$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/91aa241e-8896-32fb-a614-33e9e2acc913.roa File: 91aa241e-8896-32fb-a614-33e9e2acc913.roa (raw, json) Hash identifier: CsRXpQ/yz/oRnp2AiWMaL5N8pUZeJxC0SJ1sKvV58b0= Subject key identifier: 8E:95:01:60:EA:9E:46:D5:05:B6:68:8A:44:20:8D:30:8C:7B:BA:F2 Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Certificate serial: 010D0C9F4328584DA11AEE7414430D29F8F30B00 Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/91aa241e-8896-32fb-a614-33e9e2acc913.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 36744 IP address blocks: 68.68.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:ee:74:14:43:0d:29:f8:f3:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=a85a9e2f-575d-498d-b5ea-4c2ec5b7f150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:67:7a:f0:8e:9e:59:17:b8:e2:ca:dc:a2: 99:e5:e9:eb:18:3f:73:5d:c4:cd:7b:28:9f:e2:fd: 19:27:e1:3d:b3:4e:b7:2e:7d:f7:da:11:a0:5a:e4: 13:0c:2c:15:57:c5:cd:06:ee:86:15:74:9d:ca:39: 89:37:0f:1a:18:dd:5b:35:24:05:a6:2a:c0:c9:03: 87:4c:1e:29:ab:f4:54:dd:a4:34:fe:3e:31:21:b7: a6:20:23:00:f5:bb:97:7d:90:e4:31:3d:a3:cd:23: 76:12:f5:74:15:5f:94:25:40:aa:93:e6:54:d7:fa: 38:c0:15:ff:b0:de:e0:cf:79:00:67:ec:e8:80:d0: bc:d1:33:79:78:2d:99:17:8b:3d:e7:db:4e:cd:2d: 19:78:65:d9:d6:91:98:62:f6:eb:c3:ff:12:e2:65: 3c:4b:75:03:f6:87:a9:dc:e8:e9:30:b1:91:d5:93: 7b:cf:6e:14:2b:19:4d:9b:e0:be:37:1e:9a:d0:fd: 3f:ca:4a:3e:42:64:04:5b:f5:7f:fe:e8:10:30:f5: 75:da:13:9c:65:4d:f1:5e:3d:4f:1f:04:b2:89:94: 8a:b4:01:ba:6e:44:be:95:11:09:c1:42:99:d9:87: b6:93:3b:75:20:e9:d5:c5:90:2b:b3:cc:40:8d:0d: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:95:01:60:EA:9E:46:D5:05:B6:68:8A:44:20:8D:30:8C:7B:BA:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/91aa241e-8896-32fb-a614-33e9e2acc913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl X509v3 Authority Key Identifier: keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer sbgp-ipAddrBlock: critical IPv4: 68.68.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:de:7e:ce:16:7e:b6:4f:33:6f:92:25:dc:96:4c:dd:3d:b4: 0b:5f:fb:01:66:52:d1:f1:78:d1:29:99:9d:e9:02:9d:aa:8d: 48:e3:7c:20:d1:d4:c4:f2:c8:d8:ae:69:b6:47:50:36:97:d9: f2:72:9f:67:be:48:59:37:a0:f1:17:a8:3a:64:40:aa:60:df: c7:2c:45:b2:b8:39:4d:62:e0:97:13:b0:d1:f5:85:26:35:b9: 59:af:10:4e:28:83:64:c8:a9:f7:31:37:ed:37:46:08:93:ae: b3:6c:f7:58:c5:81:11:5d:15:5b:30:12:f8:ba:ef:42:64:f7: dd:50:ed:35:1c:bb:b7:b6:fd:a6:4c:20:75:f3:2d:24:d5:ac: bb:18:a3:6b:f0:b8:2b:77:5e:20:43:1b:f6:58:8c:8f:ea:bc: 1d:3b:06:5e:3d:95:be:19:54:66:ec:96:c6:cf:19:b3:c7:20: f0:b3:b9:f2:51:07:86:4c:b1:9b:8f:0a:f7:74:96:fe:74:58: aa:fe:90:3b:39:3b:46:a3:28:17:f4:64:6d:51:d6:25:04:5c: 4e:db:c8:76:ce:26:e9:4b:f5:8d:74:38:38:34:3f:da:0a:b8: 0b:08:1c:8f:ab:5a:97:eb:d3:23:a1:c8:e5:96:41:00:6b:12: 3d:bc:52:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGu50FEMNKfjzCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk M2VjMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk YTg1YTllMmYtNTc1ZC00OThkLWI1ZWEtNGMyZWM1YjdmMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL5nevCOnlkXuOLK3KKZ5enrGD9zXcTNeyif 4v0ZJ+E9s063Ln332hGgWuQTDCwVV8XNBu6GFXSdyjmJNw8aGN1bNSQFpirAyQOH TB4pq/RU3aQ0/j4xIbemICMA9buXfZDkMT2jzSN2EvV0FV+UJUCqk+ZU1/o4wBX/ sN7gz3kAZ+zogNC80TN5eC2ZF4s959tOzS0ZeGXZ1pGYYvbrw/8S4mU8S3UD9oep 3OjpMLGR1ZN7z24UKxlNm+C+Nx6a0P0/yko+QmQEW/V//ugQMPV12hOcZU3xXj1P HwSyiZSKtAG6bkS+lREJwUKZ2Ye2kzt1IOnVxZArs8xAjQ1lwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6VAWDqnkbVBbZoikQgjTCMe7ryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvOTFhYTI0MWUtODg5Ni0z MmZiLWE2MTQtMzNlOWUyYWNjOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx ZDMyM2QzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARET+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzefs4WfrZPM2+SJdyWTN09tAtf+wFmUtHxeNEpmZ3pAp2qjUjjfCDR 1MTyyNiuabZHUDaX2fJyn2e+SFk3oPEXqDpkQKpg38csRbK4OU1i4JcTsNH1hSY1 uVmvEE4og2TIqfcxN+03RgiTrrNs91jFgRFdFVswEvi670Jk991Q7TUcu7e2/aZM IHXzLSTVrLsYo2vwuCt3XiBDG/ZYjI/qvB07Bl49lb4ZVGbslsbPGbPHIPCzufJR B4ZMsZuPCvd0lv50WKr+kDs5O0ajKBf0ZG1R1iUEXE7byHbOJulL9Y10ODg0P9oK uAsIHI+rWpfr0yOhyOWWQQBrEj28Usw= -----END CERTIFICATE-----Generated at Thu Apr 30 12:48:39 2026 by rpki-client