$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa File: 2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa (raw, json) Hash identifier: uc7nHKCNCTG/h5ccHxSqLdojxwkB9lN4MPJ2CdCbwvs= Subject key identifier: DA:88:5F:93:E5:FC:89:6F:23:06:D5:0D:24:3B:F6:8D:34:B0:05:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02A4F247D3E744301D460 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 208.68.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2a:4f:24:7d:3e:74:43:01:d4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f30a6a25-7a13-4c5a-aded-fd0880b4a1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:92:0b:15:72:6e:a4:34:25:09:93:df:2c:53: 41:e0:59:a9:8e:34:7a:14:74:70:6a:9b:e3:87:d4: 15:c7:f1:38:9f:6b:30:23:93:49:44:22:7f:ad:d7: a5:24:71:96:65:ab:ac:6d:0c:e9:d0:1a:96:73:fc: 4e:90:de:3b:4e:da:9e:72:f9:e4:a4:2a:3c:97:7a: a2:44:55:5b:68:bc:b8:04:08:18:22:bf:a3:00:28: 84:fe:09:3a:e6:71:10:a2:c5:58:32:88:d7:19:43: 97:67:20:44:0a:55:66:c1:d9:61:76:c0:75:a6:d8: 84:45:cf:0c:a8:52:36:60:08:15:1f:45:9e:13:c7: 58:f3:37:47:bb:1b:32:17:99:41:57:fb:5d:5a:88: 47:d4:b9:19:47:5a:46:2c:e7:d7:af:80:69:a5:57: 34:c3:09:c6:9a:b3:66:4c:7d:c5:78:79:34:0e:21: 0f:fd:07:e2:94:5b:1b:2b:41:83:d6:39:a7:c1:2f: a6:95:ff:1d:4f:02:c6:9e:d0:0b:5a:2d:b8:cd:82: 32:21:a8:47:1d:06:ed:8b:cb:22:f4:3d:95:36:51: ae:44:13:d4:43:9a:78:e7:f1:37:be:a3:27:41:d8: c7:a4:eb:c0:5e:5c:1b:16:ad:fd:88:23:2d:85:3e: c3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:88:5F:93:E5:FC:89:6F:23:06:D5:0D:24:3B:F6:8D:34:B0:05:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:77:06:d6:75:8c:f6:26:f6:72:dd:6f:62:fb:10:b8:f1:92: ce:45:c8:0c:49:80:ca:41:0f:b4:83:76:ab:68:27:f7:fa:26: cf:ad:f5:7e:67:ae:86:73:1b:18:d5:81:2a:8c:20:b2:5a:b1: 3c:60:85:f9:9b:07:c9:3e:e5:02:5b:55:d8:8a:bd:1e:6b:12: 54:1f:cf:98:73:16:1e:40:ce:f7:7b:b7:1f:f2:5e:e1:5d:65: 19:b7:83:5e:0c:90:40:74:05:e0:43:7d:96:1e:77:ed:9e:d6: d2:39:2f:cc:41:80:15:5a:6c:10:c3:45:fb:ce:30:13:e8:95: 71:b1:05:fc:7b:f0:24:d8:c3:6a:02:5d:73:50:09:7b:25:ff: 2f:5b:28:94:97:cd:3c:db:b1:a0:97:71:6c:86:75:1e:a8:fa: ee:f4:51:62:9e:23:e1:10:24:c7:05:be:e6:36:b6:78:61:1e: 05:27:95:9d:2f:56:25:ff:67:df:60:13:52:b9:13:f2:f6:c2: 07:35:52:4e:85:1f:24:53:5f:5e:40:10:11:59:6b:ed:86:be: 46:65:9e:a8:2a:80:14:6b:59:fa:3f:98:b4:c8:e0:d5:00:77: d6:f8:be:bc:27:b8:ef:07:8c:79:71:4c:31:29:8b:ee:65:0b: 1d:f9:e1:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CpPJH0+dEMB1GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjMwYTZhMjUtN2ExMy00YzVhLWFkZWQtZmQwODgwYjRhMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZILFXJupDQlCZPfLFNB4FmpjjR6FHRwapvj h9QVx/E4n2swI5NJRCJ/rdelJHGWZausbQzp0BqWc/xOkN47TtqecvnkpCo8l3qi RFVbaLy4BAgYIr+jACiE/gk65nEQosVYMojXGUOXZyBEClVmwdlhdsB1ptiERc8M qFI2YAgVH0WeE8dY8zdHuxsyF5lBV/tdWohH1LkZR1pGLOfXr4BppVc0wwnGmrNm TH3FeHk0DiEP/QfilFsbK0GD1jmnwS+mlf8dTwLGntALWi24zYIyIahHHQbti8si 9D2VNlGuRBPUQ5p45/E3vqMnQdjHpOvAXlwbFq39iCMthT7D+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqIX5Pl/IlvIwbVDSQ79o00sAXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmE3MGFlNjEtNGQxYy0z ZGJiLWEwNDYtMjI1Zjc2NTAwZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB3BtZ1jPYm9nLdb2L7ELjxks5FyAxJgMpBD7SDdqtoJ/f6Js+t9X5n roZzGxjVgSqMILJasTxghfmbB8k+5QJbVdiKvR5rElQfz5hzFh5Azvd7tx/yXuFd ZRm3g14MkEB0BeBDfZYed+2e1tI5L8xBgBVabBDDRfvOMBPolXGxBfx78CTYw2oC XXNQCXsl/y9bKJSXzTzbsaCXcWyGdR6o+u70UWKeI+EQJMcFvuY2tnhhHgUnlZ0v ViX/Z99gE1K5E/L2wgc1Uk6FHyRTX15AEBFZa+2GvkZlnqgqgBRrWfo/mLTI4NUA d9b4vrwnuO8HjHlxTDEpi+5lCx354Zo= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:54 2026 by rpki-client