$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a31d634-8055-3295-a56b-ea66de7f4117.roa File: 0a31d634-8055-3295-a56b-ea66de7f4117.roa (raw, json) Hash identifier: aKzNC9UNgICTc05PZQ9Yh5SXNVJ79gXs9LPTobJwrrc= Subject key identifier: 98:1E:A6:4B:12:08:9D:90:37:F5:59:D9:9C:49:63:B5:76:13:18:AE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D22BFAFE2FADF15C53C331A80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a31d634-8055-3295-a56b-ea66de7f4117.roa Signing time: Wed 11 Mar 2026 18:45:17 +0000 ROA not before: Wed 11 Mar 2026 18:45:17 +0000 ROA not after: Tue 09 Jun 2026 18:45:17 +0000 asID: 23473 IP address blocks: 68.180.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:bf:af:e2:fa:df:15:c5:3c:33:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 11 18:45:17 2026 GMT Not After : Jun 9 18:45:17 2026 GMT Subject: CN=b61f4a11-d267-44a7-81f2-8cdf63632293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:3a:d6:1c:d8:b6:c3:1b:c8:59:9c:e2:0b: e2:72:26:ec:c8:e4:dd:91:f2:b8:2d:e6:43:41:95: 8b:ab:88:a7:22:29:78:a1:23:59:56:01:36:f2:18: c4:42:7d:b9:6d:25:70:a6:71:34:67:37:33:ad:3c: ce:99:05:b3:84:54:e3:24:0a:e1:93:b7:61:71:ee: 6e:62:7b:d4:59:fa:f5:17:0c:e1:b8:b4:b8:6d:ef: 48:7e:ea:b9:9b:bd:16:6c:76:01:45:8f:b6:a7:9b: ae:49:c7:26:ed:3b:87:cf:f2:a0:4c:11:cb:d6:9b: d5:3f:0a:82:cf:48:0f:66:d5:b6:93:4e:02:dc:9a: 19:01:83:28:a0:18:35:d0:e2:62:39:8f:5c:c1:62: 89:13:db:5a:5c:46:a6:33:32:23:b8:b3:bd:a6:f6: d7:37:3b:c9:5b:d3:ac:ce:d9:cb:cc:c9:6c:2d:12: d7:b8:ea:a3:14:d5:ee:6f:15:31:af:90:b2:d3:a0: c2:45:0f:88:18:dc:11:38:00:00:f3:e6:68:db:3d: a7:2d:67:fe:a4:47:a4:d9:6a:74:08:c2:d2:ea:95: 83:14:5e:94:db:ae:4a:f4:4f:4e:d3:3e:5d:c5:15: 6d:e7:23:a2:ed:52:e3:55:24:bc:0a:ab:d7:d8:e0: 2a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1E:A6:4B:12:08:9D:90:37:F5:59:D9:9C:49:63:B5:76:13:18:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a31d634-8055-3295-a56b-ea66de7f4117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ab:5f:a4:a7:88:df:94:43:a3:15:f1:f9:57:4f:2f:2d:3b: 5d:87:dd:3f:cc:e8:f5:24:08:32:af:ca:18:23:cf:e4:dc:d4: d0:55:8f:bb:b3:b5:fe:be:94:55:19:ab:8a:45:4b:d5:3b:cf: 54:04:01:6f:01:fa:9c:bd:25:58:fd:df:e1:7a:e6:d3:f9:ce: 4d:49:61:6e:eb:4d:af:83:06:56:12:3e:11:7b:75:d4:01:40: ab:a9:c1:89:99:f7:b3:0a:46:98:de:56:a7:3e:8b:6b:14:f0: d3:6b:22:06:68:fc:c9:21:19:59:86:34:b8:fc:51:6f:b8:ac: 99:5a:64:de:88:43:b1:e5:8e:83:1a:7a:4c:f6:45:8c:07:2b: 4c:b8:71:ed:4e:05:f8:13:47:40:a1:f4:5f:98:f9:19:4d:d2: 0c:68:69:dd:b8:9c:60:1b:23:37:1b:a8:9c:49:57:2b:00:e4: ff:bb:73:44:26:94:a8:d0:7f:4b:10:d8:11:07:8c:12:88:2c: be:4c:fc:dd:71:ff:7c:97:34:84:4c:b9:a4:81:1e:d7:2a:b1: 3d:8f:d3:72:e1:52:df:ca:9e:54:a2:05:94:fc:29:5d:08:5f: 3d:50:6c:ba:6e:86:fe:6f:84:34:05:d1:bd:88:b8:e6:c4:1a: f5:37:d9:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0iv6/i+t8VxTwzGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMTE4NDUxN1oXDTI2MDYwOTE4NDUxN1owLzEtMCsGA1UEAxMk YjYxZjRhMTEtZDI2Ny00NGE3LTgxZjItOGNkZjYzNjMyMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dU61hzYtsMbyFmc4gvicibsyOTdkfK4LeZD QZWLq4inIil4oSNZVgE28hjEQn25bSVwpnE0ZzczrTzOmQWzhFTjJArhk7dhce5u YnvUWfr1FwzhuLS4be9Ifuq5m70WbHYBRY+2p5uuSccm7TuHz/KgTBHL1pvVPwqC z0gPZtW2k04C3JoZAYMooBg10OJiOY9cwWKJE9taXEamMzIjuLO9pvbXNzvJW9Os ztnLzMlsLRLXuOqjFNXubxUxr5Cy06DCRQ+IGNwROAAA8+Zo2z2nLWf+pEek2Wp0 CMLS6pWDFF6U265K9E9O0z5dxRVt5yOi7VLjVSS8CqvX2OAqpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgepksSCJ2QN/VZ2ZxJY7V2ExiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMGEzMWQ2MzQtODA1NS0z Mjk1LWE1NmItZWE2NmRlN2Y0MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmrX6SniN+UQ6MV8flXTy8tO12H3T/M6PUkCDKvyhgjz+Tc1NBVj7uz tf6+lFUZq4pFS9U7z1QEAW8B+py9JVj93+F65tP5zk1JYW7rTa+DBlYSPhF7ddQB QKupwYmZ97MKRpjeVqc+i2sU8NNrIgZo/MkhGVmGNLj8UW+4rJlaZN6IQ7HljoMa ekz2RYwHK0y4ce1OBfgTR0Ch9F+Y+RlN0gxoad24nGAbIzcbqJxJVysA5P+7c0Qm lKjQf0sQ2BEHjBKILL5M/N1x/3yXNIRMuaSBHtcqsT2P03LhUt/KnlSiBZT8KV0I Xz1QbLpuhv5vhDQF0b2IuObEGvU32X8= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:15 2026 by rpki-client