$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63a346c3-7462-3124-acf9-efc31c32f71c.roa File: 63a346c3-7462-3124-acf9-efc31c32f71c.roa (raw, json) Hash identifier: cSBAKJEHXVkVfw+kJMEZM0PSu7V7xk4dABi+WcWtzrU= Subject key identifier: 81:AC:4F:28:BC:ED:06:5E:21:10:DB:9F:29:DE:A8:8A:80:60:7D:6F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D08953817BF0CD469133F8632 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63a346c3-7462-3124-acf9-efc31c32f71c.roa Signing time: Mon 02 Mar 2026 09:48:42 +0000 ROA not before: Mon 02 Mar 2026 09:48:42 +0000 ROA not after: Sun 31 May 2026 08:48:42 +0000 asID: 11059 IP address blocks: 68.164.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:95:38:17:bf:0c:d4:69:13:3f:86:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 2 09:48:42 2026 GMT Not After : May 31 08:48:42 2026 GMT Subject: CN=76902f44-24a8-46c4-902e-d7f1c1e2de23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:81:b0:dd:9a:f3:12:54:63:92:01:cb:09:39: 0a:67:aa:cf:1d:a4:f0:54:22:e1:6a:bc:ec:55:fe: ce:a5:ee:cf:65:6a:43:65:aa:92:49:33:76:33:35: b0:92:76:dd:e2:2d:84:f7:39:13:59:de:cc:18:73: 2f:4f:0f:33:2f:6a:e4:52:95:e5:1a:9c:f0:4a:8f: e6:e7:6d:c8:2b:41:a8:63:fa:52:a3:73:0c:a6:a0: 72:4b:23:ea:30:71:52:9e:f3:6e:0b:33:ae:3c:8c: da:f9:0d:6a:b7:27:71:7f:4e:1d:ec:35:1d:2a:9e: 70:40:24:b0:d4:60:b9:2d:0c:21:8e:ed:21:93:e0: 8a:f3:9e:24:9c:7b:31:b9:74:e9:84:98:eb:a3:da: 97:31:7b:80:c8:4d:e5:c0:76:39:72:dc:ec:91:2c: 65:01:95:f6:e1:6c:82:27:b1:e6:ec:d7:5a:5e:aa: 8a:ea:f8:9d:5e:df:71:79:94:cb:a3:e3:b8:26:5d: 21:37:eb:6a:6a:ab:87:eb:0c:89:89:6b:91:56:35: 83:e2:0f:23:04:0c:0b:46:a2:aa:5b:85:11:92:4b: 05:dd:13:98:73:df:af:7f:c6:f2:21:7e:aa:32:e3: 55:d4:7d:50:44:73:f3:b3:20:4c:06:f0:e2:72:58: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AC:4F:28:BC:ED:06:5E:21:10:DB:9F:29:DE:A8:8A:80:60:7D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/63a346c3-7462-3124-acf9-efc31c32f71c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ac:33:51:c5:9c:5a:7f:e9:a3:1f:75:57:3c:04:60:c0:63: 3b:0b:a8:70:e8:5b:af:80:9d:58:41:5a:56:51:1b:e0:15:c1: b0:42:18:ab:fd:fa:5b:2d:5e:d2:a7:13:4f:1e:b2:99:3d:91: 74:18:fc:26:27:4f:49:4a:c9:64:bb:7e:09:4c:67:92:d6:8b: d6:cc:4a:9b:a1:3e:74:a8:d8:df:b1:e0:7f:5e:71:25:ca:71: 98:e5:25:4f:d4:4d:f4:9e:5c:48:e8:3e:57:fd:36:8a:15:d3: 09:7f:20:28:b4:c9:af:7d:bb:08:52:c2:a2:b8:eb:3a:1c:a3: 39:75:73:1b:9f:04:75:d3:05:9d:c5:68:0e:03:0d:9f:89:3a: 4d:18:8b:ea:5e:28:9c:fb:06:c2:25:13:08:b3:9c:64:92:39: 97:ff:bd:95:07:03:d9:ef:bc:2c:15:3b:e4:86:c6:b3:ba:5e: 95:03:85:14:dc:99:10:6b:56:21:2e:8d:dd:58:6a:2c:d8:8c: fe:99:ea:c8:7f:2b:a9:f2:d0:9e:dc:60:c4:b7:03:61:7d:cb: 6f:17:27:b0:68:82:df:3d:38:f4:a5:5e:54:7a:25:b0:79:3e: 71:4d:26:68:48:9e:ab:86:c6:86:55:36:3e:ac:d5:c1:45:59: 24:05:67:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0IlTgXvwzUaRM/hjIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMwMjA5NDg0MloXDTI2MDUzMTA4NDg0MlowLzEtMCsGA1UEAxMk NzY5MDJmNDQtMjRhOC00NmM0LTkwMmUtZDdmMWMxZTJkZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYGw3ZrzElRjkgHLCTkKZ6rPHaTwVCLharzs Vf7Ope7PZWpDZaqSSTN2MzWwknbd4i2E9zkTWd7MGHMvTw8zL2rkUpXlGpzwSo/m 523IK0GoY/pSo3MMpqBySyPqMHFSnvNuCzOuPIza+Q1qtydxf04d7DUdKp5wQCSw 1GC5LQwhju0hk+CK854knHsxuXTphJjro9qXMXuAyE3lwHY5ctzskSxlAZX24WyC J7Hm7NdaXqqK6vidXt9xeZTLo+O4Jl0hN+tqaquH6wyJiWuRVjWD4g8jBAwLRqKq W4URkksF3ROYc9+vf8byIX6qMuNV1H1QRHPzsyBMBvDicliGqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGsTyi87QZeIRDbnyneqIqAYH1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNjNhMzQ2YzMtNzQ2Mi0z MTI0LWFjZjktZWZjMzFjMzJmNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6sM1HFnFp/6aMfdVc8BGDAYzsLqHDoW6+AnVhBWlZRG+AVwbBCGKv9 +lstXtKnE08espk9kXQY/CYnT0lKyWS7fglMZ5LWi9bMSpuhPnSo2N+x4H9ecSXK cZjlJU/UTfSeXEjoPlf9NooV0wl/ICi0ya99uwhSwqK46zocozl1cxufBHXTBZ3F aA4DDZ+JOk0Yi+peKJz7BsIlEwiznGSSOZf/vZUHA9nvvCwVO+SGxrO6XpUDhRTc mRBrViEujd1YaizYjP6Z6sh/K6ny0J7cYMS3A2F9y28XJ7Bogt89OPSlXlR6JbB5 PnFNJmhInquGxoZVNj6s1cFFWSQFZ/I= -----END CERTIFICATE-----Generated at Tue Mar 3 22:22:02 2026 by rpki-client