$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa File: f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa (raw, json) Hash identifier: 9lMc3nCYPdmhJ87fkiRBq1toapJPiwwXxS3EuhXrgRc= Subject key identifier: 76:B4:2E:0A:74:CB:B8:BA:F8:6B:29:3C:02:11:18:2C:EA:B4:52:BD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E3A8BB1114AA53B0D700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 208.68.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e3:a8:bb:11:14:aa:53:b0:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=da20d390-a5ed-4474-9b96-659258f765d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a8:36:2e:3d:8c:fa:d8:42:89:d7:86:95:78: 63:28:cd:37:82:ef:f3:1b:d2:ca:bb:c9:35:f4:a3: a8:1b:cb:ea:09:ea:33:41:d1:11:aa:38:17:c4:6d: 6f:f5:2c:23:37:50:ec:17:00:d8:aa:eb:04:77:5c: 98:03:7e:9c:03:7e:da:54:c5:b2:e4:c7:31:ae:d0: 32:05:d2:e7:f1:7a:25:28:74:c0:1b:46:e4:9a:2b: 2f:f3:93:6f:fe:02:18:3e:d2:2e:42:3b:ab:fe:cd: e7:46:d8:69:1e:fe:a1:7f:85:30:17:0b:e3:e4:62: ff:14:70:7b:69:2b:87:4a:9a:cf:09:dc:77:64:22: 23:8c:09:23:9d:f4:95:0d:92:8b:65:1f:6b:4f:f9: 10:21:d4:18:a9:2b:06:e0:9b:43:64:94:26:30:2d: 5d:be:99:70:c3:9d:79:b4:4f:a0:41:56:71:f2:cc: 28:74:75:cd:57:54:0d:2d:24:ee:f1:d7:d0:02:ad: 57:08:0e:75:f4:c0:72:98:e8:eb:53:f1:c6:4a:59: 65:ad:33:e8:3e:e6:b9:38:f7:ea:d8:be:22:b4:09: 6d:b3:66:50:d6:32:a8:6d:49:66:73:42:2d:93:b0: 64:00:27:17:10:43:32:60:fa:95:6c:18:9e:90:e0: 4d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B4:2E:0A:74:CB:B8:BA:F8:6B:29:3C:02:11:18:2C:EA:B4:52:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d1:66:eb:0c:11:17:a8:7f:77:3d:81:d7:32:54:2e:2a:ac: 8c:08:14:4d:65:3a:95:ef:cc:9c:39:2f:11:27:22:08:37:d8: e7:4c:5b:2d:96:8c:ca:28:1a:9b:ec:40:e9:eb:2e:e5:1f:5c: da:00:e0:1a:31:48:9c:b0:ee:63:2a:fd:2e:95:24:27:00:3b: e7:7e:56:c5:77:35:b2:3f:10:b6:40:e2:2f:0b:98:f3:07:52: 87:31:3d:90:29:10:d7:ef:d6:18:79:2e:69:5c:64:07:d0:26: 59:25:f2:fa:a1:7a:57:2d:6b:95:c2:99:eb:ae:b8:37:42:d4: f1:33:0b:06:70:1b:91:44:0a:59:5c:09:11:d6:78:04:af:3d: 00:f5:f8:44:86:99:b4:01:a3:c9:01:aa:88:5e:33:0d:a8:48: 41:60:ff:6f:97:85:cd:8a:27:c2:73:08:a7:53:c6:71:9c:c7: 52:d9:99:02:c8:52:df:44:5e:54:5d:99:c1:06:6f:d3:5d:04: 40:d5:d1:8c:11:d7:02:fa:c9:95:f4:12:06:75:95:70:fc:4a: 41:46:a1:46:d6:21:d8:ae:fb:26:b4:37:ca:ee:68:69:53:1b: 20:c3:fc:5f:d2:69:71:f2:0c:8a:a4:32:83:b1:d3:06:80:4e: 36:0e:ac:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OOouxEUqlOw1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGEyMGQzOTAtYTVlZC00NDc0LTliOTYtNjU5MjU4Zjc2NWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqg2Lj2M+thCideGlXhjKM03gu/zG9LKu8k1 9KOoG8vqCeozQdERqjgXxG1v9SwjN1DsFwDYqusEd1yYA36cA37aVMWy5McxrtAy BdLn8XolKHTAG0bkmisv85Nv/gIYPtIuQjur/s3nRthpHv6hf4UwFwvj5GL/FHB7 aSuHSprPCdx3ZCIjjAkjnfSVDZKLZR9rT/kQIdQYqSsG4JtDZJQmMC1dvplww515 tE+gQVZx8swodHXNV1QNLSTu8dfQAq1XCA519MBymOjrU/HGSlllrTPoPua5OPfq 2L4itAlts2ZQ1jKobUlmc0Itk7BkACcXEEMyYPqVbBiekOBNJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa0Lgp0y7i6+GspPAIRGCzqtFK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjRhNmI4NzgtMTRiNy0z M2RkLWIxZTAtZDNiMjM3OTg3ZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELRZusMEReof3c9gdcyVC4qrIwIFE1lOpXvzJw5LxEnIgg32OdMWy2W jMooGpvsQOnrLuUfXNoA4BoxSJyw7mMq/S6VJCcAO+d+VsV3NbI/ELZA4i8LmPMH UocxPZApENfv1hh5LmlcZAfQJlkl8vqhelcta5XCmeuuuDdC1PEzCwZwG5FECllc CRHWeASvPQD1+ESGmbQBo8kBqoheMw2oSEFg/2+Xhc2KJ8JzCKdTxnGcx1LZmQLI Ut9EXlRdmcEGb9NdBEDV0YwR1wL6yZX0EgZ1lXD8SkFGoUbWIdiu+ya0N8ruaGlT GyDD/F/SaXHyDIqkMoOx0waATjYOrKA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:30 2026 by rpki-client