$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa File: 3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa (raw, json) Hash identifier: dsYMdX1ep1oAMQKWQQdeCcH2j8Qyn5F84UQpJUBvJPQ= Subject key identifier: BD:68:C1:6B:BF:DE:98:88:F7:A1:68:08:20:B9:58:7A:A8:95:88:6C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D59EAAF4D56E89B8386340180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 13671 IP address blocks: 68.128.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:af:4d:56:e8:9b:83:86:34:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=af93ea07-48fe-4597-9a19-bd94f7282f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:a3:1e:23:7e:27:4c:f5:fb:3f:66:9d:c6: 7e:14:09:fc:15:3c:8a:6a:82:8b:af:8f:38:d5:1b: cc:b4:13:38:12:ef:3c:fd:ec:16:cc:41:09:c9:4c: 77:49:44:48:e2:d2:2a:12:37:d6:12:c2:c0:78:49: fd:80:f7:f0:e4:0d:31:bc:52:0d:95:dd:36:52:14: 55:e2:3a:99:00:04:25:cd:31:0c:b5:ec:4f:d8:59: a6:84:1f:74:60:1b:34:ff:45:73:44:2f:26:fd:12: 10:d0:e0:ed:07:72:3e:a1:a0:6c:e7:ed:bf:a1:43: 4e:2e:f8:60:91:47:53:de:f7:51:86:4b:bf:aa:b1: 88:a8:d8:b5:8c:d2:f3:66:5e:36:7c:ea:c7:d9:6e: 91:2a:dd:7f:83:f2:9f:82:43:6f:74:42:b4:77:86: 73:71:03:8e:1a:da:2c:73:8a:dd:91:47:29:f4:db: c7:c1:af:6e:d5:8e:43:d6:95:ad:0d:9c:ae:91:2d: bb:7c:88:0d:41:33:e0:6d:bb:6b:00:75:37:00:f4: 57:5b:49:e1:7c:4c:7e:dc:e5:5d:34:8f:ee:88:67: 97:0d:e7:ed:92:16:f0:41:41:43:d9:ed:ca:7c:19: c1:f2:cc:b3:05:af:43:44:3e:b7:84:e1:68:00:a3: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:68:C1:6B:BF:DE:98:88:F7:A1:68:08:20:B9:58:7A:A8:95:88:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c7db9b9-727d-39cf-8dfb-b3d86991d9d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:50:ce:cc:3b:83:ad:7c:3b:a3:c9:7b:35:a8:a2:8d:8c:41: cb:96:2a:ce:ce:2c:4d:42:a6:c2:24:77:c2:13:ee:72:20:bf: de:82:65:79:77:f4:11:64:90:d1:06:8c:0e:d8:b4:95:44:38: 36:6e:44:43:4d:40:e7:49:2c:c4:41:22:86:62:ca:fc:30:55: cd:41:e1:cb:74:b7:c1:2d:58:0f:57:66:f1:af:55:68:72:fc: 39:3b:7b:00:56:a4:08:f6:98:ba:1d:2b:f1:b5:94:a6:d4:bf: 85:29:16:bb:ef:bd:c4:d7:29:67:11:5c:c8:3a:83:e9:1e:e6: 83:98:ac:b7:a1:34:e4:2a:d9:6b:7e:cf:79:b9:5b:4d:73:ad: ea:c6:15:0a:01:f0:33:89:e9:54:76:97:b9:c1:b3:f4:bd:d3: d0:eb:6d:b4:18:a4:45:e3:58:b1:15:c2:81:90:10:15:c6:c8: 12:08:66:07:7a:14:5e:c7:90:94:18:7f:75:75:1a:b8:e1:0b: 4e:f3:a5:ff:86:1f:6a:92:56:c6:07:d8:f3:82:5a:34:b0:08: 2b:25:d3:22:e8:18:f8:23:f8:91:fc:79:99:1d:78:49:5b:4b: 67:be:ca:55:be:40:6e:59:a2:ed:98:af:88:b3:77:2c:b7:49: 45:01:35:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6q9NVuibg4Y0AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YWY5M2VhMDctNDhmZS00NTk3LTlhMTktYmQ5NGY3MjgyZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskCjHiN+J0z1+z9mncZ+FAn8FTyKaoKLr484 1RvMtBM4Eu88/ewWzEEJyUx3SURI4tIqEjfWEsLAeEn9gPfw5A0xvFINld02UhRV 4jqZAAQlzTEMtexP2FmmhB90YBs0/0VzRC8m/RIQ0ODtB3I+oaBs5+2/oUNOLvhg kUdT3vdRhku/qrGIqNi1jNLzZl42fOrH2W6RKt1/g/KfgkNvdEK0d4ZzcQOOGtos c4rdkUcp9NvHwa9u1Y5D1pWtDZyukS27fIgNQTPgbbtrAHU3APRXW0nhfEx+3OVd NI/uiGeXDeftkhbwQUFD2e3KfBnB8syzBa9DRD63hOFoAKOQjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1owWu/3piI96FoCCC5WHqolYhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2M3ZGI5YjktNzI3ZC0z OWNmLThkZmItYjNkODY5OTFkOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFQzsw7g618O6PJezWooo2MQcuWKs7OLE1CpsIkd8IT7nIgv96CZXl3 9BFkkNEGjA7YtJVEODZuRENNQOdJLMRBIoZiyvwwVc1B4ct0t8EtWA9XZvGvVWhy /Dk7ewBWpAj2mLodK/G1lKbUv4UpFrvvvcTXKWcRXMg6g+ke5oOYrLehNOQq2Wt+ z3m5W01zrerGFQoB8DOJ6VR2l7nBs/S909DrbbQYpEXjWLEVwoGQEBXGyBIIZgd6 FF7HkJQYf3V1GrjhC07zpf+GH2qSVsYH2POCWjSwCCsl0yLoGPgj+JH8eZkdeElb S2e+ylW+QG5Zou2Yr4izdyy3SUUBNW0= -----END CERTIFICATE-----Generated at Mon Apr 13 19:34:55 2026 by rpki-client