$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c19985d-b919-3a02-8174-fde4ced59c01.roa File: 8c19985d-b919-3a02-8174-fde4ced59c01.roa (raw, json) Hash identifier: qhh27Nm8Ocr7h456CHnoplPdWu5GFF1/ZE6s06A3smM= Subject key identifier: C3:F6:10:1F:7D:A9:68:C0:D5:26:19:B2:B6:F1:D0:10:B2:1E:5D:5A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CDC67C8B34A2B0246362A5FE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c19985d-b919-3a02-8174-fde4ced59c01.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 701 IP address blocks: 68.238.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:c8:b3:4a:2b:02:46:36:2a:5f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=b83c0a18-4711-46f5-8466-5cc4c1fbbe71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b3:b0:36:18:c0:1e:3c:a8:74:e4:25:4c:36: ec:9f:cd:87:45:ea:19:6a:2e:62:7a:70:46:bd:fe: b0:71:f2:65:f7:2c:14:79:6a:79:6f:2e:59:ed:73: 5b:f8:1a:1a:24:1e:74:ef:60:a9:5b:a7:16:7c:2a: 66:d7:8c:cd:20:3f:24:a7:8f:88:23:f3:ba:3f:3c: 19:c8:b6:e4:c7:33:79:0a:45:49:cf:ff:04:1b:25: e8:34:5e:5b:5c:c8:aa:a7:e7:dd:6b:d9:5b:5a:fd: f4:6e:24:dd:a4:48:7a:af:9b:a7:bb:e2:27:09:a7: f2:d5:42:51:f9:75:47:86:db:45:96:dc:14:a1:52: 91:7a:64:4b:a0:59:f7:bd:a7:0d:45:ff:05:77:30: b0:52:41:f0:57:e4:00:02:77:44:a4:9e:9a:1c:37: c2:d9:bb:56:95:7b:d5:c1:b9:bf:1f:0c:d1:ca:35: 36:6c:00:c8:2a:14:9b:cf:5a:e4:8b:b2:d6:e6:8d: c5:a8:eb:1c:3c:ee:84:91:b9:cb:22:f8:31:e1:99: 4f:ec:01:89:70:91:c5:89:64:00:bc:15:39:81:23: e6:23:2c:d8:e4:25:76:ae:98:dd:9e:e3:b7:6b:29: 87:47:d5:93:60:f3:8d:d3:c2:16:d3:6a:ef:08:41: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F6:10:1F:7D:A9:68:C0:D5:26:19:B2:B6:F1:D0:10:B2:1E:5D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c19985d-b919-3a02-8174-fde4ced59c01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:81:3b:e7:f2:c8:53:e2:b4:02:13:27:ef:e8:5c:7c:25:ef: 04:f0:28:ab:0e:b2:61:fd:a7:21:77:00:c9:c1:d3:fa:56:da: 33:46:12:05:c2:d7:31:12:00:b3:79:fe:74:45:f7:f2:e6:66: 01:73:0b:6c:f8:35:28:bb:42:81:67:61:d3:d8:22:31:4f:c1: 37:fa:45:ba:7c:af:4e:80:fd:5c:8b:0e:da:62:42:1b:0b:ea: b7:ff:ec:30:a6:26:7d:a5:eb:63:f1:c9:c7:37:d0:b0:d4:b7: 9f:68:8f:4d:4c:37:33:05:81:f7:86:b4:c1:6b:de:f0:44:20: 71:ac:ea:a1:e0:0a:68:cc:eb:54:79:1e:7f:01:40:70:c8:fc: 67:ec:18:a7:3a:c8:c7:61:e8:41:54:8e:d5:3d:76:be:e1:a0: f7:e4:68:2f:7b:6f:4d:ff:f3:c6:cd:78:c0:32:e0:12:53:26: ee:84:5f:49:fc:57:a1:82:8d:89:88:09:58:ae:a4:79:f2:a8: b7:75:5f:0e:94:6f:80:98:25:38:7b:f3:78:b4:d4:1e:96:f5: f5:db:e4:47:cc:34:d4:8a:b0:4a:7b:5d:92:52:bf:17:ef:6f: c2:85:f8:db:a7:eb:af:40:00:34:44:c7:ed:c0:ac:e2:28:a0: 3b:fe:99:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ8izSisCRjYqX+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk YjgzYzBhMTgtNDcxMS00NmY1LTg0NjYtNWNjNGMxZmJiZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7OwNhjAHjyodOQlTDbsn82HReoZai5ienBG vf6wcfJl9ywUeWp5by5Z7XNb+BoaJB5072CpW6cWfCpm14zNID8kp4+II/O6PzwZ yLbkxzN5CkVJz/8EGyXoNF5bXMiqp+fda9lbWv30biTdpEh6r5unu+InCafy1UJR +XVHhttFltwUoVKRemRLoFn3vacNRf8FdzCwUkHwV+QAAndEpJ6aHDfC2btWlXvV wbm/HwzRyjU2bADIKhSbz1rki7LW5o3FqOscPO6EkbnLIvgx4ZlP7AGJcJHFiWQA vBU5gSPmIyzY5CV2rpjdnuO3aymHR9WTYPON08IW02rvCEGjLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMP2EB99qWjA1SYZsrbx0BCyHl1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGMxOTk4NWQtYjkxOS0z YTAyLTgxNzQtZmRlNGNlZDU5YzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERO6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+BO+fyyFPitAITJ+/oXHwl7wTwKKsOsmH9pyF3AMnB0/pW2jNGEgXC 1zESALN5/nRF9/LmZgFzC2z4NSi7QoFnYdPYIjFPwTf6Rbp8r06A/VyLDtpiQhsL 6rf/7DCmJn2l62Pxycc30LDUt59oj01MNzMFgfeGtMFr3vBEIHGs6qHgCmjM61R5 Hn8BQHDI/GfsGKc6yMdh6EFUjtU9dr7hoPfkaC97b03/88bNeMAy4BJTJu6EX0n8 V6GCjYmICViupHnyqLd1Xw6Ub4CYJTh783i01B6W9fXb5EfMNNSKsEp7XZJSvxfv b8KF+Nun669AADREx+3ArOIooDv+mRQ= -----END CERTIFICATE-----Generated at Mon Mar 2 14:16:24 2026 by rpki-client