$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa File: 8d723720-c1b1-3ded-94bb-35dc56996c9f.roa (raw, json) Hash identifier: KpC4Xlig0Gp98lbnenHPOYLf/CuX8aq+Gs9dt1yY/ww= Subject key identifier: A4:2E:5C:4A:02:25:EF:57:8F:93:28:76:4D:38:C3:AB:72:5F:92:8D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02E37533309A3547E6380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 208.76.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2e:37:53:33:09:a3:54:7e:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=696e30ec-6c0b-4f40-a749-af86379a60bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:52:30:07:c8:de:d5:88:7d:b4:f4:24:be:a9: c4:66:08:2e:89:7a:70:36:68:5b:51:a6:72:bd:da: e6:a3:9e:ea:eb:7d:be:99:e4:e0:90:1e:72:b8:af: f3:07:18:02:57:c4:7b:17:3a:79:47:a9:7b:26:b8: bc:be:e4:6e:7e:36:4f:ee:9c:9b:c7:85:53:39:fe: 78:5c:39:73:e9:a1:88:ca:2c:f5:25:13:85:4f:4b: d9:4c:64:cd:b0:40:3d:8c:6e:25:20:d0:22:a1:25: da:48:dc:0d:58:58:c4:c0:58:48:b3:ff:80:02:9a: 43:3c:c1:04:49:5b:81:62:f6:c6:41:be:73:ef:0a: 3c:68:34:22:25:be:54:26:43:ef:60:de:32:b3:eb: ad:65:f2:96:3d:c1:54:5a:74:02:b2:e4:98:7d:69: b1:9d:07:96:ba:32:45:6f:05:f3:9e:33:9d:75:19: 06:f7:f9:1d:66:70:3d:81:4f:25:57:90:0b:60:8e: 10:89:a4:8a:0b:14:7f:bc:b0:07:99:fc:7e:99:69: 2b:c9:22:5e:7e:2a:9d:92:d1:66:78:ea:60:59:02: 3b:2d:99:fa:54:3b:a4:71:d4:b0:50:03:a5:75:4f: 64:6a:fc:0e:b9:0e:ed:37:d5:cd:3a:23:76:7b:49: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:5C:4A:02:25:EF:57:8F:93:28:76:4D:38:C3:AB:72:5F:92:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:68:68:48:6f:25:ae:58:29:06:2f:47:c2:42:78:55:26:6e: a3:a2:11:e8:2b:27:32:cf:d1:6b:a0:47:ba:63:30:01:72:55: 04:6d:8f:ac:65:f1:6f:44:ae:f3:06:8e:b8:2d:f9:b9:40:94: ab:8c:25:64:b3:b3:a0:fd:33:81:c1:c1:14:8b:5d:38:1a:90: 6e:ea:a6:7b:75:f3:19:dd:6a:fd:b3:31:62:e0:3b:2f:8a:5d: 1a:85:98:25:f7:a3:0f:09:55:0a:4b:84:10:bf:6b:03:d0:26: 5c:d1:9a:f6:7c:97:14:ea:96:31:21:1d:fa:1f:9a:f5:61:a4: 15:29:2a:c7:29:ba:b0:6b:cc:15:1e:52:f4:48:71:c7:fe:62: a1:6f:91:7e:e2:f9:2a:c7:5e:a2:65:60:18:80:ad:48:39:85: 8e:b2:61:99:97:f4:9c:c9:4b:b4:1f:b5:9e:8c:46:9a:c9:94: ef:ee:4d:0a:54:2f:42:0d:2a:59:81:b6:17:0c:09:80:dc:e4: da:f6:1c:f1:b3:f3:e8:63:12:d4:aa:54:42:98:7e:6c:24:5c: 6b:68:56:b8:84:06:6b:71:11:02:68:08:9a:34:72:47:0f:37: 6b:76:1a:81:5a:31:07:fd:1b:fa:31:13:91:20:d1:1d:db:88: a4:56:47:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4C43UzMJo1R+Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Njk2ZTMwZWMtNmMwYi00ZjQwLWE3NDktYWY4NjM3OWE2MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1IwB8je1Yh9tPQkvqnEZgguiXpwNmhbUaZy vdrmo57q632+meTgkB5yuK/zBxgCV8R7Fzp5R6l7Jri8vuRufjZP7pybx4VTOf54 XDlz6aGIyiz1JROFT0vZTGTNsEA9jG4lINAioSXaSNwNWFjEwFhIs/+AAppDPMEE SVuBYvbGQb5z7wo8aDQiJb5UJkPvYN4ys+utZfKWPcFUWnQCsuSYfWmxnQeWujJF bwXznjOddRkG9/kdZnA9gU8lV5ALYI4QiaSKCxR/vLAHmfx+mWkrySJefiqdktFm eOpgWQI7LZn6VDukcdSwUAOldU9kavwOuQ7tN9XNOiN2e0mRoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQuXEoCJe9Xj5Modk04w6tyX5KNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGQ3MjM3MjAtYzFiMS0z ZGVkLTk0YmItMzVkYzU2OTk2YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhoaEhvJa5YKQYvR8JCeFUmbqOiEegrJzLP0WugR7pjMAFyVQRtj6xl 8W9ErvMGjrgt+blAlKuMJWSzs6D9M4HBwRSLXTgakG7qpnt18xndav2zMWLgOy+K XRqFmCX3ow8JVQpLhBC/awPQJlzRmvZ8lxTqljEhHfofmvVhpBUpKscpurBrzBUe UvRIccf+YqFvkX7i+SrHXqJlYBiArUg5hY6yYZmX9JzJS7QftZ6MRprJlO/uTQpU L0INKlmBthcMCYDc5Nr2HPGz8+hjEtSqVEKYfmwkXGtoVriEBmtxEQJoCJo0ckcP N2t2GoFaMQf9G/oxE5Eg0R3biKRWR2w= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:37 2026 by rpki-client