$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa File: b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa (raw, json) Hash identifier: wRFHs7OUSNiiQ2AG1uhzPiiJp+jL1N11GGGho41zQCw= Subject key identifier: 1A:25:B1:01:E1:84:3B:6C:1F:B0:15:46:AD:30:C3:DA:89:A8:6B:F0 Certificate issuer: /CN=c68f99cd-e059-4345-ac58-8ebecccac84e Certificate serial: 010D0C9F4328584E4989D6DFF758056551FEFA40 Authority key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa Signing time: Thu 25 Jun 2026 09:00:13 +0000 ROA not before: Thu 25 Jun 2026 09:00:13 +0000 ROA not after: Wed 23 Sep 2026 09:00:13 +0000 asID: 14618 IP address blocks: 74.123.52.0/24 maxlen: 24 74.123.53.0/24 maxlen: 24 74.123.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:49:89:d6:df:f7:58:05:65:51:fe:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68f99cd-e059-4345-ac58-8ebecccac84e Validity Not Before: Jun 25 09:00:13 2026 GMT Not After : Sep 23 09:00:13 2026 GMT Subject: CN=afcccd4e-af38-424d-91c4-335445fdbcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:f7:6d:68:73:83:a7:32:99:18:1a:cc:ad: bf:71:ab:7f:d7:76:68:11:0d:84:31:75:6b:c7:e0: 41:79:4e:57:cd:41:c1:59:33:25:bd:b0:c9:51:db: 38:0a:1d:45:9d:0f:b7:a5:de:d8:90:83:35:35:d9: fe:36:08:70:19:ca:84:b9:30:55:8f:ce:03:9a:cc: c0:55:49:31:89:eb:6d:41:5e:04:c7:38:f4:24:cc: 1e:f3:03:40:42:44:b3:90:4a:ab:46:fc:fd:95:22: 50:31:9f:17:f7:08:ea:62:e5:15:d5:33:b1:e4:f9: e2:cc:72:6f:8b:ae:e7:b9:af:0f:04:0d:11:40:1f: eb:c9:a3:b6:95:9f:60:20:14:a6:62:ec:d6:e3:eb: 58:c2:a1:67:0a:7a:1a:79:15:35:b3:49:ee:df:44: 95:07:47:9d:1f:0c:70:1e:2e:e9:9e:32:53:4b:a9: b4:8e:c8:e0:1d:a1:cb:b6:f8:d2:c3:58:dc:79:dd: 9f:e1:d1:7c:0b:5d:a6:a9:31:eb:12:d1:1f:fa:2f: a5:26:c3:ee:d7:d8:05:41:24:59:cc:d6:9e:aa:10: d1:b3:92:91:da:e2:d1:c2:8e:79:2d:94:05:ba:3d: 0b:2b:df:35:e5:bc:9d:cc:fc:48:10:f8:b3:ed:99: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:25:B1:01:E1:84:3B:6C:1F:B0:15:46:AD:30:C3:DA:89:A8:6B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl X509v3 Authority Key Identifier: keyid:0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer sbgp-ipAddrBlock: critical IPv4: 74.123.52.0-74.123.54.