$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa File: babed18c-2177-38a5-9603-73cb0b55a6ec.roa (raw, json) Hash identifier: zNBjxPzr17QpUvQcfsZoHjFdA0cF9hFPFUawiZRHL3M= Subject key identifier: 81:E8:A6:FD:12:96:75:70:1E:66:EC:62:61:B7:5A:69:EB:36:6F:32 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584D52434FB7FF4C167EEB530C00 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 11650 IP address blocks: 68.235.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:4f:b7:ff:4c:16:7e:eb:53:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=66c37eb8-7251-427d-bcad-cc9a314a04da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:56:99:a9:35:29:71:10:84:1d:9f:29:85: 10:62:56:e8:b8:b1:eb:c5:9d:bb:83:b8:6a:ba:7c: 7d:18:dd:9f:af:56:04:cf:a9:84:05:ee:b5:a6:dc: 8f:3b:79:47:d1:20:27:46:9e:65:fe:6d:c1:92:01: 80:88:52:3a:41:35:12:4d:1d:e3:75:22:8e:8f:ce: 8b:2a:96:a8:fe:97:e9:b2:d2:b1:db:51:1a:4b:06: 66:1a:8c:33:fa:f0:5d:78:e0:c0:51:dc:a7:f9:8d: a4:c7:7d:a4:b4:e4:77:e9:73:b8:bb:55:27:29:15: 0f:04:91:aa:6d:f0:ac:07:04:56:5c:e8:10:5c:60: 4c:3a:31:d8:0a:5a:e4:ae:c5:1f:fa:fb:3b:15:0a: cf:55:f7:ea:d7:85:eb:cc:b9:82:36:e4:fc:61:43: ed:88:fe:47:0a:49:a0:54:ac:c3:78:4a:71:05:44: 67:e8:ee:0d:d8:0b:0c:08:12:04:9a:b3:fd:2e:da: 95:dc:62:bb:0a:7d:ea:11:8a:99:cf:6c:61:5f:f6: 30:98:f1:ff:ad:43:15:d1:b7:b3:35:43:1e:47:10: 77:19:0e:80:36:5c:fe:06:29:c4:58:a5:7e:71:4e: 7f:b1:19:e2:3a:fb:ad:22:af:4b:20:61:75:3a:53: 84:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E8:A6:FD:12:96:75:70:1E:66:EC:62:61:B7:5A:69:EB:36:6F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/babed18c-2177-38a5-9603-73cb0b55a6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 68.235.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:d8:84:84:64:00:1b:56:07:87:c8:a8:aa:cd:ea:a4:75:c0: 61:4c:db:14:c0:6a:06:92:c7:61:ff:c6:f5:8d:e0:c8:ab:3a: dd:f4:5b:08:53:ac:fd:66:d0:40:5c:a2:b2:13:e3:81:f5:ad: af:9f:c0:b3:73:a5:5e:40:f1:cf:bd:d8:1e:50:9a:3f:ef:01: a4:b4:12:98:6e:cf:5e:c3:ce:34:72:3f:06:c7:27:34:ba:62: 4e:0b:d3:d1:7e:6d:fd:bb:df:04:9a:00:50:61:c0:34:ea:28: ee:6e:67:6a:e9:1e:f4:1a:91:13:0a:d3:75:7e:1e:b9:bb:8b: 64:6c:b2:c7:87:27:17:22:2d:73:bc:8e:fb:60:7a:9b:74:57: 30:14:b6:69:11:88:a0:69:c5:24:c6:15:bb:86:37:81:23:5a: 4d:df:80:50:a4:f5:2f:c0:f2:14:e9:b4:fc:db:34:8f:1b:c5: 46:68:42:49:96:68:5c:5a:1d:c8:9d:20:94:cc:99:00:92:50: 77:77:b4:46:7d:ad:9b:69:cf:f0:a7:66:30:1a:70:4f:79:d5: 21:33:ec:e2:1c:be:8f:54:56:1c:bd:d4:dc:d6:07:48:01:84: bc:bc:db:43:2c:33:d5:e5:bb:80:34:ea:c2:ac:ef:07:29:8d: 7a:a0:07:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0+3/0wWfutTDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NjZjMzdlYjgtNzI1MS00MjdkLWJjYWQtY2M5YTMxNGEwNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR9Wmak1KXEQhB2fKYUQYlbouLHrxZ27g7hq unx9GN2fr1YEz6mEBe61ptyPO3lH0SAnRp5l/m3BkgGAiFI6QTUSTR3jdSKOj86L Kpao/pfpstKx21EaSwZmGowz+vBdeODAUdyn+Y2kx32ktOR36XO4u1UnKRUPBJGq bfCsBwRWXOgQXGBMOjHYClrkrsUf+vs7FQrPVffq14XrzLmCNuT8YUPtiP5HCkmg VKzDeEpxBURn6O4N2AsMCBIEmrP9LtqV3GK7Cn3qEYqZz2xhX/YwmPH/rUMV0bez NUMeRxB3GQ6ANlz+BinEWKV+cU5/sRniOvutIq9LIGF1OlOEWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHopv0SlnVwHmbsYmG3WmnrNm8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvYmFiZWQxOGMtMjE3Ny0z OGE1LTk2MDMtNzNjYjBiNTVhNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFROuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7YhIRkABtWB4fIqKrN6qR1wGFM2xTAagaSx2H/xvWN4MirOt30WwhT rP1m0EBcorIT44H1ra+fwLNzpV5A8c+92B5Qmj/vAaS0Ephuz17DzjRyPwbHJzS6 Yk4L09F+bf273wSaAFBhwDTqKO5uZ2rpHvQakRMK03V+Hrm7i2RssseHJxciLXO8 jvtgept0VzAUtmkRiKBpxSTGFbuGN4EjWk3fgFCk9S/A8hTptPzbNI8bxUZoQkmW aFxaHcidIJTMmQCSUHd3tEZ9rZtpz/CnZjAacE951SEz7OIcvo9UVhy91NzWB0gB hLy820MsM9Xlu4A06sKs7wcpjXqgBxg= -----END CERTIFICATE-----Generated at Fri Apr 3 17:58:02 2026 by rpki-client