$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9598d97e-8bb5-3a24-97fa-ec089c7aab8a.roa File: 9598d97e-8bb5-3a24-97fa-ec089c7aab8a.roa (raw, json) Hash identifier: W+41bs0bM/714NS/EJtV1iaffpGU6joBqvbbP+pltZU= Subject key identifier: ED:BE:98:BC:A7:13:E4:A2:43:98:B6:29:64:8C:52:39:F2:F9:B5:F6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D59EA4E379BE76D1353A7DB28 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9598d97e-8bb5-3a24-97fa-ec089c7aab8a.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 1387 IP address blocks: 68.128.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:4e:37:9b:e7:6d:13:53:a7:db:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=063ff507-0424-4539-9ecc-24df6b33915c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3c:3c:e8:62:5a:01:86:6a:cf:83:3a:27:0c: 72:fb:71:82:1c:99:a6:f3:0c:8f:47:69:d7:49:61: db:2d:ad:51:47:04:82:c2:2d:24:c0:09:ce:d0:c7: e4:33:c5:e1:a6:23:b3:7e:06:f3:ca:d0:5f:3f:8f: 79:e2:c9:b2:70:1d:fa:f4:11:8e:f2:86:7f:56:3a: 0a:5e:3c:87:2d:43:d6:21:c0:53:7a:03:58:50:a7: cf:ad:67:33:2a:e0:6b:26:da:5f:1b:0f:c2:31:78: 41:96:3e:c8:a5:2a:4f:a5:78:15:87:bb:80:f5:5c: b0:47:09:ea:13:11:08:96:75:b3:03:0a:2b:20:84: 85:75:b4:68:91:60:06:a2:f9:30:b5:75:47:84:07: ca:5d:92:78:d2:c5:3a:76:6c:af:44:6d:72:bd:e6: 52:d6:b7:44:7f:2d:57:d1:ee:41:ee:76:14:54:89: ab:50:04:ce:01:62:29:d1:34:23:fa:27:fa:a7:da: ad:6c:b2:1d:ed:f9:a5:f4:1c:1e:b9:a4:49:ed:b6: a0:83:a2:f5:22:f7:14:4f:64:71:c8:64:64:1d:24: 4c:fc:cb:96:3a:76:97:69:7e:40:90:30:5b:9a:76: a1:f5:ac:0a:a7:7b:35:37:a4:2e:5a:ff:05:35:68: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BE:98:BC:A7:13:E4:A2:43:98:B6:29:64:8C:52:39:F2:F9:B5:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9598d97e-8bb5-3a24-97fa-ec089c7aab8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:99:3c:cc:84:e7:5b:69:f0:d6:f5:a3:8e:e0:e5:c1:f9:86: 5b:19:4c:1b:af:df:8a:a8:d9:8e:40:25:ed:9f:69:a0:45:31: 30:c1:6c:a2:f5:6a:77:2e:f9:54:a7:b5:ce:06:e1:b7:b8:72: 8c:60:83:c3:4f:09:d2:a5:bc:13:7b:8a:60:53:96:09:b7:37: d6:e5:66:7b:0b:98:aa:37:fc:d9:5e:c8:ea:14:42:ff:32:77: b2:72:57:30:80:e5:60:5d:3d:cb:95:fc:19:18:17:eb:c7:ba: 28:71:8b:a3:f7:02:80:3b:b9:d4:78:0b:b2:8a:97:fd:7c:7d: d6:58:92:12:1e:02:73:67:cc:a5:ac:f9:a2:1a:8d:6f:e4:e5: ed:38:c6:0d:f6:71:fd:bb:a9:0f:d8:60:bd:83:17:91:73:d6: 0e:91:2e:48:87:5f:81:f6:8f:8a:7f:ad:31:7c:db:0b:bf:81: 68:41:5a:f1:50:18:9e:1c:83:26:cd:5c:44:09:ee:e6:a7:a2: 81:92:af:f5:5e:a4:fb:c2:f5:65:83:c2:41:a3:cd:74:cd:41: 95:bc:a4:aa:7a:00:8b:ed:23:6c:71:53:20:fd:d1:b9:3b:33: 39:ce:a4:c8:c3:27:3c:3a:8d:e8:42:5d:04:b5:89:aa:0a:e1: 7e:f9:ae:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6k43m+dtE1On2ygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MDYzZmY1MDctMDQyNC00NTM5LTllY2MtMjRkZjZiMzM5MTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDw86GJaAYZqz4M6Jwxy+3GCHJmm8wyPR2nX SWHbLa1RRwSCwi0kwAnO0MfkM8XhpiOzfgbzytBfP4954smycB369BGO8oZ/VjoK XjyHLUPWIcBTegNYUKfPrWczKuBrJtpfGw/CMXhBlj7IpSpPpXgVh7uA9VywRwnq ExEIlnWzAworIISFdbRokWAGovkwtXVHhAfKXZJ40sU6dmyvRG1yveZS1rdEfy1X 0e5B7nYUVImrUATOAWIp0TQj+if6p9qtbLId7fml9BweuaRJ7bagg6L1IvcUT2Rx yGRkHSRM/MuWOnaXaX5AkDBbmnah9awKp3s1N6QuWv8FNWgqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2+mLynE+SiQ5i2KWSMUjny+bX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTU5OGQ5N2UtOGJiNS0z YTI0LTk3ZmEtZWMwODljN2FhYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWZPMyE51tp8Nb1o47g5cH5hlsZTBuv34qo2Y5AJe2faaBFMTDBbKL1 ancu+VSntc4G4be4coxgg8NPCdKlvBN7imBTlgm3N9blZnsLmKo3/NleyOoUQv8y d7JyVzCA5WBdPcuV/BkYF+vHuihxi6P3AoA7udR4C7KKl/18fdZYkhIeAnNnzKWs +aIajW/k5e04xg32cf27qQ/YYL2DF5Fz1g6RLkiHX4H2j4p/rTF82wu/gWhBWvFQ GJ4cgybNXEQJ7uanooGSr/VepPvC9WWDwkGjzXTNQZW8pKp6AIvtI2xxUyD90bk7 MznOpMjDJzw6jehCXQS1iaoK4X75rl4= -----END CERTIFICATE-----Generated at Mon Apr 13 17:15:43 2026 by rpki-client