$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/91aa241e-8896-32fb-a614-33e9e2acc913.roa File: 91aa241e-8896-32fb-a614-33e9e2acc913.roa (raw, json) Hash identifier: cZo87XT08UGruiaUxHa3jWG9tksoYqfx2UtpeZh2PlE= Subject key identifier: A7:3F:FF:F5:E2:7E:17:B1:68:B5:0E:20:67:7B:4E:D2:D4:27:A7:36 Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Certificate serial: 010D0C9F4328584CC174C82288F3911EDA135DC0 Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/91aa241e-8896-32fb-a614-33e9e2acc913.roa Signing time: Wed 04 Feb 2026 22:20:57 +0000 ROA not before: Wed 04 Feb 2026 22:20:57 +0000 ROA not after: Tue 05 May 2026 21:20:57 +0000 asID: 36744 IP address blocks: 68.68.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c1:74:c8:22:88:f3:91:1e:da:13:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Validity Not Before: Feb 4 22:20:57 2026 GMT Not After : May 5 21:20:57 2026 GMT Subject: CN=b6cf2823-ce29-4c12-acac-b33289d8f7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:49:73:bb:bb:38:47:6d:f5:f2:4f:d4:f3:46: 24:ac:a8:8d:60:c1:a9:be:25:44:f1:68:73:e4:ec: e1:20:d8:c9:ef:c6:4f:ca:f0:3b:ea:47:e8:4e:fe: 72:a1:39:65:26:dc:a7:6d:d7:51:f9:c7:65:14:fc: 47:dd:2d:6a:fc:0c:01:9d:3d:5b:72:4e:a0:32:73: 74:35:e2:2b:fd:b6:63:db:00:06:71:33:be:dc:71: dd:94:a5:3d:3d:8f:34:77:06:2d:a5:5e:96:ce:fe: fe:5d:ea:0a:57:e2:69:86:4d:31:4a:d9:7f:26:21: 8c:93:5a:51:d3:f0:24:6d:19:91:cc:ef:4b:d2:10: 70:b3:d9:4e:f5:b0:7f:04:98:ca:d6:79:fa:91:dd: b0:2e:f8:85:95:2e:fb:e8:55:f5:a7:29:1f:6b:79: 46:76:01:42:36:a0:c9:28:3c:31:dc:60:85:0d:b9: 03:12:b2:a5:01:54:c1:53:64:36:27:fc:63:61:16: 4f:d7:c2:e1:40:a6:7d:4b:31:eb:e3:0a:2a:01:3b: 4f:2e:32:3a:48:c1:10:3c:4c:4f:7f:e3:c7:f9:6b: 91:82:1b:84:b7:a4:b1:9d:10:2e:9a:44:8e:36:36: f5:b5:4f:57:cd:20:69:19:5a:05:2b:9e:cc:a4:15: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3F:FF:F5:E2:7E:17:B1:68:B5:0E:20:67:7B:4E:D2:D4:27:A7:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/91aa241e-8896-32fb-a614-33e9e2acc913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl X509v3 Authority Key Identifier: keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer sbgp-ipAddrBlock: critical IPv4: 68.68.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:72:27:99:19:82:e5:b8:90:55:e3:a2:8c:5d:de:b5:b3:e5: 5a:52:cd:f3:33:65:00:6d:18:5f:da:92:f8:dc:3f:a0:d8:ef: 99:b4:ff:3f:91:3f:0d:52:9e:22:4b:19:f6:77:d5:67:25:3a: e2:f8:4b:93:3c:3b:a2:50:44:19:de:d8:5d:19:d2:2f:07:de: db:8a:11:23:42:0e:db:50:e9:98:fc:d5:2c:bf:d2:cc:bc:f0: 76:7b:ce:91:89:92:1f:2b:10:61:c4:4d:98:de:44:03:7e:8e: 1e:5b:c9:8d:03:25:2f:f9:95:4c:1c:78:dd:72:da:ee:44:23: 0c:55:a3:87:ef:4e:73:97:12:2d:4e:1d:13:30:e4:f5:69:16: 69:ca:3a:d7:82:a5:79:bf:24:87:c7:83:2b:e5:b9:7d:7f:83: 95:80:36:80:13:c1:af:05:85:63:87:c4:4a:e5:b2:d9:0b:88: ad:5b:a9:c0:6c:c3:02:43:d7:bf:b5:ef:85:e0:67:16:75:fa: 14:53:f8:78:d4:95:2b:02:0c:96:38:5b:a7:b9:e6:54:9a:4a: 1b:f1:44:fe:2d:50:20:c1:1d:d6:82:11:8b:98:98:da:8b:09: d3:f9:f7:bc:48:e8:ae:4e:4d:04:13:35:6f:02:e1:b5:ac:89: 70:17:a5:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzBdMgiiPORHtoTXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk M2VjMB4XDTI2MDIwNDIyMjA1N1oXDTI2MDUwNTIxMjA1N1owLzEtMCsGA1UEAxMk YjZjZjI4MjMtY2UyOS00YzEyLWFjYWMtYjMzMjg5ZDhmN2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkElzu7s4R2318k/U80YkrKiNYMGpviVE8Whz 5OzhINjJ78ZPyvA76kfoTv5yoTllJtynbddR+cdlFPxH3S1q/AwBnT1bck6gMnN0 NeIr/bZj2wAGcTO+3HHdlKU9PY80dwYtpV6Wzv7+XeoKV+Jphk0xStl/JiGMk1pR 0/AkbRmRzO9L0hBws9lO9bB/BJjK1nn6kd2wLviFlS776FX1pykfa3lGdgFCNqDJ KDwx3GCFDbkDErKlAVTBU2Q2J/xjYRZP18LhQKZ9SzHr4woqATtPLjI6SMEQPExP f+PH+WuRghuEt6SxnRAumkSONjb1tU9XzSBpGVoFK57MpBX2hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc///XifhexaLUOIGd7TtLUJ6c2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvOTFhYTI0MWUtODg5Ni0z MmZiLWE2MTQtMzNlOWUyYWNjOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx ZDMyM2QzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARET+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABByJ5kZguW4kFXjooxd3rWz5VpSzfMzZQBtGF/akvjcP6DY75m0/z+R Pw1SniJLGfZ31WclOuL4S5M8O6JQRBne2F0Z0i8H3tuKESNCDttQ6Zj81Sy/0sy8 8HZ7zpGJkh8rEGHETZjeRAN+jh5byY0DJS/5lUwceN1y2u5EIwxVo4fvTnOXEi1O HRMw5PVpFmnKOteCpXm/JIfHgyvluX1/g5WANoATwa8FhWOHxErlstkLiK1bqcBs wwJD17+174XgZxZ1+hRT+HjUlSsCDJY4W6e55lSaShvxRP4tUCDBHdaCEYuYmNqL CdP597xI6K5OTQQTNW8C4bWsiXAXpWE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:00:59 2026 by rpki-client