$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9baca868-3564-34a9-8a80-07b6ed51be15.roa File: 9baca868-3564-34a9-8a80-07b6ed51be15.roa (raw, json) Hash identifier: NMxhelHBuXaLsSQJx0xhDqy2u3jj282jiSJXUpptPxE= Subject key identifier: 60:20:F3:E3:D7:1E:90:BD:20:26:8B:98:3D:AC:FA:FF:55:6D:CE:74 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D1B19FE4DC755B6EB87E64DC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9baca868-3564-34a9-8a80-07b6ed51be15.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 852 IP address blocks: 68.182.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:fe:4d:c7:55:b6:eb:87:e6:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=52008c9d-bb49-46f1-9c0f-294fc4255d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:84:ed:bb:1a:21:1f:6a:5f:fe:fc:c8:a4: 25:cc:f8:e9:18:f8:8e:e7:1f:4d:fe:53:da:d7:77: 28:13:84:e6:a6:59:d5:cd:f7:a0:95:e2:db:27:dc: e7:01:a5:e3:6f:40:6f:7d:00:e6:91:19:54:fa:a4: 83:cf:28:a4:e4:fa:97:b3:f7:f7:2b:2a:b1:42:2d: 5a:a0:6f:8e:22:28:71:8b:b9:40:b1:67:9d:bf:46: 93:98:d0:d8:39:94:bf:1c:cb:cc:ff:bc:68:f4:e5: 54:f2:21:81:8a:47:b7:cf:24:a0:14:ac:f6:73:28: f1:14:80:66:0a:f5:59:b5:d1:5d:d2:87:ee:87:8a: 3d:21:d2:53:75:ba:cb:33:82:0b:c1:c7:c9:ec:fd: 06:3a:13:50:6c:47:65:e8:b5:d0:6a:a9:cc:db:86: 67:a0:c3:00:3a:3b:f0:f2:16:71:8a:7c:25:2f:ed: d0:bf:42:be:f1:99:3a:24:28:3d:37:97:bb:a2:20: d2:9e:5e:76:9a:ba:f0:39:9d:00:d2:60:d6:46:1b: 4b:fb:6b:61:08:fe:5d:e5:46:5d:c8:5f:4d:eb:66: 80:79:36:bc:24:90:05:ed:0d:7f:a8:3d:ad:b6:2c: e4:e3:43:4d:a6:14:43:12:80:6d:6c:3a:2a:9e:93: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:20:F3:E3:D7:1E:90:BD:20:26:8B:98:3D:AC:FA:FF:55:6D:CE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9baca868-3564-34a9-8a80-07b6ed51be15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:ef:ee:98:1d:75:d5:b0:a5:7d:00:1a:03:bf:25:33:26:57: 26:1d:99:5d:43:2a:ad:d3:aa:04:2b:4f:af:7f:aa:ed:9d:45: 59:3e:0b:0e:78:f7:7a:b0:bb:1c:da:92:0b:93:44:7e:38:55: 5a:f1:c5:91:3c:80:5e:18:99:1d:fb:d5:07:5f:a3:be:75:7c: 08:50:3f:9b:5d:9d:3f:d2:81:87:36:62:db:ea:f9:8e:5e:03: 14:d7:a1:45:8b:b5:69:28:99:16:02:b9:4d:b7:df:74:86:f0: bc:a1:5e:11:12:25:2f:98:4f:f5:19:e9:5c:9b:7e:b9:2d:88: 2b:9d:ac:a7:59:78:68:c7:2e:b1:77:ce:f6:d6:6c:3f:e7:53: 0c:e4:66:02:ea:f8:70:85:94:aa:e2:29:fd:65:09:0a:bf:4f: 26:a3:a5:69:61:77:8f:f7:77:76:60:68:ed:f8:c2:b9:df:13: 8a:f6:84:4b:c0:3f:e2:37:cf:89:ef:dd:5e:5e:20:f2:bc:cb: 87:9e:26:4f:d7:3d:44:1c:dd:a7:86:50:f2:87:2e:2c:5d:61: 7b:7d:61:0c:51:31:62:56:50:f7:c1:da:49:ee:bf:b9:0e:a0: 9f:7d:73:fb:35:58:a9:7a:0a:97:68:05:58:12:7d:72:33:6b: 0e:9f:c6:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGf5Nx1W264fmTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NTIwMDhjOWQtYmI0OS00NmYxLTljMGYtMjk0ZmM0MjU1ZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4iE7bsaIR9qX/78yKQlzPjpGPiO5x9N/lPa 13coE4TmplnVzfegleLbJ9znAaXjb0BvfQDmkRlU+qSDzyik5PqXs/f3KyqxQi1a oG+OIihxi7lAsWedv0aTmNDYOZS/HMvM/7xo9OVU8iGBike3zySgFKz2cyjxFIBm CvVZtdFd0ofuh4o9IdJTdbrLM4ILwcfJ7P0GOhNQbEdl6LXQaqnM24ZnoMMAOjvw 8hZxinwlL+3Qv0K+8Zk6JCg9N5e7oiDSnl52mrrwOZ0A0mDWRhtL+2thCP5d5UZd yF9N62aAeTa8JJAF7Q1/qD2ttizk40NNphRDEoBtbDoqnpOclwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAg8+PXHpC9ICaLmD2s+v9Vbc50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWJhY2E4NjgtMzU2NC0z NGE5LThhODAtMDdiNmVkNTFiZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRLaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrv7pgdddWwpX0AGgO/JTMmVyYdmV1DKq3TqgQrT69/qu2dRVk+Cw54 93qwuxzakguTRH44VVrxxZE8gF4YmR371Qdfo751fAhQP5tdnT/SgYc2Ytvq+Y5e AxTXoUWLtWkomRYCuU2333SG8LyhXhESJS+YT/UZ6VybfrktiCudrKdZeGjHLrF3 zvbWbD/nUwzkZgLq+HCFlKriKf1lCQq/TyajpWlhd4/3d3ZgaO34wrnfE4r2hEvA P+I3z4nv3V5eIPK8y4eeJk/XPUQc3aeGUPKHLixdYXt9YQxRMWJWUPfB2knuv7kO oJ99c/s1WKl6CpdoBVgSfXIzaw6fxlg= -----END CERTIFICATE-----Generated at Fri Mar 13 23:55:13 2026 by rpki-client