$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/b7eee4a6-4a54-332c-b3cb-3a413d53d5dd.roa File: b7eee4a6-4a54-332c-b3cb-3a413d53d5dd.roa (raw, json) Hash identifier: SUp45dWVMFLzyvvcBLKqN+PkRw9KgWrSdKztN3gvNbY= Subject key identifier: 08:84:D7:4D:B8:A4:22:23:8C:25:29:BA:BA:46:BC:D8:90:FE:67:71 Certificate issuer: /CN=3d7a63c0-1781-4cd9-9b1e-477a557ae5db Certificate serial: 010D0C9F4328584DDB2631D12E75050F1724E180 Authority key identifier: 0D:49:B1:EB:DE:DB:C9:9D:41:E4:61:ED:88:D7:29:4A:97:33:35:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/b7eee4a6-4a54-332c-b3cb-3a413d53d5dd.roa Signing time: Sat 16 May 2026 20:00:34 +0000 ROA not before: Sat 16 May 2026 20:00:34 +0000 ROA not after: Fri 14 Aug 2026 20:00:34 +0000 asID: 40684 IP address blocks: 68.67.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:db:26:31:d1:2e:75:05:0f:17:24:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7a63c0-1781-4cd9-9b1e-477a557ae5db Validity Not Before: May 16 20:00:34 2026 GMT Not After : Aug 14 20:00:34 2026 GMT Subject: CN=d95e62c5-1b2d-4722-aa8a-b68fb5ce32bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:08:7d:f1:08:39:cf:8a:d2:7d:a3:c7:1e: c5:aa:ee:02:92:35:18:c8:6a:19:7b:c1:ff:fa:ec: c3:2e:8d:68:6b:1d:5d:05:97:ce:ae:63:42:81:b5: 00:ba:10:05:3a:59:b3:47:a7:b1:a2:dc:5f:66:01: a7:e6:44:10:51:53:f7:47:63:42:3e:08:93:e5:35: 4e:b3:ac:58:00:35:cc:df:bb:bc:22:09:a6:40:83: c1:a7:b5:3f:b4:3d:b0:7b:22:32:08:3b:9e:72:09: e1:8e:47:47:0b:86:51:c3:62:a2:36:d6:5c:b4:35: 66:4f:26:9d:96:12:b9:02:59:01:34:b8:fe:24:d1: a2:23:32:f6:ad:58:4c:9b:6d:39:d1:f0:0a:21:e7: ad:7d:9c:24:67:65:4a:46:6f:60:97:d9:26:63:62: 92:85:a2:1e:60:81:5e:e8:38:de:34:f8:cb:53:6a: 0b:05:36:5c:8f:00:5c:b2:18:cc:14:99:e7:8e:36: 65:cf:8e:28:e0:53:d8:6e:e8:7e:a6:85:b5:ee:ac: 7b:f5:f6:8f:81:e8:9a:49:d3:bd:ce:57:f2:77:4e: 86:ce:4a:80:25:80:7e:f9:0d:16:b9:22:ba:6b:ee: 3d:bc:0f:e5:a9:11:05:a2:1d:65:2f:0c:9e:07:a1: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:84:D7:4D:B8:A4:22:23:8C:25:29:BA:BA:46:BC:D8:90:FE:67:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/b7eee4a6-4a54-332c-b3cb-3a413d53d5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.crl X509v3 Authority Key Identifier: keyid:0D:49:B1:EB:DE:DB:C9:9D:41:E4:61:ED:88:D7:29:4A:97:33:35:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer sbgp-ipAddrBlock: critical IPv4: 68.67.