$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cda49a05-fa6f-3067-8da6-a17242ef7c89.roa File: cda49a05-fa6f-3067-8da6-a17242ef7c89.roa (raw, json) Hash identifier: L0+UbwqZVIoC85qylkOtSZE5eL45CnadD7mkFvWfl2U= Subject key identifier: C9:D4:B9:85:5E:03:35:22:4F:6C:81:F3:C2:7C:4D:A0:4C:EA:67:E4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CDC67C86397B3F71F704760E8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cda49a05-fa6f-3067-8da6-a17242ef7c89.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 701 IP address blocks: 68.238.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:c8:63:97:b3:f7:1f:70:47:60:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=672669ee-d3e3-4677-bb03-f63f44e04b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:58:76:30:3a:7c:ff:74:f2:94:05:71:c4: 81:86:13:92:bb:04:94:56:37:d6:fa:33:1f:fc:bf: 61:f4:ef:fb:de:b0:22:92:08:ef:0d:dc:51:65:37: a9:de:28:d1:9a:f8:02:a4:14:bf:c3:16:45:72:e0: 99:64:6f:9b:b6:e0:90:91:7f:77:b8:ba:a9:c7:83: a2:8e:c5:d5:fc:15:16:e6:ad:17:61:ed:54:ba:b7: 35:ef:d1:15:d3:8f:9b:fa:36:c2:c6:ea:30:dc:40: c5:94:09:3e:41:59:3f:5b:ac:c1:4e:6a:d5:69:f0: 48:68:6f:2c:76:f7:9b:f1:00:b7:89:4f:d8:60:50: ff:bb:d9:b3:b9:fc:bf:30:c6:e7:67:85:e5:60:59: 5c:e4:c9:d5:32:f4:71:ee:9c:0e:92:df:c0:ad:d7: 7d:4b:0b:7a:13:5d:0b:db:f1:e4:43:44:0f:4f:79: eb:b3:30:d8:b2:13:52:d9:a2:c9:4f:1d:71:af:7f: 74:c2:32:27:78:04:b0:12:2a:97:0e:dd:ac:cc:a6: 8b:07:2a:3b:c2:22:82:5c:69:7d:c0:14:62:7d:9f: 7c:0e:35:c6:d1:1b:40:8a:cd:18:d7:55:3b:fe:23: 43:5f:8e:65:cb:1b:6a:05:e1:fd:d6:aa:f0:01:8f: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D4:B9:85:5E:03:35:22:4F:6C:81:F3:C2:7C:4D:A0:4C:EA:67:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cda49a05-fa6f-3067-8da6-a17242ef7c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:28:21:9c:87:3b:01:04:30:02:4b:a1:0e:ed:5a:05:04:8e: 2e:51:a5:67:7c:8b:c6:1d:92:e9:48:14:c3:70:a9:72:3d:45: 7a:55:db:03:42:de:c3:f3:ec:96:ad:8d:22:95:32:61:f8:79: 22:65:ce:16:80:ab:d5:67:bd:a3:e1:95:66:c8:c0:60:78:de: 72:dd:37:77:83:6a:df:a2:3a:0d:af:ed:49:d4:eb:09:6b:d0: dc:9c:a9:14:f6:0f:01:34:05:1e:79:3e:e5:a2:8f:39:5c:a9: d7:fc:9e:5d:23:fe:c1:44:8d:27:4d:00:67:c9:f7:f7:bd:17: d5:16:66:3c:05:c9:37:39:95:87:fe:df:74:74:8f:c7:6c:c8: cf:f5:83:d4:20:c6:dd:5b:25:de:cf:dd:16:9e:37:03:7e:75: ae:08:34:40:c6:2e:45:49:80:1f:d4:f4:34:8c:30:4c:c5:d5: 79:d8:33:48:7d:e7:38:b0:04:b1:18:39:4f:9f:e2:80:1e:d0: 11:b4:02:2f:41:f9:4d:5f:57:36:ec:73:12:6b:3c:f5:59:4e: 3f:a5:3d:74:c8:a6:58:e6:04:56:41:a1:21:3e:22:9b:08:6d: b9:00:c1:06:51:da:5e:c2:62:46:7f:ba:0a:aa:4e:22:c1:4c: 68:68:d3:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ8hjl7P3H3BHYOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk NjcyNjY5ZWUtZDNlMy00Njc3LWJiMDMtZjYzZjQ0ZTA0YjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCpYdjA6fP908pQFccSBhhOSuwSUVjfW+jMf /L9h9O/73rAikgjvDdxRZTep3ijRmvgCpBS/wxZFcuCZZG+btuCQkX93uLqpx4Oi jsXV/BUW5q0XYe1Uurc179EV04+b+jbCxuow3EDFlAk+QVk/W6zBTmrVafBIaG8s dveb8QC3iU/YYFD/u9mzufy/MMbnZ4XlYFlc5MnVMvRx7pwOkt/Ardd9Swt6E10L 2/HkQ0QPT3nrszDYshNS2aLJTx1xr390wjIneASwEiqXDt2szKaLByo7wiKCXGl9 wBRifZ98DjXG0RtAis0Y11U7/iNDX45lyxtqBeH91qrwAY/YewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnUuYVeAzUiT2yB88J8TaBM6mfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2RhNDlhMDUtZmE2Zi0z MDY3LThkYTYtYTE3MjQyZWY3Yzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERO4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0oIZyHOwEEMAJLoQ7tWgUEji5RpWd8i8YdkulIFMNwqXI9RXpV2wNC 3sPz7JatjSKVMmH4eSJlzhaAq9VnvaPhlWbIwGB43nLdN3eDat+iOg2v7UnU6wlr 0NycqRT2DwE0BR55PuWijzlcqdf8nl0j/sFEjSdNAGfJ9/e9F9UWZjwFyTc5lYf+ 33R0j8dsyM/1g9Qgxt1bJd7P3RaeNwN+da4INEDGLkVJgB/U9DSMMEzF1XnYM0h9 5ziwBLEYOU+f4oAe0BG0Ai9B+U1fVzbscxJrPPVZTj+lPXTIpljmBFZBoSE+IpsI bbkAwQZR2l7CYkZ/ugqqTiLBTGho040= -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:52 2026 by rpki-client