$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/98cab76f-ff76-322d-bf69-a2c7273fee3e.roa File: 98cab76f-ff76-322d-bf69-a2c7273fee3e.roa (raw, json) Hash identifier: oB9/+KJ4kSbvPTJcxKX0E/Z0PTJKuUuF3PZ76wr9DDI= Subject key identifier: B8:9F:2D:68:63:37:F7:16:A1:48:55:2D:1A:2F:0B:20:36:64:40:62 Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Certificate serial: 010D0C9F4328584D667A5B880E8FB3EF11721100 Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/98cab76f-ff76-322d-bf69-a2c7273fee3e.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 36744 IP address blocks: 68.68.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:5b:88:0e:8f:b3:ef:11:72:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=2ef49cac-7a6f-4d76-b3a5-7d705c637e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:03:6b:a4:00:36:b0:3e:8a:d3:55:35:07: 9b:1e:c5:69:ae:d5:b4:07:2b:b7:4e:c7:87:89:32: 59:6b:77:ae:f3:8b:13:1c:02:d0:36:86:07:7b:d7: 08:dd:ec:8c:c5:8d:b1:57:79:42:e2:32:84:d0:0b: b1:9e:a6:c5:71:95:75:1f:dc:de:e8:7c:13:3c:99: 30:45:59:06:75:fa:45:3d:72:48:4d:e8:8f:81:3b: a6:a4:fa:bf:84:89:bd:c4:48:0a:01:5c:ba:27:8d: 25:f1:41:9c:43:98:69:bc:cc:70:60:c4:1a:69:ab: fc:ec:b4:13:74:2b:6f:29:f6:dc:11:2b:9a:52:86: eb:f9:8c:2b:c1:47:d1:7b:54:02:cf:d4:07:c7:c1: 98:81:bf:64:df:0b:c7:5c:28:cd:1b:3e:3e:33:b7: b3:2c:9a:ba:d8:d4:c7:36:28:07:cc:1d:21:37:2f: df:0b:3d:60:f8:da:c2:cd:54:1b:28:00:f3:5f:00: 05:72:c2:37:4a:db:55:fe:84:6f:22:ea:f8:2d:ad: 58:50:36:7e:f8:d3:63:57:cf:56:cb:93:1b:0b:7d: 83:a1:9d:9e:41:d9:9c:13:89:a9:79:bd:66:46:33: 48:87:aa:d4:d9:35:77:fe:f4:c9:07:03:4b:d3:d4: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:2D:68:63:37:F7:16:A1:48:55:2D:1A:2F:0B:20:36:64:40:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/98cab76f-ff76-322d-bf69-a2c7273fee3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl X509v3 Authority Key Identifier: keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer sbgp-ipAddrBlock: critical IPv4: 68.68.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:fa:1a:a3:99:96:b6:9a:67:14:5c:5d:0f:a5:05:a6:51:e6: e6:d6:4f:b8:76:b4:95:36:53:aa:0b:d2:df:68:b2:b2:b0:43: 19:b7:ba:83:2a:23:b2:76:59:91:b1:de:5d:a8:80:a0:c9:69: c8:d4:63:b4:d8:f8:ca:ca:6f:b8:f3:a4:20:97:b0:8f:3c:f5: 2b:ec:12:fa:02:4b:4f:05:9f:35:20:3d:01:7e:a0:ec:92:56: ec:30:fe:f2:bc:0c:de:5c:c8:34:69:06:d0:a4:a9:ab:bb:c7: d0:22:29:04:95:f2:f5:d0:05:d4:51:5f:bd:6d:c5:29:d7:fb: 3e:c2:eb:de:1e:c0:dc:76:3d:d9:91:f9:80:e8:ac:99:f3:31: 50:ea:93:3c:17:c8:c7:88:e4:d4:b6:30:bf:ab:fe:48:1b:53: 07:64:65:a9:2b:31:e8:57:09:2b:1b:61:ff:b6:0c:2d:5e:63: b8:f8:d9:9b:c7:d5:44:af:b7:2c:92:35:07:c8:44:ca:a1:70: 11:4d:a4:b2:96:c6:fc:b3:6b:ea:13:50:32:57:d4:50:29:49: 54:c1:16:72:69:1f:1a:91:21:42:d5:24:a3:c4:75:54:bf:e4: 37:db:6a:06:76:94:05:43:5c:60:8c:33:10:97:73:a3:7e:02: d6:b8:b5:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1meluIDo+z7xFyEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk M2VjMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk MmVmNDljYWMtN2E2Zi00ZDc2LWIzYTUtN2Q3MDVjNjM3ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4YDa6QANrA+itNVNQebHsVprtW0Byu3TseH iTJZa3eu84sTHALQNoYHe9cI3eyMxY2xV3lC4jKE0AuxnqbFcZV1H9ze6HwTPJkw RVkGdfpFPXJITeiPgTumpPq/hIm9xEgKAVy6J40l8UGcQ5hpvMxwYMQaaav87LQT dCtvKfbcESuaUobr+YwrwUfRe1QCz9QHx8GYgb9k3wvHXCjNGz4+M7ezLJq62NTH NigHzB0hNy/fCz1g+NrCzVQbKADzXwAFcsI3SttV/oRvIur4La1YUDZ++NNjV89W y5MbC32DoZ2eQdmcE4mpeb1mRjNIh6rU2TV3/vTJBwNL09TjKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLifLWhjN/cWoUhVLRovCyA2ZEBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvOThjYWI3NmYtZmY3Ni0z MjJkLWJmNjktYTJjNzI3M2ZlZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx ZDMyM2QzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARET8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb6GqOZlraaZxRcXQ+lBaZR5ubWT7h2tJU2U6oL0t9osrKwQxm3uoMq I7J2WZGx3l2ogKDJacjUY7TY+MrKb7jzpCCXsI889SvsEvoCS08FnzUgPQF+oOyS Vuww/vK8DN5cyDRpBtCkqau7x9AiKQSV8vXQBdRRX71txSnX+z7C694ewNx2PdmR +YDorJnzMVDqkzwXyMeI5NS2ML+r/kgbUwdkZakrMehXCSsbYf+2DC1eY7j42ZvH 1USvtyySNQfIRMqhcBFNpLKWxvyza+oTUDJX1FApSVTBFnJpHxqRIULVJKPEdVS/ 5DfbagZ2lAVDXGCMMxCXc6N+Ata4tes= -----END CERTIFICATE-----Generated at Sun Apr 19 09:41:36 2026 by rpki-client