$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05af0cf4-89dd-3349-894b-00eb6af7b866.roa File: 05af0cf4-89dd-3349-894b-00eb6af7b866.roa (raw, json) Hash identifier: hnpn8RWCmRX6ogiBnKzlt1P+OVJUvCKVWEfa8ni6ng8= Subject key identifier: 76:CD:D7:75:ED:2B:07:B7:02:45:C9:4E:34:52:9D:F7:71:50:60:50 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D7167A062979C2D46B71EB700 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05af0cf4-89dd-3349-894b-00eb6af7b866.roa Signing time: Wed 08 Apr 2026 22:56:43 +0000 ROA not before: Wed 08 Apr 2026 22:56:43 +0000 ROA not after: Tue 07 Jul 2026 22:56:43 +0000 asID: 7029 IP address blocks: 68.167.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:67:a0:62:97:9c:2d:46:b7:1e:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 8 22:56:43 2026 GMT Not After : Jul 7 22:56:43 2026 GMT Subject: CN=401160f0-b1df-498a-b7b1-a06045bee283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:72:44:9a:36:27:15:bb:3f:2d:f9:d9:fd: ac:f8:ab:f7:27:6c:60:58:d7:69:15:16:bb:f9:8b: 7d:14:d2:61:e1:00:fa:33:bf:a7:c2:49:83:d0:ca: 66:a3:36:95:b1:c4:5a:d3:46:b8:d6:98:ad:49:fc: 3e:9b:39:0f:ef:bc:74:19:c6:49:fb:8a:db:94:62: 83:f6:09:7f:4f:d5:52:9a:0a:f2:17:dd:da:52:74: ba:01:af:8c:d2:8f:6b:5b:53:bd:16:53:7e:fe:ec: 67:b1:21:a8:8f:9f:55:0d:c0:c1:7e:de:ab:e8:6b: 54:fc:ad:af:e0:43:d5:85:18:1e:c7:0e:26:26:57: 0a:fb:a6:4c:fb:aa:cb:8d:f3:3b:94:4c:b7:cf:d3: 91:43:5d:a1:e5:c8:d5:0a:16:88:0e:bd:9b:b7:57: f9:5d:98:8c:28:58:f5:26:9b:fb:63:09:21:f8:19: 37:85:4d:5d:d1:76:38:81:a0:b1:1d:cd:9a:5c:8c: 6a:22:b9:df:79:fa:13:b8:0e:69:82:d2:f1:a6:1f: 09:02:cb:83:6b:93:6c:d9:c0:a0:19:89:7e:97:ba: 27:ef:e7:2b:d7:58:0d:48:9c:dc:48:70:c4:18:15: 83:c0:6c:47:5f:63:18:f9:4c:c6:20:fc:c4:9c:c1: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CD:D7:75:ED:2B:07:B7:02:45:C9:4E:34:52:9D:F7:71:50:60:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05af0cf4-89dd-3349-894b-00eb6af7b866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:92:7f:56:0a:10:6a:8d:ca:01:dc:2e:22:8f:96:7f:23:28: 08:e3:8f:ea:9d:77:d5:3e:59:f6:ac:e0:79:7f:e2:60:b1:98: 6a:83:79:84:6a:fa:b9:ea:b1:89:ab:54:fe:bf:f6:49:e9:f9: d0:75:ef:54:f2:08:86:7a:27:98:62:85:2a:be:0b:fd:44:19: 40:73:f4:93:09:14:e5:e0:8d:23:09:8c:0a:a2:cb:6d:4b:a1: e8:b5:9d:72:5a:2d:54:36:93:d0:40:7d:00:23:55:79:68:10: 0e:ab:4e:73:8d:9d:8d:7f:4b:8e:96:35:ea:f9:5a:43:6d:c3: eb:79:b3:d4:57:e4:d5:0f:6b:a1:5d:03:1b:92:9e:33:d9:35: 43:04:cd:19:90:91:52:3c:24:76:f1:c6:27:35:19:24:95:78: e2:10:a4:51:98:75:c9:16:fd:f8:3d:9d:ff:6d:5c:40:9c:03: cc:81:09:49:49:d9:dd:c9:7c:b2:fa:5c:af:29:cc:49:77:53: 90:c3:4e:3e:83:60:6e:4b:ec:02:09:2a:be:48:ac:da:3f:a0: 24:c5:52:ad:d7:97:ee:21:28:02:a5:05:99:b6:e1:c2:90:9c: e7:2d:12:c7:e8:ec:6f:93:2a:90:56:82:40:d7:9c:af:e0:8d: fb:9a:ac:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xZ6Bil5wtRrcetwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwODIyNTY0M1oXDTI2MDcwNzIyNTY0M1owLzEtMCsGA1UEAxMk NDAxMTYwZjAtYjFkZi00OThhLWI3YjEtYTA2MDQ1YmVlMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7pyRJo2JxW7Py352f2s+Kv3J2xgWNdpFRa7 +Yt9FNJh4QD6M7+nwkmD0MpmozaVscRa00a41pitSfw+mzkP77x0GcZJ+4rblGKD 9gl/T9VSmgryF93aUnS6Aa+M0o9rW1O9FlN+/uxnsSGoj59VDcDBft6r6GtU/K2v 4EPVhRgexw4mJlcK+6ZM+6rLjfM7lEy3z9ORQ12h5cjVChaIDr2bt1f5XZiMKFj1 Jpv7Ywkh+Bk3hU1d0XY4gaCxHc2aXIxqIrnfefoTuA5pgtLxph8JAsuDa5Ns2cCg GYl+l7on7+cr11gNSJzcSHDEGBWDwGxHX2MY+UzGIPzEnMFLxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbN13XtKwe3AkXJTjRSnfdxUGBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDVhZjBjZjQtODlkZC0z MzQ5LTg5NGItMDBlYjZhZjdiODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeSf1YKEGqNygHcLiKPln8jKAjjj+qdd9U+Wfas4Hl/4mCxmGqDeYRq +rnqsYmrVP6/9knp+dB171TyCIZ6J5hihSq+C/1EGUBz9JMJFOXgjSMJjAqiy21L oei1nXJaLVQ2k9BAfQAjVXloEA6rTnONnY1/S46WNer5WkNtw+t5s9RX5NUPa6Fd AxuSnjPZNUMEzRmQkVI8JHbxxic1GSSVeOIQpFGYdckW/fg9nf9tXECcA8yBCUlJ 2d3JfLL6XK8pzEl3U5DDTj6DYG5L7AIJKr5IrNo/oCTFUq3Xl+4hKAKlBZm24cKQ nOctEsfo7G+TKpBWgkDXnK/gjfuarK4= -----END CERTIFICATE-----Generated at Fri Apr 10 23:13:28 2026 by rpki-client