$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbe7ec20-a8ea-34b2-a0e9-1e04cb083c02.roa File: bbe7ec20-a8ea-34b2-a0e9-1e04cb083c02.roa (raw, json) Hash identifier: 2uhBPFmStGSBehRlFVPB0mi6t8LqXmxAfp5nDixFeUY= Subject key identifier: 5F:45:53:0E:8D:8C:86:F4:AB:4B:8F:73:BA:7E:E7:EE:C5:E1:72:CD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CDC67C841FC7395027662EBE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbe7ec20-a8ea-34b2-a0e9-1e04cb083c02.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 701 IP address blocks: 68.238.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:c8:41:fc:73:95:02:76:62:eb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=2af5b462-abd6-4827-8ee4-917d9bf65801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:43:2b:99:8d:f5:a2:51:9c:84:05:d8:dc: 6b:70:d8:5e:e8:9a:5e:05:cc:95:81:f4:8c:31:08: 1f:94:c9:b1:35:47:d6:09:fd:ee:05:69:2f:3e:48: 64:ee:6f:fb:3f:87:35:80:1b:1c:07:0d:a9:f1:08: b2:ac:b0:e7:c9:19:c5:0a:13:4b:46:16:96:12:13: 50:47:e7:51:62:77:66:d4:6f:d2:4f:57:7f:ee:a7: d2:0c:18:a2:c4:de:16:95:2b:c0:73:be:f2:4f:34: 5c:25:82:5a:5d:c7:45:8c:33:44:b4:ec:ce:92:ca: 0c:a7:80:8e:d5:b5:84:98:35:d3:40:44:c0:35:15: 77:8a:c7:9c:2f:6b:ad:68:7a:9c:69:b6:ee:28:0e: 7b:94:32:1b:90:3c:61:5e:82:43:e6:eb:bc:c6:00: 25:0e:24:29:72:3b:06:a2:2a:54:57:eb:20:d1:f9: 70:40:e5:d3:b2:f4:3d:6a:d8:4c:e3:a4:20:7d:24: f3:af:d8:08:53:60:1a:d5:cc:6a:a6:b2:81:96:28: 63:68:f2:b7:f9:44:d4:0b:3f:e6:26:30:64:d5:0b: ae:20:1b:c5:b1:05:b4:20:79:d7:f5:9d:77:1d:67: 78:29:ed:42:db:16:80:98:95:ba:62:bd:9a:9c:9f: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:45:53:0E:8D:8C:86:F4:AB:4B:8F:73:BA:7E:E7:EE:C5:E1:72:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbe7ec20-a8ea-34b2-a0e9-1e04cb083c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:39:ae:07:cb:88:4a:60:42:ee:a8:12:c3:72:f5:29:49:91: af:d5:ee:72:30:1d:4b:da:22:07:2f:6a:44:09:14:4b:7b:67: 12:51:7d:f5:c2:0b:d4:c9:1d:42:87:b8:7c:4d:4e:f1:10:09: 98:27:4a:32:94:62:27:54:08:97:1b:7e:dd:9d:96:21:bf:4e: aa:a6:ea:dd:59:24:e3:06:b2:81:bc:51:e6:5c:b4:49:32:56: fb:3f:64:4f:f0:2b:8a:88:cb:3d:c2:74:99:c5:22:67:11:1b: e5:ca:ab:18:26:7d:8c:dd:50:4d:11:c2:0b:7f:19:e6:92:ad: 44:f2:af:33:68:1c:78:d1:59:ec:ed:df:29:b8:00:27:72:ec: d7:f3:59:4b:6d:cd:8a:4c:a9:19:b3:fb:d0:1d:67:be:1c:1a: 21:e6:49:40:d2:a9:42:28:a7:99:cd:00:aa:34:e1:ad:66:fd: 6f:e8:58:79:d7:71:7a:df:37:1a:72:75:04:ac:fd:11:92:5d: 93:da:26:67:67:3e:9b:60:68:27:35:99:81:0d:5c:76:98:23: 58:5b:fe:a8:fb:ac:96:99:7d:ab:b1:0e:e0:b5:3c:bb:c9:2f: c5:dc:05:a8:8a:25:0b:7f:59:84:62:4c:f4:68:1e:9e:ff:34: 0d:13:4f:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ8hB/HOVAnZi6+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk MmFmNWI0NjItYWJkNi00ODI3LThlZTQtOTE3ZDliZjY1ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrFDK5mN9aJRnIQF2NxrcNhe6JpeBcyVgfSM MQgflMmxNUfWCf3uBWkvPkhk7m/7P4c1gBscBw2p8QiyrLDnyRnFChNLRhaWEhNQ R+dRYndm1G/ST1d/7qfSDBiixN4WlSvAc77yTzRcJYJaXcdFjDNEtOzOksoMp4CO 1bWEmDXTQETANRV3isecL2utaHqcabbuKA57lDIbkDxhXoJD5uu8xgAlDiQpcjsG oipUV+sg0flwQOXTsvQ9athM46QgfSTzr9gIU2Aa1cxqprKBlihjaPK3+UTUCz/m JjBk1QuuIBvFsQW0IHnX9Z13HWd4Ke1C2xaAmJW6Yr2anJ9bUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9FUw6NjIb0q0uPc7p+5+7F4XLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmJlN2VjMjAtYThlYS0z NGIyLWEwZTktMWUwNGNiMDgzYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRO5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc5rgfLiEpgQu6oEsNy9SlJka/V7nIwHUvaIgcvakQJFEt7ZxJRffXC C9TJHUKHuHxNTvEQCZgnSjKUYidUCJcbft2dliG/Tqqm6t1ZJOMGsoG8UeZctEky Vvs/ZE/wK4qIyz3CdJnFImcRG+XKqxgmfYzdUE0Rwgt/GeaSrUTyrzNoHHjRWezt 3ym4ACdy7NfzWUttzYpMqRmz+9AdZ74cGiHmSUDSqUIop5nNAKo04a1m/W/oWHnX cXrfNxpydQSs/RGSXZPaJmdnPptgaCc1mYENXHaYI1hb/qj7rJaZfauxDuC1PLvJ L8XcBaiKJQt/WYRiTPRoHp7/NA0TT1E= -----END CERTIFICATE-----Generated at Sun Mar 1 18:40:38 2026 by rpki-client