$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa File: 22535747-b884-373e-ae7d-c116ccd3f089.roa (raw, json) Hash identifier: TtQ8LTffw4WN9BCTcSEcsakq0yjfmThpWVoyAVWLFWk= Subject key identifier: 3C:AB:B2:C2:C5:D8:5A:B2:58:22:92:31:D3:9A:47:0C:D6:DE:B8:6C Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F4328584D667A4FE5302789C54AC05920 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 20115 IP address blocks: 68.170.0.0/24 maxlen: 24 68.170.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:4f:e5:30:27:89:c5:4a:c0:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=43f54bb5-acc1-43fc-bc71-8ba14074fad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:b6:3c:e1:47:68:79:4c:6d:91:7f:fb:fb: 18:f9:cc:22:56:a5:d9:f6:69:f6:a3:bc:a7:7a:e4: 11:d7:02:da:5d:4e:40:6e:04:42:e8:46:53:10:45: c5:f9:88:5f:c2:c3:cf:32:1e:72:d2:d1:aa:37:6f: 8a:ff:29:f4:3a:55:9a:ee:47:e9:07:e3:4e:05:b6: fa:1f:fb:63:b5:8b:b3:a3:11:99:d5:b8:a2:7c:53: 16:27:69:bf:38:03:6f:55:40:15:bb:ee:d7:07:a6: 03:63:c1:19:04:2b:b0:1b:75:4e:b8:f9:a0:23:06: ea:2c:8a:74:e2:06:71:0f:bb:65:6d:9f:69:ba:dd: 81:80:00:7d:0a:f1:47:43:c5:ce:6e:07:71:fe:20: 4c:41:1b:bd:16:ff:ec:e9:68:82:5c:0f:34:d9:4b: f2:9b:fd:90:58:11:f0:48:ae:a1:68:41:f8:af:ae: d8:45:eb:ca:05:b5:f2:34:f1:44:29:d7:e7:13:9a: b1:60:c8:d7:7d:d9:1b:ff:5c:7d:a4:9f:b0:b4:f6: 9d:6f:2e:bb:37:09:6b:fb:f2:e1:a2:ba:a6:45:3a: f5:43:ab:95:33:45:6b:61:46:15:e8:bf:59:7c:dd: 9d:12:0d:ea:e9:7c:f7:83:bd:cf:38:1b:e4:f4:ad: 56:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AB:B2:C2:C5:D8:5A:B2:58:22:92:31:D3:9A:47:0C:D6:DE:B8:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ee:4f:8b:56:5d:50:63:fa:e6:eb:0f:f1:c8:b3:27:02:e6: 40:e5:d3:7b:d5:6c:44:16:07:f7:d5:b5:bf:5f:bc:0f:2f:29: 68:fc:b9:1d:80:f8:a1:bf:b3:b2:ed:48:5e:6d:fa:dd:47:84: 0c:80:a8:16:2d:59:9e:fe:8c:b6:ed:b0:83:b9:02:11:7c:90: 37:01:2d:82:3c:6a:66:2d:93:4b:bb:3a:55:22:0b:96:c0:f9: 5f:b6:ba:4a:82:41:c8:03:59:63:18:61:41:be:95:c5:4a:2c: 07:00:b1:fa:98:28:64:72:5e:02:48:69:b4:8e:17:6f:04:bc: 01:b0:13:dc:2f:79:ce:eb:27:12:12:fd:25:ff:6a:4e:75:8a: 88:77:c4:f1:69:a9:60:17:89:3f:2f:ea:5c:91:a8:34:5d:24: c6:69:ed:09:f4:a0:44:ca:18:27:10:2b:c5:af:07:a9:d9:03: 64:ea:63:f3:ee:59:34:50:e9:f8:41:a4:ce:d3:cb:30:6a:3d: ea:63:1b:87:36:3f:81:87:87:20:f8:81:14:9c:ff:4e:1d:ff: 1b:29:a0:15:69:8a:6a:d0:33:9d:29:c1:f0:75:32:b3:00:ca: fe:b2:a8:e8:94:f3:0a:b1:22:86:e4:52:a0:21:69:cb:d7:2f: 0b:9b:41:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1mek/lMCeJxUrAWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk NDNmNTRiYjUtYWNjMS00M2ZjLWJjNzEtOGJhMTQwNzRmYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSi2POFHaHlMbZF/+/sY+cwiVqXZ9mn2o7yn euQR1wLaXU5AbgRC6EZTEEXF+YhfwsPPMh5y0tGqN2+K/yn0OlWa7kfpB+NOBbb6 H/tjtYuzoxGZ1biifFMWJ2m/OANvVUAVu+7XB6YDY8EZBCuwG3VOuPmgIwbqLIp0 4gZxD7tlbZ9put2BgAB9CvFHQ8XObgdx/iBMQRu9Fv/s6WiCXA802Uvym/2QWBHw SK6haEH4r67YRevKBbXyNPFEKdfnE5qxYMjXfdkb/1x9pJ+wtPadby67Nwlr+/Lh orqmRTr1Q6uVM0VrYUYV6L9ZfN2dEg3q6Xz3g73POBvk9K1WtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyrssLF2FqyWCKSMdOaRwzW3rhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMjI1MzU3NDctYjg4NC0z NzNlLWFlN2QtYzExNmNjZDNmMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDuT4tWXVBj+ubrD/HIsycC5kDl03vVbEQWB/fVtb9fvA8vKWj8uR2A +KG/s7LtSF5t+t1HhAyAqBYtWZ7+jLbtsIO5AhF8kDcBLYI8amYtk0u7OlUiC5bA +V+2ukqCQcgDWWMYYUG+lcVKLAcAsfqYKGRyXgJIabSOF28EvAGwE9wvec7rJxIS /SX/ak51ioh3xPFpqWAXiT8v6lyRqDRdJMZp7Qn0oETKGCcQK8WvB6nZA2TqY/Pu WTRQ6fhBpM7TyzBqPepjG4c2P4GHhyD4gRSc/04d/xspoBVpimrQM50pwfB1MrMA yv6yqOiU8wqxIobkUqAhacvXLwubQUs= -----END CERTIFICATE-----Generated at Fri Apr 17 11:39:20 2026 by rpki-client