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:df:82:24:78:ab:4f:f9:65:5f:1f:7f:02:25:5f:46:a5:6d: af:93:1a:32:8a:94:43:d9:44:58:4c:c0:98:96:40:b1:3d:e6: 8c:53:95:03:d9:ad:e8:e5:63:b3:7a:23:4e:86:a1:bf:7f:ec: 83:4c:5e:0a:c0:08:cd:51:3a:3a:b4:5a:f3:47:2c:c4:76:fd: 90:88:b0:e6:c9:6c:cc:ac:fc:1a:01:21:1c:e2:91:9a:0b:4e: 5e:24:a3:6f:0a:64:ef:49:5c:a7:af:01:ad:fb:8a:c8:ee:52: 8e:2f:8c:0e:17:a1:70:bb:59:e1:ea:15:a0:cc:20:33:4e:f9: 20:ac:a5:d1:02:c7:e9:ef:91:ab:ff:ed:e5:fd:89:5f:59:ec: 3c:cf:3f:4b:e0:19:3b:73:85:f8:2d:3a:17:3b:2f:7e:0a:bf: ab:d9:91:3b:25:7a:fd:9d:36:9b:62:79:d6:85:89:38:ba:fc: 8c:15:73:bd:17:18:d5:47:41:3d:e9:ed:72:b9:5d:05:86:d1: d5:f1:81:5c:8e:5d:91:32:3e:71:51:f2:bc:6e:0d:6d:af:e0: 86:5c:53:f2:5a:a3:23:b3:94:de:9f:e0:ca:ed:a1:5d:67:d3: 39:70:d0:a3:59:23:31:40:10:10:8b:ed:b3:e7:3e:dc:8b:e1: dd:b7:4f:ba -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE5Jidbf91gFZVH++kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4Zjk5Y2QtZTA1OS00MzQ1LWFjNTgtOGViZWNjY2Fj ODRlMB4XDTI2MDYyNTA5MDAxM1oXDTI2MDkyMzA5MDAxM1owLzEtMCsGA1UEAxMk YWZjY2NkNGUtYWYzOC00MjRkLTkxYzQtMzM1NDQ1ZmRiY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy/3bWhzg6cymRgazK2/cat/13ZoEQ2EMXVr x+BBeU5XzUHBWTMlvbDJUds4Ch1FnQ+3pd7YkIM1Ndn+NghwGcqEuTBVj84DmszA VUkxiettQV4Exzj0JMwe8wNAQkSzkEqrRvz9lSJQMZ8X9wjqYuUV1TOx5PnizHJv i67nua8PBA0RQB/ryaO2lZ9gIBSmYuzW4+tYwqFnCnoaeRU1s0nu30SVB0edHwxw Hi7pnjJTS6m0jsjgHaHLtvjSw1jced2f4dF8C12mqTHrEtEf+i+lJsPu19gFQSRZ zNaeqhDRs5KR2uLRwo55LZQFuj0LK9815bydzPxIEPiz7ZlxDQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBolsQHhhDtsH7AVRq0ww9qJqGvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhm OTljZC1lMDU5LTQzNDUtYWM1OC04ZWJlY2NjYWM4NGUvYjMyYzNiNjctYThkZi0z NTAzLTkzNTAtY2E5ZjNhYWVmOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzY4Zjk5Y2QtZTA1OS00MzQ1LWFj NTgtOGViZWNjY2FjODRlL2M2OGY5OWNkLWUwNTktNDM0NS1hYzU4LThlYmVjY2Nh Yzg0ZS5jcmwwHwYDVR0jBBgwFoAUCmbGteBfw7Z8RupGiPW6HoYMDDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhmOTljZC1lMDU5LTQzNDUtYWM1OC04ZWJl Y2NjYWM4NGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJKezQD BABKezYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAVd+CJHirT/llXx9/AiVfRqVtr5MaMoqUQ9lEWEzAmJZA sT3mjFOVA9mt6OVjs3ojToahv3/sg0xeCsAIzVE6OrRa80csxHb9kIiw5slszKz8 GgEhHOKRmgtOXiSjbwpk70lcp68BrfuKyO5Sji+MDhehcLtZ4eoVoMwgM075IKyl 0QLH6e+Rq//t5f2JX1nsPM8/S+AZO3OF+C06Fzsvfgq/q9mROyV6/Z02m2J51oWJ OLr8jBVzvRcY1UdBPentcrldBYbR1fGBXI5dkTI+cVHyvG4Nba/ghlxT8lqjI7OU 3p/gyu2hXWfTOXDQo1kjMUAQEIvts+c+3Ivh3bdPug== -----END CERTIFICATE-----Generated at Mon Jul 6 18:16:50 2026 by rpki-client