$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa File: e68b221b-741d-34a1-b72f-7ae3905f31f5.roa (raw, json) Hash identifier: 1mgkrkk6URyiD7WJQw7qadr1QngnwEhDwlkSf9O1mXk= Subject key identifier: A1:CF:BD:6D:62:61:19:9A:94:9B:63:9F:24:78:C0:92:2C:05:96:95 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CA5F6F6ECBD9597791C187D80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 23.239.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f6:f6:ec:bd:95:97:79:1c:18:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=93149bf7-51b3-46d0-b836-5ee6088d8375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:96:08:20:7b:7a:7b:a9:6a:6c:c9:d1:3a: c2:02:c7:66:6f:94:e4:97:2c:c0:af:d4:74:fb:e3: c9:17:04:a5:e6:17:34:b4:e7:ae:3f:e4:35:5f:bb: 21:18:e4:40:2a:dd:a4:66:82:c6:5b:cc:d2:38:4e: 05:dc:8a:55:cd:21:60:ef:63:5b:9f:65:cf:29:10: e7:ec:eb:85:f7:d2:a0:31:ae:a9:b2:3e:3a:93:52: 93:cd:6b:ea:25:6c:0f:75:a8:95:eb:40:17:df:c6: 6c:26:c8:f2:96:d4:c3:8c:a7:25:90:55:e9:d0:29: 42:e5:63:0c:13:f2:32:43:81:38:8c:9d:06:26:70: 63:34:af:ba:1e:58:ee:93:30:d6:c8:ad:f9:66:ff: 30:51:29:e3:37:33:8d:f2:48:5a:05:f4:7e:1a:bb: b4:53:b6:aa:b3:4a:07:d0:92:9c:89:d2:af:19:1e: 53:da:1e:00:8c:8b:7a:d5:1a:4c:4d:3c:26:73:b4: af:dd:5c:8f:6d:49:ad:2e:6f:b0:27:cd:51:e5:39: f6:4f:2c:1a:c1:a5:4b:51:2e:fb:ae:84:72:65:e5: 3d:38:c7:f1:8b:62:76:51:13:a1:10:4f:8e:38:17: df:8f:05:5a:a6:42:78:e4:33:7f:bc:1f:35:3a:0f: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CF:BD:6D:62:61:19:9A:94:9B:63:9F:24:78:C0:92:2C:05:96:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d3:68:9c:82:a7:e3:4e:fc:e2:cf:62:43:d6:87:57:b7:89: bc:06:14:74:08:2a:3a:96:fd:d0:72:a4:1d:8b:a0:01:e7:f6: 8e:97:b5:f1:e8:5f:04:5e:89:5d:9b:18:8b:7a:24:9f:3a:f2: e5:f9:bd:43:52:d4:5d:ac:35:cc:e7:9a:34:70:fe:ae:f8:c4: 38:83:37:67:e5:ae:42:c9:24:b4:f0:6b:7b:4d:f2:5b:f1:e2: 6e:6f:ab:a9:25:75:86:9d:db:9e:bf:93:7f:4a:b4:d2:9d:9f: b6:f9:2d:45:ec:8f:ec:00:66:4c:ef:c1:c9:ae:8c:fa:79:8c: 43:df:60:fe:20:87:d2:c3:be:8b:26:26:c2:9c:63:b7:66:2c: 3c:33:11:01:ff:1a:02:1f:42:df:0c:d2:df:13:a8:c5:11:92: 2a:5d:12:39:ca:47:07:d9:82:40:50:f2:04:e9:bf:ef:b5:51: e8:f6:42:55:e7:e4:8e:4f:33:52:5a:9b:1f:6b:a4:3d:29:10: 15:2e:1e:6b:72:0a:ec:a2:5a:11:5a:6b:90:a4:73:e7:8b:38: 94:1c:22:1f:35:1a:5b:1b:65:9b:f3:53:db:13:ff:c1:3a:f0: b1:d3:83:48:cc:7b:d7:68:02:9d:6e:33:9c:1e:a5:8f:b0:0a: bb:15:18:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9vbsvZWXeRwYfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk OTMxNDliZjctNTFiMy00NmQwLWI4MzYtNWVlNjA4OGQ4Mzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArACWCCB7enupamzJ0TrCAsdmb5TklyzAr9R0 ++PJFwSl5hc0tOeuP+Q1X7shGORAKt2kZoLGW8zSOE4F3IpVzSFg72Nbn2XPKRDn 7OuF99KgMa6psj46k1KTzWvqJWwPdaiV60AX38ZsJsjyltTDjKclkFXp0ClC5WMM E/IyQ4E4jJ0GJnBjNK+6HljukzDWyK35Zv8wUSnjNzON8khaBfR+Gru0U7aqs0oH 0JKcidKvGR5T2h4AjIt61RpMTTwmc7Sv3VyPbUmtLm+wJ81R5Tn2TywawaVLUS77 roRyZeU9OMfxi2J2UROhEE+OOBffjwVapkJ45DN/vB81Og+mbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHPvW1iYRmalJtjnyR4wJIsBZaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZTY4YjIyMWItNzQxZC0z NGExLWI3MmYtN2FlMzkwNWYzMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTTaJyCp+NO/OLPYkPWh1e3ibwGFHQIKjqW/dBypB2LoAHn9o6XtfHo XwReiV2bGIt6JJ868uX5vUNS1F2sNcznmjRw/q74xDiDN2flrkLJJLTwa3tN8lvx 4m5vq6kldYad256/k39KtNKdn7b5LUXsj+wAZkzvwcmujPp5jEPfYP4gh9LDvosm JsKcY7dmLDwzEQH/GgIfQt8M0t8TqMURkipdEjnKRwfZgkBQ8gTpv++1Uej2QlXn 5I5PM1Jamx9rpD0pEBUuHmtyCuyiWhFaa5Ckc+eLOJQcIh81GlsbZZvzU9sT/8E6 8LHTg0jMe9doAp1uM5wepY+wCrsVGEg= -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:50 2026 by rpki-client