49:e6:fb:a4:b9:99:4a:3f:b1:43:7f:c6:28:6c:76:7a:d8: 43:7a:c1:9f:cf:01:55:f7:da:f9:1c:97:75:65:ac:08:c3:50: d5:52:43:cf:67:94:1b:96:0e:f0:7d:38:d9:15:1f:47:56:b0: 9b:cf:90:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AskXU7jwxw5kl8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NWYxY2NmNWQtMjhlMi00NDdlLTg4ZDktODNmMzI0M2Q0MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE/taN39d86dXERPnuoMkJrTpn/XKD1cvdkL 7Zg7dURatrW0xQFuyE/tYVhEc82usI1RbpO081n/nRnuLXHF5WHKTu3xanTybj0l ImimXSRkG1ElNVEDq6VRntgA6S348Bk1+o0jKM4GUQtqZoClDFSoSReIGgHIO86J jymNigtzUGnpRES8yOnygvnQt8ZNTxAfA4jlXZudbJ7AH2qbbxsMqqS1RwZIefdd IE8YTqGTdNW8Zpul2Otbbvt0Cnok6Ulrg5IkFxEIMgtKztoCkVt/pPQUzEDwIWph 8OCZonjImxSWX9Y9D48FeOo8woAWaX5T+VuN7JXFk6tx5KPh9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWejlpgw1uesmZOUVmtahU1NRRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTFjNWFiYmItZTEwZC0z ZmVhLTgxZWItNTdkNThlYjE2MDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr54VgK+/0VRKmroLG0r+JYnbrxHr1OHHKZOuvf/JkfZpCBIKbDSsGu Tx8yAV2NNQBvxbNDc40fN53n/hpiy04pwBmyF3bnG8tbny41+Hq2mhaG1jFNX6WL c2g1BD03hIYzc5wI9IC5O1vTBXhvifZns9JS9tudw3UcFFoldGdsRUFRfhmfYsAK 0mQc379qTYXygOM1CeTQdSYTk2S2xz9+Oh0so8i5CUIXh52Oz5fVFrOhJn233IWx ZejKaB/TlSS0jhqGNbdJ5vukuZlKP7FDf8YobHZ62EN6wZ/PAVX32vkcl3VlrAjD UNVSQ89nlBuWDvB9ONkVH0dWsJvPkIU= -----END CERTIFICATE-----Generated at Sun Mar 1 20:59:13 2026 by rpki-client