$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa File: 93db8749-21a8-3ed7-b681-b51e2692f9ec.roa (raw, json) Hash identifier: 0DI35tqsc/2iDV6UfGpY5iWlTJmd6gIokAi921u7xW0= Subject key identifier: 69:E4:16:FE:FB:08:7F:B9:49:80:1B:DD:DB:D6:CC:A3:90:42:8E:7F Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D1172675EFED8B919089B8D60 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 68.64.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:67:5e:fe:d8:b9:19:08:9b:8d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=51053c23-6b35-4709-acaa-26cd8ff53eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:c2:2f:d7:c0:06:7e:34:a0:da:5e:44:8c: 0f:fe:55:e1:8a:fd:c8:cd:81:c8:d7:96:c8:73:62: 97:4c:d6:39:73:00:bf:27:25:68:81:23:87:3d:67: 77:f0:d8:cd:fa:c9:f2:7e:0d:0f:20:fc:4d:ad:66: 8f:3b:51:31:b3:6e:48:8f:b6:01:88:3d:59:3c:25: 8d:e0:dd:17:50:b7:ec:68:3d:b7:75:6f:34:a9:5f: b8:11:db:5c:66:ee:f9:2d:f2:10:16:21:90:88:83: 88:ef:fd:83:41:63:ef:72:36:7b:55:59:eb:85:e1: 56:94:30:99:24:cc:0d:5d:6b:e3:eb:70:02:28:26: 65:a1:58:1b:a1:fb:0f:e4:54:7a:6e:3e:bd:b4:3b: 0a:b4:b8:8d:79:14:a9:8e:e4:ed:d0:13:af:fd:63: dc:27:b5:2a:e4:7b:b7:c9:f2:b3:03:e4:86:18:ad: 1d:40:2c:f1:93:94:3c:f3:c9:00:1f:58:07:c4:f8: 9e:78:f7:33:8a:3e:bc:54:83:02:d0:6c:73:aa:db: 94:14:ae:53:e0:29:61:db:fb:a1:04:9d:bb:34:65: 55:18:ad:e1:ce:7b:09:23:2e:2a:39:8f:7a:d3:97: 40:4f:41:7c:59:7f:50:13:e7:34:c6:e9:75:b8:9a: e6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E4:16:FE:FB:08:7F:B9:49:80:1B:DD:DB:D6:CC:A3:90:42:8E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d0:1e:df:a1:d4:5b:93:6c:70:87:24:37:2f:7e:50:fe:ba: eb:fe:97:64:13:9b:52:1d:db:0c:53:35:34:ff:5b:a1:88:71: 80:a4:b9:fb:ba:46:13:6d:bf:bc:d2:93:07:5d:31:3c:02:f8: a6:a9:f8:ef:ba:62:e3:23:9d:82:02:b6:ba:56:6c:5a:84:33: d1:de:95:1a:d0:01:4d:cb:70:f2:98:03:0b:2d:eb:4f:0a:04: c1:21:98:59:68:2c:1d:74:28:32:0f:c4:d1:47:95:bd:d8:71: e2:05:ff:01:3b:2a:79:31:fc:ca:2d:24:4e:47:82:8b:a0:f7: 11:37:72:db:a3:01:af:cd:3e:8e:3a:7f:02:4e:ce:53:84:e6: 45:57:55:c1:ff:f8:f1:e1:c7:64:d2:7e:14:9a:6d:4b:e5:0e: d2:82:00:7e:c9:de:18:94:32:69:7f:cd:a0:93:81:42:61:d9: 24:65:e8:14:3a:38:5c:10:da:ae:10:17:d8:c0:38:cb:bb:0c: 96:96:e8:e2:0d:c6:04:1f:3f:c1:ff:a7:26:d3:ce:2e:7e:11: fe:8b:48:f0:f0:65:b0:84:41:a3:f6:62:d9:01:b1:9f:98:46: 11:01:87:a2:74:1c:08:f4:ce:85:c0:c7:ea:f5:a2:92:8b:b5: c2:ca:fb:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcmde/ti5GQibjWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NTEwNTNjMjMtNmIzNS00NzA5LWFjYWEtMjZjZDhmZjUzZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2LCL9fABn40oNpeRIwP/lXhiv3IzYHI15bI c2KXTNY5cwC/JyVogSOHPWd38NjN+snyfg0PIPxNrWaPO1Exs25Ij7YBiD1ZPCWN 4N0XULfsaD23dW80qV+4EdtcZu75LfIQFiGQiIOI7/2DQWPvcjZ7VVnrheFWlDCZ JMwNXWvj63ACKCZloVgbofsP5FR6bj69tDsKtLiNeRSpjuTt0BOv/WPcJ7Uq5Hu3 yfKzA+SGGK0dQCzxk5Q888kAH1gHxPieePczij68VIMC0GxzqtuUFK5T4Clh2/uh BJ27NGVVGK3hznsJIy4qOY9605dAT0F8WX9QE+c0xul1uJrm2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnkFv77CH+5SYAb3dvWzKOQQo5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOTNkYjg3NDktMjFhOC0z ZWQ3LWI2ODEtYjUxZTI2OTJmOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDQHt+h1FuTbHCHJDcvflD+uuv+l2QTm1Id2wxTNTT/W6GIcYCkufu6 RhNtv7zSkwddMTwC+Kap+O+6YuMjnYICtrpWbFqEM9HelRrQAU3LcPKYAwst608K BMEhmFloLB10KDIPxNFHlb3YceIF/wE7Knkx/MotJE5Hgoug9xE3ctujAa/NPo46 fwJOzlOE5kVXVcH/+PHhx2TSfhSabUvlDtKCAH7J3hiUMml/zaCTgUJh2SRl6BQ6 OFwQ2q4QF9jAOMu7DJaW6OINxgQfP8H/pybTzi5+Ef6LSPDwZbCEQaP2YtkBsZ+Y RhEBh6J0HAj0zoXAx+r1opKLtcLK+90= -----END CERTIFICATE-----Generated at Tue Mar 10 22:27:32 2026 by rpki-client