$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b332b72a-9b0a-3187-a4dc-faab553ccc66.roa File: b332b72a-9b0a-3187-a4dc-faab553ccc66.roa (raw, json) Hash identifier: /HezOsYcW5dI7DOBlkDay6rhjcUgZvt4xlPrYa4IbMY= Subject key identifier: B9:EF:04:38:A4:9C:9E:E0:64:45:92:57:65:94:C4:01:56:E0:1F:18 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CAFBC69314BD85B5218BFCE40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b332b72a-9b0a-3187-a4dc-faab553ccc66.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 3257 IP address blocks: 68.165.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:69:31:4b:d8:5b:52:18:bf:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=3745086e-5b97-46db-b41e-b4585bb2cf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:57:fe:37:67:28:c0:7c:ab:68:16:66:38: c4:ff:f6:0c:75:eb:5e:1f:c1:d6:df:ab:5b:90:8d: 3a:84:04:8f:18:02:f2:8d:5e:8b:a6:e2:fa:8f:2d: 81:28:22:52:15:8e:a4:f7:51:08:55:12:99:45:ea: 1d:58:1d:d9:06:ba:e7:6e:29:de:0b:ee:7a:58:69: d7:64:51:66:02:1d:3b:b2:53:e0:78:91:f9:8f:23: d7:8d:ef:20:5b:02:ff:bd:39:e4:6b:df:d0:b9:db: 39:ef:94:38:a7:91:a1:3b:23:f6:57:23:50:e4:ae: 29:6c:cc:38:f2:e8:45:b0:43:67:b0:a7:be:27:11: 98:40:10:14:cc:2a:3d:e7:61:ea:88:28:c5:09:8f: 14:ac:48:6a:69:38:cc:d9:9e:65:16:0d:05:b5:ff: 33:e8:97:f6:79:f0:8b:d5:5c:21:15:3f:28:16:7e: c8:ce:4e:62:b3:84:7f:63:8c:0b:a0:d4:84:69:f4: 30:6c:31:ae:dd:a0:54:21:b5:e0:ef:cc:5e:44:1a: 83:eb:70:3d:7b:26:05:bc:72:77:39:34:ef:33:3d: 55:8b:ba:50:21:a9:ad:eb:dd:0e:50:cc:07:86:74: 6f:54:9d:14:99:e8:27:fe:91:b9:f6:1f:f1:2b:7a: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EF:04:38:A4:9C:9E:E0:64:45:92:57:65:94:C4:01:56:E0:1F:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b332b72a-9b0a-3187-a4dc-faab553ccc66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.165.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8c:04:14:a3:b9:be:40:ba:80:26:47:fd:88:d4:b6:9b:98: aa:2f:4a:66:0e:44:4a:05:f8:58:41:8a:95:78:36:1f:55:16: 09:77:c9:ec:61:7f:1b:4e:db:02:49:5e:4f:9e:de:d1:50:16: 4d:57:bd:57:21:2d:75:75:5e:50:69:39:fd:8b:03:72:99:f2: 39:14:30:3d:5b:c1:fc:bd:c2:f6:95:39:ac:62:0a:27:a4:16: 10:24:9a:6a:54:09:1e:95:e1:58:e4:e5:32:e5:11:4f:ab:c3: 7a:cd:3b:b2:15:ce:96:6c:46:a3:41:61:f1:ed:1e:aa:d2:c9: 40:2d:c1:37:48:32:68:36:3e:53:1f:a8:97:6c:5b:ff:62:6c: f2:78:e5:c8:b9:50:cf:a5:64:0e:a9:f9:e6:df:79:89:60:fc: c9:6d:54:2e:4d:56:b2:3e:fc:7a:f0:b0:c6:41:84:4c:7f:2b: 65:ed:34:61:4c:44:90:04:f1:62:5b:c0:6b:6b:13:28:8d:49: 88:e6:90:db:72:63:25:c4:f7:cd:e0:8d:aa:89:7f:a6:d7:45: 37:2a:75:8a:2c:20:e5:5a:06:8f:f3:14:45:53:26:b8:4c:79: 31:fa:74:d3:ed:fd:b5:29:d0:4e:8e:e8:1b:90:15:0c:a3:94: 87:4f:e7:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvGkxS9hbUhi/zkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk Mzc0NTA4NmUtNWI5Ny00NmRiLWI0MWUtYjQ1ODViYjJjZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT5X/jdnKMB8q2gWZjjE//YMdeteH8HW36tb kI06hASPGALyjV6LpuL6jy2BKCJSFY6k91EIVRKZReodWB3ZBrrnbineC+56WGnX ZFFmAh07slPgeJH5jyPXje8gWwL/vTnka9/Quds575Q4p5GhOyP2VyNQ5K4pbMw4 8uhFsENnsKe+JxGYQBAUzCo952HqiCjFCY8UrEhqaTjM2Z5lFg0Ftf8z6Jf2efCL 1VwhFT8oFn7Izk5is4R/Y4wLoNSEafQwbDGu3aBUIbXg78xeRBqD63A9eyYFvHJ3 OTTvMz1Vi7pQIamt690OUMwHhnRvVJ0Umegn/pG59h/xK3onvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnvBDiknJ7gZEWSV2WUxAFW4B8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjMzMmI3MmEtOWIwYS0z MTg3LWE0ZGMtZmFhYjU1M2NjYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCMBBSjub5AuoAmR/2I1LabmKovSmYOREoF+FhBipV4Nh9VFgl3yexh fxtO2wJJXk+e3tFQFk1XvVchLXV1XlBpOf2LA3KZ8jkUMD1bwfy9wvaVOaxiCiek FhAkmmpUCR6V4Vjk5TLlEU+rw3rNO7IVzpZsRqNBYfHtHqrSyUAtwTdIMmg2PlMf qJdsW/9ibPJ45ci5UM+lZA6p+ebfeYlg/MltVC5NVrI+/HrwsMZBhEx/K2XtNGFM RJAE8WJbwGtrEyiNSYjmkNtyYyXE983gjaqJf6bXRTcqdYosIOVaBo/zFEVTJrhM eTH6dNPt/bUp0E6O6BuQFQyjlIdP51c= -----END CERTIFICATE-----Generated at Mon Feb 23 22:29:59 2026 by rpki-client