$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa File: 892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa (raw, json) Hash identifier: SEcgECtgYVMGH36FyIlq2cfWWhhGBN3MGOPxtaBQ+Wc= Subject key identifier: 96:AC:CA:0A:CC:40:C1:CA:C5:85:8B:64:B6:6C:F3:DA:CE:BE:A7:E2 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D60E4FA6A897B93581A586E00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 68.64.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:fa:6a:89:7b:93:58:1a:58:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=8e7cdce5-5f9f-417b-ac8c-5bfa20891010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:f7:76:69:07:dc:de:36:45:38:37:08:b3: 1f:6a:e6:a4:91:54:7b:7f:36:56:d6:c8:60:71:6c: 61:91:dd:d0:e9:8d:b2:40:62:c1:dc:ff:2e:b8:af: 2e:5e:54:72:4e:a5:b4:bb:5f:84:84:81:84:2b:98: 09:c1:b0:d2:1d:e7:8b:f5:aa:76:33:05:c8:b6:26: 2d:57:cd:12:a7:56:49:27:81:fd:36:f8:c4:6d:19: e6:03:2a:56:ad:69:60:16:7a:02:5a:ff:7f:07:06: 36:b2:b8:0d:8b:e3:a9:72:b2:43:0c:96:61:f1:ba: 84:88:bb:f3:f9:16:06:a5:88:43:6f:57:0f:c9:cd: 24:74:84:c4:b3:1a:44:6a:b9:fe:f1:3d:b2:ea:c4: 8f:fd:b2:a6:6c:7b:0e:38:e5:77:b3:f5:7f:06:8f: 7f:b7:83:8b:8f:ef:ee:75:ca:de:2e:c4:0f:8b:58: 4a:72:68:f1:7d:b9:6b:65:3e:ed:ba:61:ad:f3:60: 56:27:81:66:cf:74:21:76:74:f2:a8:72:5d:1b:2a: 1e:ed:02:7f:65:12:7f:0c:e7:92:43:2a:94:19:2b: f4:e9:5e:0f:02:11:1d:ab:b9:8d:f5:fc:b6:2f:27: 64:67:fd:84:c5:6e:b6:a5:95:15:0e:59:f2:c3:12: 67:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AC:CA:0A:CC:40:C1:CA:C5:85:8B:64:B6:6C:F3:DA:CE:BE:A7:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:05:d5:fa:71:47:4b:60:2d:0f:31:b5:a0:17:2b:44:e6:0b: 76:9c:d1:2c:00:e0:9f:fd:85:67:fd:90:cb:a4:71:6e:6c:e0: 9e:0f:16:3b:b0:5a:46:ab:8d:13:48:d6:8c:16:f8:55:07:82: a2:52:d0:53:43:26:cf:f9:84:15:3b:38:e7:50:fb:8b:56:8c: 82:96:a8:05:2c:6c:92:6d:00:08:59:7a:cc:be:d6:69:81:a3: 7c:00:54:29:51:2a:8a:b4:96:9e:b8:a9:bc:0a:72:3f:a2:34: c6:d8:16:42:02:b1:2b:ee:3c:19:9c:d6:2e:58:05:01:77:d5: 30:53:1f:f9:19:76:00:c1:a8:94:98:42:1e:84:7b:99:37:19: 47:65:67:f9:e0:91:07:90:9c:3a:5b:f7:b3:af:c3:1c:b0:d2: c2:39:ca:49:4f:34:78:bf:c9:a8:6e:c0:26:f2:03:6f:c6:61: d9:67:f6:21:28:cd:8f:32:ce:5c:f1:dd:4f:a0:45:73:a8:7e: d9:9c:05:29:43:e3:21:a3:2d:de:57:88:72:f3:f5:81:e2:48: aa:7a:63:e8:1d:18:03:0f:f7:5d:2d:ee:09:19:4d:cc:c6:ea: 13:48:33:f0:b0:fa:51:87:cb:57:f3:56:86:dd:c8:d7:87:c6: 97:27:7a:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PpqiXuTWBpYbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk OGU3Y2RjZTUtNWY5Zi00MTdiLWFjOGMtNWJmYTIwODkxMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHP3dmkH3N42RTg3CLMfauakkVR7fzZW1shg cWxhkd3Q6Y2yQGLB3P8uuK8uXlRyTqW0u1+EhIGEK5gJwbDSHeeL9ap2MwXItiYt V80Sp1ZJJ4H9NvjEbRnmAypWrWlgFnoCWv9/BwY2srgNi+OpcrJDDJZh8bqEiLvz +RYGpYhDb1cPyc0kdITEsxpEarn+8T2y6sSP/bKmbHsOOOV3s/V/Bo9/t4OLj+/u dcreLsQPi1hKcmjxfblrZT7tumGt82BWJ4Fmz3QhdnTyqHJdGyoe7QJ/ZRJ/DOeS QyqUGSv06V4PAhEdq7mN9fy2LydkZ/2ExW62pZUVDlnywxJnGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJasygrMQMHKxYWLZLZs89rOvqfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODkyYzcxNTMtNmVmMS0z ZDkwLThhM2ItODFlZWM4ZWM4ODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYF1fpxR0tgLQ8xtaAXK0TmC3ac0SwA4J/9hWf9kMukcW5s4J4PFjuw WkarjRNI1owW+FUHgqJS0FNDJs/5hBU7OOdQ+4tWjIKWqAUsbJJtAAhZesy+1mmB o3wAVClRKoq0lp64qbwKcj+iNMbYFkICsSvuPBmc1i5YBQF31TBTH/kZdgDBqJSY Qh6Ee5k3GUdlZ/ngkQeQnDpb97Ovwxyw0sI5yklPNHi/yahuwCbyA2/GYdln9iEo zY8yzlzx3U+gRXOoftmcBSlD4yGjLd5XiHLz9YHiSKp6Y+gdGAMP910t7gkZTczG 6hNIM/Cw+lGHy1fzVobdyNeHxpcneps= -----END CERTIFICATE-----Generated at Tue Apr 7 10:36:13 2026 by rpki-client