$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb7a48b-258c-3ef5-bcb7-e4352567fe62.roa File: 0fb7a48b-258c-3ef5-bcb7-e4352567fe62.roa (raw, json) Hash identifier: zXNQOCnlL8WSgpehGAyVeOgDKQB4pbnAsOSm+2ywN+Y= Subject key identifier: 80:29:DD:E5:3B:B7:26:E6:1B:53:27:69:C5:8C:00:0A:E4:F8:44:14 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D59EAB21D3F21C8903387D940 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb7a48b-258c-3ef5-bcb7-e4352567fe62.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 13671 IP address blocks: 68.128.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b2:1d:3f:21:c8:90:33:87:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=fc52102a-c334-4c4f-8323-0656636c43c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2b:24:27:1b:37:3f:e8:0b:1f:27:9b:c9:ee: af:62:ec:df:a3:6a:0b:b6:d6:f5:eb:32:06:85:aa: b1:78:2a:2d:01:c7:64:1b:fd:de:49:ea:8f:fa:05: 45:d1:2f:c8:0c:7c:c9:2b:18:e9:a4:a3:6f:7c:b3: 88:e4:8b:de:2a:87:1f:f8:18:1d:7a:8d:87:a2:b5: 9e:f8:b3:72:b5:e1:d8:6e:93:d5:25:f1:3b:88:cf: 12:19:7d:16:48:1c:29:c4:12:e6:26:c3:cc:bd:05: a5:c3:51:27:a5:d3:0d:b4:1e:3d:74:9c:6c:d7:4a: e7:7a:5c:99:35:7e:e3:fe:4a:03:7a:6a:d4:74:b5: 27:a5:af:97:96:d7:cf:a6:80:c8:e6:58:bd:dd:67: 37:a2:4a:da:20:30:a1:a7:d4:45:38:87:c0:5e:97: 7a:b5:b5:43:9e:46:16:8d:bd:07:aa:77:f8:96:f3: c7:10:ba:4b:4d:2d:bd:70:9b:a4:2c:e1:a5:ed:43: 86:d1:eb:c0:23:03:69:82:6b:d7:80:f3:30:f7:c3: c7:1d:d2:63:8c:8e:82:aa:19:7f:cc:c9:2c:26:72: 90:1e:5d:b7:91:27:02:14:ef:2b:d5:81:59:68:56: b7:f9:91:c3:9a:3b:78:4b:ce:5d:4b:c5:35:a1:46: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:29:DD:E5:3B:B7:26:E6:1B:53:27:69:C5:8C:00:0A:E4:F8:44:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0fb7a48b-258c-3ef5-bcb7-e4352567fe62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:da:40:13:e1:c9:6a:c5:44:a5:eb:bf:ef:a1:06:10:16:74: c1:c2:fd:ee:d1:89:28:41:c6:03:e8:e8:4a:54:35:a0:04:14: 55:31:b4:53:b3:47:77:05:7e:fd:b3:e7:88:38:11:8f:e0:52: 3d:8e:bb:68:ed:96:6c:f4:c3:6f:55:9e:51:9d:d2:81:96:26: 1a:86:bd:d5:73:c6:fc:24:14:dc:08:e7:e1:f3:c6:e0:64:a7: e1:17:08:57:c2:ff:a4:c4:61:af:1f:74:63:39:9c:af:90:7d: eb:c6:e7:41:c5:a7:4f:23:2b:81:b7:08:56:d2:dd:b6:c8:16: 1e:57:0e:fc:12:fe:86:11:72:8e:19:c5:2a:90:4b:08:2f:b1: 69:85:2e:50:c6:52:1f:f0:56:16:d7:61:13:6c:d7:da:63:8a: e2:db:6e:36:e0:e5:5a:dd:23:b5:bd:7d:57:5c:54:23:9d:81: 55:90:e5:f4:61:dc:25:64:5d:c9:6a:b6:8b:11:cb:55:2d:de: 0f:7b:86:1f:2b:fc:a5:de:de:95:d4:ac:bd:17:a1:9e:1e:a4: 11:5a:24:82:54:c8:86:41:0d:7c:94:d9:47:b9:57:d3:5e:c1: 15:86:61:30:6f:77:45:d8:5d:e6:3f:2b:22:39:a5:b1:68:5d: 17:ad:32:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rIdPyHIkDOH2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZmM1MjEwMmEtYzMzNC00YzRmLTgzMjMtMDY1NjYzNmM0M2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iskJxs3P+gLHyebye6vYuzfo2oLttb16zIG haqxeCotAcdkG/3eSeqP+gVF0S/IDHzJKxjppKNvfLOI5IveKocf+Bgdeo2HorWe +LNyteHYbpPVJfE7iM8SGX0WSBwpxBLmJsPMvQWlw1EnpdMNtB49dJxs10rnelyZ NX7j/koDemrUdLUnpa+XltfPpoDI5li93Wc3okraIDChp9RFOIfAXpd6tbVDnkYW jb0Hqnf4lvPHELpLTS29cJukLOGl7UOG0evAIwNpgmvXgPMw98PHHdJjjI6Cqhl/ zMksJnKQHl23kScCFO8r1YFZaFa3+ZHDmjt4S85dS8U1oUbV7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAp3eU7tybmG1MnacWMAArk+EQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGZiN2E0OGItMjU4Yy0z ZWY1LWJjYjctZTQzNTI1NjdmZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKraQBPhyWrFRKXrv++hBhAWdMHC/e7RiShBxgPo6EpUNaAEFFUxtFOz R3cFfv2z54g4EY/gUj2Ou2jtlmz0w29VnlGd0oGWJhqGvdVzxvwkFNwI5+HzxuBk p+EXCFfC/6TEYa8fdGM5nK+QfevG50HFp08jK4G3CFbS3bbIFh5XDvwS/oYRco4Z xSqQSwgvsWmFLlDGUh/wVhbXYRNs19pjiuLbbjbg5VrdI7W9fVdcVCOdgVWQ5fRh 3CVkXclqtosRy1Ut3g97hh8r/KXe3pXUrL0XoZ4epBFaJIJUyIZBDXyU2Ue5V9Ne wRWGYTBvd0XYXeY/KyI5pbFoXRetMjs= -----END CERTIFICATE-----Generated at Mon Apr 13 17:14:26 2026 by rpki-client