$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa File: 68c427e0-a575-3b64-98f5-5f2c2b108936.roa (raw, json) Hash identifier: D1F0xOBFttC4QB9tJ/z/A4r30A+J7dpEgNvB1a0tS3U= Subject key identifier: B5:B7:F4:EF:96:EA:6B:0E:E9:DC:30:D7:87:90:A8:C8:B6:9A:C5:B2 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF56152B4C8EA36A8AA580 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 931 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:56:15:2b:4c:8e:a3:6a:8a:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=c5a50767-0c2b-4d82-881b-4bc1bbc0783d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:f7:62:1d:9c:62:93:1e:ab:f9:3e:32:15: 81:3c:0b:7b:f4:e2:a7:07:cc:11:bb:fb:97:9c:eb: 64:55:76:78:4d:1f:2d:c4:4a:89:aa:ff:26:fb:45: 80:56:d2:8d:b2:c7:7d:3e:93:a1:01:46:95:01:fd: 74:5d:c9:75:8e:bd:54:fa:8a:92:d0:8c:62:26:56: 22:7b:90:ca:37:01:bd:e6:09:a6:c7:60:ce:ce:d4: 83:ba:3f:6f:58:e4:16:28:8f:cd:fd:18:15:00:a2: fd:dc:3f:9e:d6:23:05:5d:aa:de:8a:46:53:e2:2b: 39:90:11:b8:44:2e:f2:a6:34:26:86:53:3b:4f:48: 88:b5:d1:dc:62:25:6d:63:84:d3:f1:9f:39:65:d1: 0a:76:db:c7:01:2f:28:80:bb:f3:ab:04:32:9c:f3: 25:f2:84:48:45:98:f2:84:72:b2:04:96:e6:11:62: 49:f1:21:47:0a:0f:49:b1:34:9b:5b:33:23:9b:38: 8b:cd:d7:a5:bf:a3:69:da:c0:4c:d0:a3:c9:3d:fc: b8:17:e7:da:0a:93:a7:ed:e4:6e:a8:27:2f:e0:ea: 5b:a4:2a:68:8a:a1:a8:50:9d:2e:f6:c1:19:9b:5f: 92:df:4d:72:14:d5:f8:74:34:a5:e4:59:c2:71:79: 96:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B7:F4:EF:96:EA:6B:0E:E9:DC:30:D7:87:90:A8:C8:B6:9A:C5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:73:c9:32:bc:74:16:e4:92:2f:27:67:04:21:24:ee:e5:41: e0:2d:21:0f:90:4b:00:c5:14:a3:47:fd:ff:25:4c:c3:1c:f5: 6d:25:bb:28:81:48:26:73:5a:38:04:9c:c7:96:a4:1e:9e:11: 4b:57:b1:c3:58:11:79:e8:fb:df:d7:a3:e6:fc:71:f2:6f:3b: 39:ee:0d:16:7b:c2:6d:f6:3b:45:6b:93:f8:0b:96:fb:82:dd: bb:02:3b:5e:7b:4c:49:85:53:8b:72:df:a0:9c:4a:21:d5:bd: 7b:3b:6a:91:68:2f:f0:c1:f0:36:40:c7:55:ec:42:59:8a:67: 03:f5:06:3a:45:38:70:0e:02:a7:9d:00:c2:3f:84:17:80:16: ef:5c:2c:87:ec:23:71:75:21:4a:a3:d0:da:1b:15:cb:4b:b2: 1b:a8:d2:0f:9d:a6:5e:a8:8b:ff:97:ed:f3:45:1e:ce:4d:28: 50:7c:2c:3d:b9:5b:2a:8c:ad:6c:2d:97:cf:7c:7b:bb:b2:c8: 7b:0a:ef:33:cd:1b:fc:49:0b:52:34:ed:62:61:3d:ce:b5:75: ac:d8:30:d6:25:4c:cc:02:1c:8f:0a:3b:47:c0:56:b8:42:67: 58:2b:2c:0c:37:62:cc:7e:1c:8b:d2:1c:af:4a:29:66:69:4d: bf:26:37:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1YVK0yOo2qKpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk YzVhNTA3NjctMGMyYi00ZDgyLTg4MWItNGJjMWJiYzA3ODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DH3Yh2cYpMeq/k+MhWBPAt79OKnB8wRu/uX nOtkVXZ4TR8txEqJqv8m+0WAVtKNssd9PpOhAUaVAf10Xcl1jr1U+oqS0IxiJlYi e5DKNwG95gmmx2DOztSDuj9vWOQWKI/N/RgVAKL93D+e1iMFXareikZT4is5kBG4 RC7ypjQmhlM7T0iItdHcYiVtY4TT8Z85ZdEKdtvHAS8ogLvzqwQynPMl8oRIRZjy hHKyBJbmEWJJ8SFHCg9JsTSbWzMjmziLzdelv6Np2sBM0KPJPfy4F+faCpOn7eRu qCcv4OpbpCpoiqGoUJ0u9sEZm1+S301yFNX4dDSl5FnCcXmW8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW39O+W6msO6dww14eQqMi2msWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjhjNDI3ZTAtYTU3NS0z YjY0LTk4ZjUtNWYyYzJiMTA4OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhzyTK8dBbkki8nZwQhJO7lQeAtIQ+QSwDFFKNH/f8lTMMc9W0luyiB SCZzWjgEnMeWpB6eEUtXscNYEXno+9/Xo+b8cfJvOznuDRZ7wm32O0Vrk/gLlvuC 3bsCO157TEmFU4ty36CcSiHVvXs7apFoL/DB8DZAx1XsQlmKZwP1BjpFOHAOAqed AMI/hBeAFu9cLIfsI3F1IUqj0NobFctLshuo0g+dpl6oi/+X7fNFHs5NKFB8LD25 WyqMrWwtl898e7uyyHsK7zPNG/xJC1I07WJhPc61dazYMNYlTMwCHI8KO0fAVrhC Z1grLAw3Ysx+HIvSHK9KKWZpTb8mNzA= -----END CERTIFICATE-----Generated at Fri Mar 13 10:59:40 2026 by rpki-client