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0c:98:80:33:61:65:b9:82:1e:ca:eb:b0:d3:f9:6e:d7:47: 30:45:50:47:3a:23:47:42:eb:a1:cf:ed:f2:2a:d6:a6:de:5e: c6:7b:8b:02:08:01:36:17:71:db:9e:76:ca:51:8d:60:0c:e6: f1:80:3f:97:d8:00:b3:f1:77:10:59:b8:96:93:68:40:f1:8a: a4:88:fa:89:98:7c:bb:49:6d:88:50:74:6f:24:95:c3:73:fb: a8:7c:bf:63:75:49:62:f7:ef:db:b0:f9:ed:82:e4:6b:a4:42: 28:e1:87:f3:54:80:b6:36:ad:03:be:f9:da:7c:be:43:26:a9: 8d:b1:1a:31:7d:0d:d2:8b:2a:b1:51:bd:8b:e1:d6:c0:91:21: 0a:80:33:35:2d:6c:25:dc:a4:cd:ee:4f:d3:ec:82:23:be:97: cb:8c:8b:65:67:a4:cb:ee:df:f7:d9:bd:09:ca:ec:b9:39:dc: 75:c9:d9:84:b1:c4:d7:be:8e:5b:92:a4:d1:91:51:cb:18:49: 9c:f3:0c:39:2d:f8:2c:d6:6c:64:8f:5b:b8:6b:01:eb:f7:63: 28:4f:60:24:6a:82:14:c8:79:72:84:48:fe:c2:af:29:29:33: 50:1d:1c:be:27:58:4d:d9:e3:71:c4:da:88:2a:5a:d7:5b:cf: 4b:6e:ed:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3bJjHRLnUFDxck4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3YTYzYzAtMTc4MS00Y2Q5LTliMWUtNDc3YTU1N2Fl NWRiMB4XDTI2MDUxNjIwMDAzNFoXDTI2MDgxNDIwMDAzNFowLzEtMCsGA1UEAxMk ZDk1ZTYyYzUtMWIyZC00NzIyLWFhOGEtYjY4ZmI1Y2UzMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAcIffEIOc+K0n2jxx7Fqu4CkjUYyGoZe8H/ +uzDLo1oax1dBZfOrmNCgbUAuhAFOlmzR6exotxfZgGn5kQQUVP3R2NCPgiT5TVO s6xYADXM37u8IgmmQIPBp7U/tD2weyIyCDuecgnhjkdHC4ZRw2KiNtZctDVmTyad lhK5AlkBNLj+JNGiIzL2rVhMm2050fAKIeetfZwkZ2VKRm9gl9kmY2KShaIeYIFe 6DjeNPjLU2oLBTZcjwBcshjMFJnnjjZlz44o4FPYbuh+poW17qx79faPgeiaSdO9 zlfyd06GzkqAJYB++Q0WuSK6a+49vA/lqREFoh1lLwyeB6HTwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiE1024pCIjjCUpurpGvNiQ/mdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZDdh NjNjMC0xNzgxLTRjZDktOWIxZS00NzdhNTU3YWU1ZGIvYjdlZWU0YTYtNGE1NC0z MzJjLWIzY2ItM2E0MTNkNTNkNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Q3YTYzYzAtMTc4MS00Y2Q5LTli MWUtNDc3YTU1N2FlNWRiLzNkN2E2M2MwLTE3ODEtNGNkOS05YjFlLTQ3N2E1NTdh ZTVkYi5jcmwwHwYDVR0jBBgwFoAUDUmx697byZ1B5GHtiNcpSpczNUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zZDdhNjNjMC0xNzgxLTRjZDktOWIxZS00Nzdh NTU3YWU1ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREN5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsMmIAzYWW5gh7K67DT+W7XRzBFUEc6I0dC66HP7fIq1qbeXsZ7iwII ATYXcduedspRjWAM5vGAP5fYALPxdxBZuJaTaEDxiqSI+omYfLtJbYhQdG8klcNz +6h8v2N1SWL379uw+e2C5GukQijhh/NUgLY2rQO++dp8vkMmqY2xGjF9DdKLKrFR vYvh1sCRIQqAMzUtbCXcpM3uT9PsgiO+l8uMi2VnpMvu3/fZvQnK7Lk53HXJ2YSx xNe+jluSpNGRUcsYSZzzDDkt+CzWbGSPW7hrAev3YyhPYCRqghTIeXKESP7Crykp M1AdHL4nWE3Z43HE2ogqWtdbz0tu7aA= -----END CERTIFICATE-----Generated at Sat Jun 6 10:48:43 2026 by rpki-client