$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa File: b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa (raw, json) Hash identifier: 9XguZPPLOfi7deqG3TUXn+NN0Dd/F6YEtw2qz1DsMvc= Subject key identifier: AF:47:1F:AB:90:07:52:A2:7B:10:61:6A:47:37:60:6E:87:9D:E7:20 Certificate issuer: /CN=c68f99cd-e059-4345-ac58-8ebecccac84e Certificate serial: 010D0C9F4328584D55BCBB907D162A6D4D369780 Authority key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 16509 IP address blocks: 74.123.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:bb:90:7d:16:2a:6d:4d:36:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68f99cd-e059-4345-ac58-8ebecccac84e Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1c29fdc2-8dc7-41f9-adda-cf22610988f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:74:38:21:a5:c6:8e:99:64:71:8c:0f:9f: 21:1c:f9:d8:31:6f:ea:56:55:ce:28:90:57:dc:01: da:68:79:07:0a:6e:cf:5e:da:c5:ba:47:5d:43:eb: 65:63:ee:d0:d3:51:11:2a:5e:5a:f0:63:68:80:5b: fa:7f:27:e9:4b:cd:00:30:28:0e:5e:4b:e4:ce:29: 48:9a:bb:e9:8a:2e:51:d9:e5:7b:fe:f2:3e:f4:0e: d7:47:c0:a2:93:de:f1:86:2b:84:04:cf:7f:73:db: e5:6c:e3:9d:1a:28:f7:08:37:80:ff:c8:68:de:9e: be:92:88:37:1a:c0:24:b3:c0:98:6f:30:a5:f0:c9: 9a:83:3c:d6:8f:79:62:b4:ec:cd:29:3c:41:b2:0c: cc:5d:5a:8d:30:73:28:0e:2d:4a:33:4f:62:b2:d2: f5:ac:91:cb:6f:f8:c0:93:0f:94:c6:bc:68:a5:9e: 31:0a:28:f7:12:23:d1:0a:ae:2b:c2:25:73:8b:68: ed:57:a4:98:40:fb:9f:c6:25:84:f4:20:b1:e7:05: 1d:e9:68:f7:0a:a7:73:2d:6b:71:6f:93:8b:da:51: e4:bc:14:d7:a5:54:5b:56:fb:f5:3f:b0:e0:f6:4f: 6d:31:c0:5b:71:62:ad:d0:a1:ce:66:ea:f0:aa:f0: e5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:47:1F:AB:90:07:52:A2:7B:10:61:6A:47:37:60:6E:87:9D:E7:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl X509v3 Authority Key Identifier: keyid:0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer sbgp-ipAddrBlock: critical IPv4: 74.123.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:af:0c:af:e4:b1:33:67:3b:d2:32:ea:e8:f2:ce:a2:88:4c: 07:29:d0:a6:83:49:14:cb:ab:40:73:0e:bb:b9:44:87:96:a8: 99:fd:9f:a6:66:98:47:80:8d:53:9c:5c:8e:58:23:75:c7:e4: 0b:bb:b5:e2:0d:f7:32:9c:d6:c7:f6:d5:58:03:1c:19:43:84: 43:1e:26:31:da:c2:94:ec:29:68:fb:40:0f:6c:04:79:ab:4a: bd:ee:ee:30:78:70:ad:4d:da:9f:c1:7f:94:a2:95:f3:9a:57: f0:6a:6e:ef:49:51:b5:b9:fe:be:b0:e3:ba:aa:52:da:5f:b6: 27:66:e7:7a:e3:e4:1f:47:8b:89:74:cc:e2:28:5a:d6:c3:63: 13:58:90:b5:76:f4:74:4f:ff:f4:ae:89:08:9c:7b:19:95:14: f9:71:1f:a2:4c:ca:0a:0a:32:36:ae:6a:b9:da:9d:e5:a1:4d: 07:7b:91:b9:62:34:96:2b:a7:11:f8:5d:57:e4:3d:42:77:90: 40:e8:1f:da:4f:2a:94:fa:dd:29:3f:dd:a9:c3:79:dd:f5:03: d2:71:f6:6c:4b:44:3f:b0:2a:ff:c4:2f:bc:3e:de:42:c4:59: a8:37:df:54:01:66:50:d8:60:ac:40:7e:bd:06:39:b0:a9:98: e7:54:2a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLuQfRYqbU02l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4Zjk5Y2QtZTA1OS00MzQ1LWFjNTgtOGViZWNjY2Fj ODRlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MWMyOWZkYzItOGRjNy00MWY5LWFkZGEtY2YyMjYxMDk4OGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f10OCGlxo6ZZHGMD58hHPnYMW/qVlXOKJBX 3AHaaHkHCm7PXtrFukddQ+tlY+7Q01ERKl5a8GNogFv6fyfpS80AMCgOXkvkzilI mrvpii5R2eV7/vI+9A7XR8Cik97xhiuEBM9/c9vlbOOdGij3CDeA/8ho3p6+kog3 GsAks8CYbzCl8MmagzzWj3litOzNKTxBsgzMXVqNMHMoDi1KM09istL1rJHLb/jA kw+UxrxopZ4xCij3EiPRCq4rwiVzi2jtV6SYQPufxiWE9CCx5wUd6Wj3CqdzLWtx b5OL2lHkvBTXpVRbVvv1P7Dg9k9tMcBbcWKt0KHOZurwqvDlKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9HH6uQB1KiexBhakc3YG6HnecgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhm OTljZC1lMDU5LTQzNDUtYWM1OC04ZWJlY2NjYWM4NGUvYjMyZDZhOWUtZTFiZC0z NjA1LWFjNWEtOTVlYmU0NGI3M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzY4Zjk5Y2QtZTA1OS00MzQ1LWFj NTgtOGViZWNjY2FjODRlL2M2OGY5OWNkLWUwNTktNDM0NS1hYzU4LThlYmVjY2Nh Yzg0ZS5jcmwwHwYDVR0jBBgwFoAUCmbGteBfw7Z8RupGiPW6HoYMDDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhmOTljZC1lMDU5LTQzNDUtYWM1OC04ZWJl Y2NjYWM4NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASns3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCvDK/ksTNnO9Iy6ujyzqKITAcp0KaDSRTLq0BzDru5RIeWqJn9n6Zm mEeAjVOcXI5YI3XH5Au7teIN9zKc1sf21VgDHBlDhEMeJjHawpTsKWj7QA9sBHmr Sr3u7jB4cK1N2p/Bf5SilfOaV/Bqbu9JUbW5/r6w47qqUtpftidm53rj5B9Hi4l0 zOIoWtbDYxNYkLV29HRP//SuiQicexmVFPlxH6JMygoKMjauarnaneWhTQd7kbli NJYrpxH4XVfkPUJ3kEDoH9pPKpT63Sk/3anDed31A9Jx9mxLRD+wKv/EL7w+3kLE Wag331QBZlDYYKxAfr0GObCpmOdUKio= -----END CERTIFICATE-----Generated at Mon Apr 13 11:56:10 2026 by rpki-client