$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa File: db86d00a-9156-38fa-a2ec-a5019abb2c87.roa (raw, json) Hash identifier: GaAS5BpvrcwHEBoB4N9BfLelL9bxsoIABl20ohP2soM= Subject key identifier: 98:83:16:31:72:DC:38:49:3C:BF:85:23:8E:CA:E6:82:35:68:7D:D7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E6519A19C2DF32E9FEC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 208.76.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e6:51:9a:19:c2:df:32:e9:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4124dddf-1c9f-46b7-8ac5-14984eebaefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:9b:dc:46:40:8f:2b:1b:65:02:30:da:02: 82:59:57:0e:d1:17:ed:c9:f9:c3:f1:17:8f:32:f9: e8:33:ea:f6:8c:d1:4b:a6:f5:b2:ca:72:aa:41:8d: 57:a8:1d:ad:22:fd:c8:9d:e2:0c:0f:bc:65:d6:d9: 1c:d0:a3:2a:97:83:f8:b7:02:15:36:3e:fe:8b:d9: 04:fd:61:dd:fd:34:3d:c3:03:3b:63:c0:12:47:12: 3c:20:70:58:ad:87:37:fb:75:41:4b:65:eb:cb:df: d4:6e:29:60:db:53:ce:db:73:3e:39:0c:81:f1:72: ab:83:32:54:8c:8c:ab:a3:ca:a2:33:f7:d6:21:6c: a0:03:a6:62:e0:38:3a:63:ba:80:82:76:af:21:db: a0:10:36:cf:64:91:b6:bd:8b:e2:89:65:5a:8f:36: 97:d3:8a:e8:70:01:2a:b5:7e:bc:65:e6:82:cc:60: b5:bc:19:f1:83:df:80:0b:88:d7:a4:3f:2a:c3:41: 9e:98:09:29:26:1e:a7:0b:91:08:a6:d0:0f:38:c2: 9d:5e:12:50:e4:42:87:47:93:8f:1a:72:b8:30:31: a1:4e:a7:0e:e0:67:0f:82:bc:3d:c4:ae:eb:73:80: 4a:8e:bf:43:25:98:0a:93:0f:df:45:fc:e5:b1:f8: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:83:16:31:72:DC:38:49:3C:BF:85:23:8E:CA:E6:82:35:68:7D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ca:23:b1:cb:2d:14:67:4b:a9:3f:dc:8f:99:d1:22:e0:e1: 69:a8:f7:be:6a:24:7c:8f:44:3e:6b:60:e4:4a:3d:4f:eb:2b: 15:25:6b:6d:f0:ab:c9:7f:40:fa:df:f6:cb:2a:fc:8c:0b:2e: 15:aa:90:7b:71:8b:da:1c:65:50:ee:70:f7:3a:ae:c0:6c:a3: 86:17:11:0b:0d:23:85:11:7a:27:41:23:4c:2b:4e:58:5b:cd: b4:35:62:9e:02:2c:33:7b:25:f3:36:91:1e:43:a9:70:16:b4: 47:8f:55:48:dd:a5:c0:2f:9e:37:94:39:25:7f:6a:8a:ff:96: 3f:b9:39:4b:06:24:26:ab:4f:a7:2c:75:ea:6a:eb:d2:89:1e: 3c:bb:0f:e5:71:f2:50:b2:65:88:1f:02:f9:09:b5:6c:ec:44: 1f:b4:d8:d9:de:3b:f3:97:85:7d:77:ec:7c:d5:c3:44:7e:24: 3f:0c:22:72:e0:ea:57:47:ab:e5:cb:96:19:f3:5f:80:fc:72: e3:a7:b6:09:cd:af:64:79:90:82:6c:74:b5:5b:c3:79:79:e8: f7:d1:be:e2:58:ea:d9:66:89:57:73:06:8a:fa:f7:18:aa:b5: c6:a9:d2:bd:b5:59:b6:01:73:48:90:9b:c8:93:71:80:46:ec: a1:96:96:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OZRmhnC3zLp/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDEyNGRkZGYtMWM5Zi00NmI3LThhYzUtMTQ5ODRlZWJhZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst+b3EZAjysbZQIw2gKCWVcO0RftyfnD8ReP MvnoM+r2jNFLpvWyynKqQY1XqB2tIv3IneIMD7xl1tkc0KMql4P4twIVNj7+i9kE /WHd/TQ9wwM7Y8ASRxI8IHBYrYc3+3VBS2Xry9/Ubilg21PO23M+OQyB8XKrgzJU jIyro8qiM/fWIWygA6Zi4Dg6Y7qAgnavIdugEDbPZJG2vYviiWVajzaX04rocAEq tX68ZeaCzGC1vBnxg9+AC4jXpD8qw0GemAkpJh6nC5EIptAPOMKdXhJQ5EKHR5OP GnK4MDGhTqcO4GcPgrw9xK7rc4BKjr9DJZgKkw/fRfzlsfh9RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiDFjFy3DhJPL+FI47K5oI1aH3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGI4NmQwMGEtOTE1Ni0z OGZhLWEyZWMtYTUwMTlhYmIyYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvKI7HLLRRnS6k/3I+Z0SLg4Wmo975qJHyPRD5rYORKPU/rKxUla23w q8l/QPrf9ssq/IwLLhWqkHtxi9ocZVDucPc6rsBso4YXEQsNI4UReidBI0wrTlhb zbQ1Yp4CLDN7JfM2kR5DqXAWtEePVUjdpcAvnjeUOSV/aor/lj+5OUsGJCarT6cs depq69KJHjy7D+Vx8lCyZYgfAvkJtWzsRB+02NneO/OXhX137HzVw0R+JD8MInLg 6ldHq+XLlhnzX4D8cuOntgnNr2R5kIJsdLVbw3l56PfRvuJY6tlmiVdzBor69xiq tcap0r21WbYBc0iQm8iTcYBG7KGWlqs= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:37 2026 by rpki-client