$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/68bfda88-b255-3f63-9849-56b4f34fd59f.roa File: 68bfda88-b255-3f63-9849-56b4f34fd59f.roa (raw, json) Hash identifier: OI6e739mB9zvX9z04eJXBVJS/kbIurkFmzcslQs2X9o= Subject key identifier: 42:A5:39:27:EB:35:28:BE:47:FB:29:39:61:84:93:BA:EB:FE:EE:45 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584D359FFDE8AEA5CAB6A72B9840 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/68bfda88-b255-3f63-9849-56b4f34fd59f.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 212238 IP address blocks: 198.145.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:fd:e8:ae:a5:ca:b6:a7:2b:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=655a065f-18a6-4078-9b40-31a2228962f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:e1:76:79:bd:7e:19:d2:a3:e8:f9:f2:c6: f4:de:66:c3:46:23:7f:4c:0e:10:de:70:49:aa:12: 08:95:48:fc:3a:60:6c:6d:e5:37:f6:56:98:2b:51: 9b:c8:39:6b:bc:89:26:a9:86:00:77:51:e5:6b:3c: 23:2c:fa:14:34:13:af:ea:36:49:81:ee:fc:1a:4a: a7:97:99:66:2b:e7:ce:78:66:31:2d:3d:c1:2c:f4: 38:9c:cc:60:8e:1d:82:01:7c:e3:af:05:ad:09:2a: 85:2a:ad:63:6e:48:f3:76:14:d5:9d:52:db:37:a5: 30:0b:48:6a:39:cd:d4:fc:e2:63:ce:6f:f2:ef:5e: 32:b9:3a:99:5f:25:0f:f2:c0:6e:8b:35:fd:c4:30: c3:e5:8c:b7:2f:ca:1a:a1:28:af:9b:6b:ba:a4:e9: d7:88:fe:d6:35:69:0d:af:68:8c:82:a0:fe:ca:09: f7:2d:d9:8a:a1:09:72:70:e0:7d:4a:4a:f8:3c:2b: 59:59:98:f4:fb:e0:b2:e6:f5:7c:03:3d:d6:3f:d1: a9:d9:05:8e:35:fa:2d:f7:ac:be:5e:39:58:43:de: a0:f9:8c:f5:21:d3:67:c1:5f:66:69:fd:96:9e:d2: 26:05:62:bc:4f:86:0b:d3:a9:44:03:11:2d:8b:42: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:39:27:EB:35:28:BE:47:FB:29:39:61:84:93:BA:EB:FE:EE:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/68bfda88-b255-3f63-9849-56b4f34fd59f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1d:8c:7d:e3:8b:b0:67:fd:69:de:88:3b:64:00:e4:7b:4d: d5:33:fe:f1:9d:67:06:06:4b:0b:61:7b:b7:b0:70:d7:fa:8a: dc:38:67:16:11:f9:5a:a7:9f:81:1b:24:69:7c:00:40:f7:01: 66:96:54:ea:66:35:dc:de:df:ed:b6:eb:27:5e:c2:c5:78:e8: 72:e9:60:10:67:0d:fd:be:1a:60:a3:3c:ad:24:97:6a:81:8a: 43:0a:fd:a0:a0:58:26:a2:45:8d:c0:7f:ba:9e:1f:52:fa:31: 2c:de:fd:54:28:4f:7c:19:90:3f:a4:a3:5f:15:f9:08:35:7e: 1f:43:6c:c9:d3:48:b8:3b:a0:9b:24:7a:b8:41:c8:1e:a8:c0: 94:21:7f:86:d5:36:32:3e:a3:76:b2:f6:08:d0:5b:04:42:ea: cc:26:b5:16:8a:a5:5f:30:f4:cf:b4:cb:b9:21:ed:34:31:08: b0:60:f3:15:81:8d:35:8e:82:4a:76:04:a2:b5:2d:8d:f3:48: 75:2d:57:11:e5:3a:95:b0:7a:f0:ec:18:3a:69:d9:0d:ff:2a: 57:ba:26:6d:bc:70:81:5f:e3:8f:2b:b8:2c:b0:ad:0a:e5:b3: 9d:d2:ac:8f:b4:9f:89:03:20:11:0f:a6:bb:86:d4:dc:d6:30: b0:a4:13:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/3orqXKtqcrmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NjU1YTA2NWYtMThhNi00MDc4LTliNDAtMzFhMjIyODk2MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAXhdnm9fhnSo+j58sb03mbDRiN/TA4Q3nBJ qhIIlUj8OmBsbeU39laYK1GbyDlrvIkmqYYAd1HlazwjLPoUNBOv6jZJge78Gkqn l5lmK+fOeGYxLT3BLPQ4nMxgjh2CAXzjrwWtCSqFKq1jbkjzdhTVnVLbN6UwC0hq Oc3U/OJjzm/y714yuTqZXyUP8sBuizX9xDDD5Yy3L8oaoSivm2u6pOnXiP7WNWkN r2iMgqD+ygn3LdmKoQlycOB9Skr4PCtZWZj0++Cy5vV8Az3WP9Gp2QWONfot96y+ XjlYQ96g+Yz1IdNnwV9maf2WntImBWK8T4YL06lEAxEti0Kx/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKlOSfrNSi+R/spOWGEk7rr/u5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNjhiZmRhODgtYjI1NS0z ZjYzLTk4NDktNTZiNGYzNGZkNTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwdjH3ji7Bn/WneiDtkAOR7TdUz/vGdZwYGSwthe7ewcNf6itw4ZxYR +Vqnn4EbJGl8AED3AWaWVOpmNdze3+226ydewsV46HLpYBBnDf2+GmCjPK0kl2qB ikMK/aCgWCaiRY3Af7qeH1L6MSze/VQoT3wZkD+ko18V+Qg1fh9DbMnTSLg7oJsk erhByB6owJQhf4bVNjI+o3ay9gjQWwRC6swmtRaKpV8w9M+0y7kh7TQxCLBg8xWB jTWOgkp2BKK1LY3zSHUtVxHlOpWwevDsGDpp2Q3/Kle6Jm28cIFf448ruCywrQrl s53SrI+0n4kDIBEPpruG1NzWMLCkE9A= -----END CERTIFICATE-----Generated at Sat Mar 21 06:46:02 2026 by rpki-client