$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/2136fbe9-084d-389d-99c4-54b075432424.roa File: 2136fbe9-084d-389d-99c4-54b075432424.roa (raw, json) Hash identifier: qJHDQT4JOIT5vLZZ6SA3ojMB8Wji0lfJezJaTLyUqBE= Subject key identifier: 30:97:C5:7A:1D:13:FA:0C:86:3F:81:D1:E7:8C:A1:52:BD:38:02:C9 Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F4328584D0D427E4C43EF4C5D4D3EA3C0 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/2136fbe9-084d-389d-99c4-54b075432424.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 62787 IP address blocks: 68.69.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:7e:4c:43:ef:4c:5d:4d:3e:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=9d321ae9-470f-46f8-8ec6-38458fd5af39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:44:06:ae:e7:41:d9:6a:63:61:07:bf:9e:25: 8c:76:c6:ae:0d:06:62:1c:7c:3f:5b:cb:a4:f5:cd: 7b:8c:fd:78:d7:00:fb:67:c8:10:9f:2b:ab:db:8a: 81:1e:ee:52:ee:1a:a8:0a:b1:14:21:ad:21:d1:31: 57:3c:e8:9b:67:5e:65:44:d3:dd:8f:37:21:7b:95: 65:10:f7:8d:eb:31:c3:8a:e7:8f:46:22:9e:65:8a: ac:86:4e:05:ea:5e:59:ee:96:59:b4:83:d9:94:93: 53:c2:73:5f:e2:5f:82:da:a0:aa:03:65:99:7c:ba: 4b:bb:73:b8:7d:b8:c8:63:7f:49:f7:8c:ad:86:98: b2:25:51:7d:04:79:33:e3:ef:23:f1:be:b5:06:9d: d1:7f:0c:fd:e2:d7:2a:bd:51:20:c7:f6:f1:cb:a5: 1b:bc:da:d1:d4:7f:b5:ed:56:6c:30:56:7a:68:83: 49:09:06:d6:58:06:8d:c7:d1:25:55:ef:5a:ce:17: 45:ba:24:ac:7f:1d:79:8d:1c:22:3f:32:bd:60:18: df:30:b3:e0:39:cf:53:17:49:ab:a2:bf:3b:a4:b7: 68:81:7e:4e:89:dc:a7:66:b1:3a:80:b4:7e:44:10: 4d:65:ee:e4:10:93:2f:29:80:12:7a:e0:ca:d8:75: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:97:C5:7A:1D:13:FA:0C:86:3F:81:D1:E7:8C:A1:52:BD:38:02:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/2136fbe9-084d-389d-99c4-54b075432424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 68.69.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:76:94:cd:69:49:1d:69:9d:6f:6b:06:ce:40:f2:91:e0:f0: bf:c6:61:c4:6f:d9:4a:0a:da:4d:a1:6b:6f:2f:e9:60:15:cf: a9:f6:f2:25:7c:4f:84:4a:87:b7:f4:7a:0d:d9:de:0f:fd:8a: 32:be:53:11:cf:2e:7a:ee:0f:0d:38:d6:ce:bc:b0:4a:f9:42: 3e:2a:01:7d:96:83:0a:9e:96:3b:9e:cf:d3:b3:c2:54:51:ee: bc:fb:12:d3:24:f5:50:4a:26:09:ec:ed:d5:fd:db:d2:27:74: 3d:43:e0:74:37:16:78:f9:77:8a:b8:ae:8b:52:3d:1c:2b:58: 34:f0:ae:70:da:fb:6c:d0:7c:d6:77:30:61:0e:cd:62:95:8d: 09:2a:23:fa:74:84:a8:42:b1:56:46:57:a3:51:3d:f7:6e:8c: 54:5f:b5:ce:4a:bd:c0:3e:b0:37:92:b9:be:5c:04:d1:56:2d: 8c:3c:cb:7a:fb:30:1b:8c:c0:40:60:32:9a:c3:cb:08:41:6a: c5:6e:35:aa:4d:51:47:1f:d1:8f:6e:9d:a0:e4:08:81:d8:bd: d5:57:23:e4:b5:09:fb:bf:31:05:ec:d8:29:4f:94:a5:7a:7a: 43:87:7d:09:90:c9:bf:77:13:aa:24:8d:da:53:2a:b3:2f:e5: f0:e5:de:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQn5MQ+9MXU0+o8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk OWQzMjFhZTktNDcwZi00NmY4LThlYzYtMzg0NThmZDVhZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEQGrudB2WpjYQe/niWMdsauDQZiHHw/W8uk 9c17jP141wD7Z8gQnyur24qBHu5S7hqoCrEUIa0h0TFXPOibZ15lRNPdjzche5Vl EPeN6zHDiuePRiKeZYqshk4F6l5Z7pZZtIPZlJNTwnNf4l+C2qCqA2WZfLpLu3O4 fbjIY39J94ythpiyJVF9BHkz4+8j8b61Bp3Rfwz94tcqvVEgx/bxy6UbvNrR1H+1 7VZsMFZ6aINJCQbWWAaNx9ElVe9azhdFuiSsfx15jRwiPzK9YBjfMLPgOc9TF0mr or87pLdogX5OidynZrE6gLR+RBBNZe7kEJMvKYASeuDK2HUEnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCXxXodE/oMhj+B0eeMoVK9OALJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvMjEzNmZiZTktMDg0ZC0z ODlkLTk5YzQtNTRiMDc1NDMyNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ2lM1pSR1pnW9rBs5A8pHg8L/GYcRv2UoK2k2ha28v6WAVz6n28iV8 T4RKh7f0eg3Z3g/9ijK+UxHPLnruDw041s68sEr5Qj4qAX2Wgwqeljuez9OzwlRR 7rz7EtMk9VBKJgns7dX929IndD1D4HQ3Fnj5d4q4rotSPRwrWDTwrnDa+2zQfNZ3 MGEOzWKVjQkqI/p0hKhCsVZGV6NRPfdujFRftc5KvcA+sDeSub5cBNFWLYw8y3r7 MBuMwEBgMprDywhBasVuNapNUUcf0Y9unaDkCIHYvdVXI+S1Cfu/MQXs2ClPlKV6 ekOHfQmQyb93E6okjdpTKrMv5fDl3vE= -----END CERTIFICATE-----Generated at Wed Mar 4 05:02:49 2026 by rpki-client