$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bf403b95-86fc-3c84-8e25-dc624a7dd03f.roa File: bf403b95-86fc-3c84-8e25-dc624a7dd03f.roa (raw, json) Hash identifier: QI2Hiw2MDpvCJAk2wawx6Ck+okx/dDjeJkKvXqLqGS8= Subject key identifier: 04:95:80:AA:CF:19:3E:EF:8B:F4:BF:E9:29:CE:BF:82:58:F5:39:60 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D1707D8CB389D2A25354A0880 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bf403b95-86fc-3c84-8e25-dc624a7dd03f.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 68.64.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:d8:cb:38:9d:2a:25:35:4a:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=44b69e2b-88e5-449c-a024-0ea6f3cfedc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:51:cb:89:03:e3:25:04:17:08:51:b0:5e:ef: e6:b2:f2:f9:51:3c:22:f1:6e:09:2a:32:5b:a5:09: 8d:ae:ae:ce:79:00:af:99:99:6d:fb:f1:e4:36:77: d0:6a:21:84:af:36:f0:b2:1b:5e:71:55:35:cc:5b: 1e:ec:67:66:27:c7:5e:66:90:f6:84:1f:44:36:d0: c4:18:c4:1a:59:b6:31:93:56:ef:a3:f0:11:43:7a: fb:e0:e7:e9:36:be:25:67:49:6e:2b:ba:b4:ed:cf: f6:81:82:f9:ea:bd:6d:99:f9:0a:83:3f:2d:8c:b3: 55:3e:cf:44:50:30:b5:e1:fb:7f:8b:33:e4:61:6f: e6:59:c8:3b:f7:8d:b3:bc:ed:3e:76:99:48:91:5b: d9:26:89:6a:48:a3:82:13:9d:11:06:7b:5c:7d:61: 9c:49:cc:28:54:7d:5d:89:0c:ea:1f:9c:a2:a0:ae: c1:e7:d8:b9:ac:08:26:19:64:c4:ac:a5:65:71:ac: d3:f0:6c:3d:9f:6b:8a:11:a2:aa:d3:b3:27:7d:c2: 93:71:8a:17:a9:19:ac:cf:90:83:e2:92:bc:3d:6e: 1d:82:f3:18:38:00:78:15:74:c6:d5:88:61:91:b7: f1:92:29:a9:ae:a5:0b:6e:af:75:96:5b:d5:aa:c0: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:95:80:AA:CF:19:3E:EF:8B:F4:BF:E9:29:CE:BF:82:58:F5:39:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bf403b95-86fc-3c84-8e25-dc624a7dd03f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:47:14:4a:cc:e2:62:62:ca:2c:50:31:01:28:ed:31:68:c1: d9:20:93:9d:1f:e5:57:06:f4:d9:88:e6:a7:25:3b:df:3a:61: aa:3c:19:b9:2e:0f:c9:b3:56:d1:49:10:88:bd:d0:05:78:e5: d1:57:af:7a:6c:14:14:83:fe:21:77:de:47:3a:8e:a9:65:62: f6:12:97:4d:ce:65:e6:45:d3:5f:42:f1:7c:cb:f7:d3:e1:44: 74:ad:20:2d:76:57:30:1b:38:bf:17:2c:ad:75:ff:63:bb:49: d9:35:fa:09:a3:05:45:b8:75:cc:b8:3b:1f:bb:38:19:b9:39: 85:f2:82:7a:50:c0:65:34:7d:6f:c6:0d:83:36:19:2c:06:31: 09:c9:2d:d5:f3:3c:2d:8a:25:9b:51:b0:62:6b:70:2a:31:9b: 1a:bc:a8:e7:c0:e8:6f:8a:76:ac:11:03:25:8a:a7:ed:df:be: 16:16:f5:b8:ea:fe:83:0d:22:ff:e4:d4:25:4a:30:6d:2b:e3: e2:1c:b3:e5:91:67:7c:50:63:2d:f0:a3:16:bb:b9:3d:73:0a: 8a:f4:b6:19:13:41:67:d1:90:e7:18:49:36:84:34:87:e0:88: a5:e3:4a:25:6c:58:af:88:81:0f:cb:5a:d3:20:4e:66:62:2d: 09:a5:18:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB9jLOJ0qJTVKCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk NDRiNjllMmItODhlNS00NDljLWEwMjQtMGVhNmYzY2ZlZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFHLiQPjJQQXCFGwXu/msvL5UTwi8W4JKjJb pQmNrq7OeQCvmZlt+/HkNnfQaiGErzbwshtecVU1zFse7GdmJ8deZpD2hB9ENtDE GMQaWbYxk1bvo/ARQ3r74OfpNr4lZ0luK7q07c/2gYL56r1tmfkKgz8tjLNVPs9E UDC14ft/izPkYW/mWcg7942zvO0+dplIkVvZJolqSKOCE50RBntcfWGcScwoVH1d iQzqH5yioK7B59i5rAgmGWTErKVlcazT8Gw9n2uKEaKq07MnfcKTcYoXqRmsz5CD 4pK8PW4dgvMYOAB4FXTG1YhhkbfxkimprqULbq91llvVqsAobwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASVgKrPGT7vi/S/6SnOv4JY9TlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmY0MDNiOTUtODZmYy0z Yzg0LThlMjUtZGM2MjRhN2RkMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhHFErM4mJiyixQMQEo7TFowdkgk50f5VcG9NmI5qclO986Yao8Gbku D8mzVtFJEIi90AV45dFXr3psFBSD/iF33kc6jqllYvYSl03OZeZF019C8XzL99Ph RHStIC12VzAbOL8XLK11/2O7Sdk1+gmjBUW4dcy4Ox+7OBm5OYXygnpQwGU0fW/G DYM2GSwGMQnJLdXzPC2KJZtRsGJrcCoxmxq8qOfA6G+KdqwRAyWKp+3fvhYW9bjq /oMNIv/k1CVKMG0r4+Ics+WRZ3xQYy3woxa7uT1zCor0thkTQWfRkOcYSTaENIfg iKXjSiVsWK+IgQ/LWtMgTmZiLQmlGP0= -----END CERTIFICATE-----Generated at Tue Mar 10 22:25:39 2026 by rpki-client