$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa File: 195a65bc-7a79-3b20-8e10-5794d68025a0.roa (raw, json) Hash identifier: 1uy+kG0Obic/0nIpV1i4O5zZ9w2zUQbUHZFw9RCChZI= Subject key identifier: CB:89:B3:D3:17:9E:84:A2:A1:AA:E9:28:9C:2B:EC:32:34:D1:55:A3 Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584D2644CA7B915E6402B6FB5C00 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 23316 IP address blocks: 68.170.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:ca:7b:91:5e:64:02:b6:fb:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=9a23440f-daa2-41cd-b434-1e24c0d808e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:0c:38:dc:f5:e4:71:6e:8b:1e:38:bb:d5: c4:b7:ec:67:8d:76:70:41:cc:0a:f8:72:55:a5:48: 19:7e:e8:8c:fc:4b:51:c2:03:58:b2:d5:e4:8a:7c: ea:75:4f:5a:af:e3:75:01:4b:af:99:c3:67:17:b5: f5:d2:45:a9:81:45:70:8a:b3:36:f4:2b:e5:43:cb: 68:76:2a:49:b9:72:e4:ac:9a:02:98:37:d2:fa:2f: b5:59:87:b3:e1:41:50:56:81:53:32:2b:1a:ae:21: 0f:73:12:2b:16:b5:59:f6:43:72:a4:eb:c5:1a:36: 2d:ee:f9:83:c4:4a:fd:81:c9:95:98:4a:73:19:ba: 3e:99:64:72:c0:ed:54:98:43:77:72:e6:78:6d:e5: 70:ec:95:31:fc:e0:af:34:56:2b:94:2f:b8:57:49: e3:67:57:4d:0e:75:10:ca:9a:b2:d5:65:cc:13:ea: dd:50:42:0a:81:b0:34:bf:eb:68:52:03:58:5f:2c: f1:77:de:25:80:c5:c6:31:4b:eb:1b:bd:be:8b:ac: db:f4:4e:75:d9:f1:86:57:e7:24:f0:7c:b9:0c:f7: 3d:82:70:10:c8:02:b6:bb:e6:30:3c:38:b2:22:b0: bb:d0:f5:a5:b3:da:db:d5:a9:e9:35:37:c3:e9:ff: 6d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:89:B3:D3:17:9E:84:A2:A1:AA:E9:28:9C:2B:EC:32:34:D1:55:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 68.170.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:15:a6:15:80:12:80:df:64:d4:69:10:14:67:b7:cd:3c:0a: 8d:af:b3:f5:22:77:bb:58:5f:b9:3c:25:87:55:60:39:43:65: b0:2d:d2:20:7d:c4:c8:50:5c:1c:e3:89:44:63:17:57:fc:99: ab:2b:b1:8b:23:88:1e:f2:be:a5:a2:52:68:e3:b0:e4:33:4f: 8b:0d:d9:71:45:62:09:13:6e:0e:07:94:47:ea:2a:e5:39:a3: 4b:05:8b:25:38:bd:d5:29:a0:76:de:c0:49:6d:7a:14:ae:72: e4:27:17:88:9b:e2:ea:12:c5:68:b3:d2:88:03:5b:26:69:3d: a7:70:c0:c1:cd:7f:41:97:ff:a5:02:76:ff:fa:72:d9:1f:08: a4:b6:d2:3a:ed:b4:17:e6:14:20:d2:fc:42:d3:3d:a5:ea:47: 75:16:f8:92:78:f2:29:2d:08:6c:66:a0:27:0e:0e:88:66:4b: d5:f0:8d:9e:8a:4b:7d:89:fe:b4:0f:f5:5b:71:75:a4:d2:cb: f0:78:8d:fa:f6:cc:70:0e:4d:07:10:91:6b:c2:da:4b:22:dc: d4:ce:59:01:e0:2e:f0:b9:98:cb:70:35:fb:d8:4c:a3:87:eb: 1b:cf:2f:12:e6:a4:96:2f:18:c7:4a:01:43:75:b7:82:e8:09: ea:65:4a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMp7kV5kArb7XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk OWEyMzQ0MGYtZGFhMi00MWNkLWI0MzQtMWUyNGMwZDgwOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxkMONz15HFuix44u9XEt+xnjXZwQcwK+HJV pUgZfuiM/EtRwgNYstXkinzqdU9ar+N1AUuvmcNnF7X10kWpgUVwirM29CvlQ8to dipJuXLkrJoCmDfS+i+1WYez4UFQVoFTMisariEPcxIrFrVZ9kNypOvFGjYt7vmD xEr9gcmVmEpzGbo+mWRywO1UmEN3cuZ4beVw7JUx/OCvNFYrlC+4V0njZ1dNDnUQ ypqy1WXME+rdUEIKgbA0v+toUgNYXyzxd94lgMXGMUvrG72+i6zb9E512fGGV+ck 8Hy5DPc9gnAQyAK2u+YwPDiyIrC70PWls9rb1anpNTfD6f9tqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuJs9MXnoSioarpKJwr7DI00VWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvMTk1YTY1YmMtN2E3OS0z YjIwLThlMTAtNTc5NGQ2ODAyNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsVphWAEoDfZNRpEBRnt808Co2vs/Uid7tYX7k8JYdVYDlDZbAt0iB9 xMhQXBzjiURjF1f8masrsYsjiB7yvqWiUmjjsOQzT4sN2XFFYgkTbg4HlEfqKuU5 o0sFiyU4vdUpoHbewEltehSucuQnF4ib4uoSxWiz0ogDWyZpPadwwMHNf0GX/6UC dv/6ctkfCKS20jrttBfmFCDS/ELTPaXqR3UW+JJ48iktCGxmoCcODohmS9XwjZ6K S32J/rQP9VtxdaTSy/B4jfr2zHAOTQcQkWvC2ksi3NTOWQHgLvC5mMtwNfvYTKOH 6xvPLxLmpJYvGMdKAUN1t4LoCeplSqE= -----END CERTIFICATE-----Generated at Sat Mar 21 23:06:40 2026 by rpki-client