$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac931aa9-ba03-3746-9cf6-1c71e451632c.roa File: ac931aa9-ba03-3746-9cf6-1c71e451632c.roa (raw, json) Hash identifier: iOj1VPbNlI7kjUWWtdNfideBw/JhC5kbfUvGy/PTSW0= Subject key identifier: CD:19:1C:A4:DF:D2:2A:45:F9:C4:3E:82:2F:4C:FF:D2:B4:A5:58:5C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D59EA450C5B067A856FF17C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac931aa9-ba03-3746-9cf6-1c71e451632c.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 13671 IP address blocks: 68.128.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:45:0c:5b:06:7a:85:6f:f1:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=9486ed36-8b76-4c8c-82a6-a34b56a63647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:1f:7d:a9:5c:33:14:93:c5:c9:e1:3e:7a: 01:d1:ca:50:cd:49:fb:d1:71:55:22:4b:45:1b:55: ea:e1:b5:a6:a3:5a:9b:c8:ed:fe:c4:94:83:68:75: 4b:58:56:3d:f8:99:26:a5:59:27:4d:ad:15:94:6e: 8a:25:39:c6:96:69:ca:15:a6:1f:d4:b5:0e:16:2c: e3:53:a0:45:22:9d:d2:18:ed:b6:29:c6:6b:fb:e2: 55:9b:bb:d4:80:8f:7b:db:69:55:bd:b4:c1:e6:8f: a2:43:f6:ff:ce:db:aa:c1:b4:f7:61:df:eb:b7:9c: ef:3e:49:6a:19:79:c9:26:81:9b:4d:e0:17:5e:f3: 88:ec:ad:ca:5e:7f:8b:97:de:cf:55:1e:4b:d9:a1: f4:3f:a1:e5:cd:76:b7:4e:aa:14:1d:cc:d4:67:47: 8e:ab:d3:77:a3:8a:2e:f4:26:62:67:36:c8:ee:4b: 18:ce:41:7a:c6:8d:97:1a:2b:7e:bb:b1:77:8a:8c: a3:72:9a:8b:30:cd:b2:4a:58:d0:d2:c2:71:fd:50: f2:3d:6b:08:4a:8c:e9:4a:86:a5:28:ce:16:98:18: 27:88:98:e5:94:c8:86:f2:f9:18:6f:27:b2:5e:98: ce:ff:7d:ea:d7:68:cd:d0:20:5e:17:d5:46:c4:0c: 46:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:19:1C:A4:DF:D2:2A:45:F9:C4:3E:82:2F:4C:FF:D2:B4:A5:58:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac931aa9-ba03-3746-9cf6-1c71e451632c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:9a:b3:f4:49:12:a1:e5:29:ac:85:3d:ee:f9:bd:43:0f:b5: 9f:c6:15:e8:42:56:aa:11:2b:8b:98:97:10:e7:e7:c0:94:92: 85:93:8a:40:fb:3a:0d:fb:0c:16:5e:50:27:18:79:5d:14:24: 48:14:b4:0a:ab:7c:e4:69:6b:b1:f2:3f:64:31:04:bd:13:5a: 68:03:0f:82:5d:05:92:e6:e6:34:f8:64:69:4d:5e:cd:2c:a4: 45:81:43:25:77:4e:77:20:d2:d9:52:36:9b:86:be:8a:10:16: de:d3:71:7b:bb:b7:c5:09:ea:49:86:12:0f:3b:c7:7e:17:e5: a9:9b:a0:df:e0:e7:45:84:a9:2c:33:2e:7f:f2:69:34:40:56: a8:f3:70:3b:dc:be:07:be:bc:9f:51:bd:ea:ae:73:e9:06:55: 5d:c0:00:29:3c:ea:55:04:6a:16:7b:0f:2f:f4:2a:8b:89:a8: 7a:7d:35:ff:11:11:a6:45:1c:e2:b2:c8:ed:b4:f9:2d:82:24: 28:9b:64:69:07:f7:c4:6b:13:30:30:d2:59:34:1c:8a:95:9f: 6b:ea:51:c6:4e:60:0d:21:2c:ef:14:1c:56:85:d0:f9:c6:31: fd:2d:df:de:f4:26:3c:24:72:75:85:b6:15:46:71:e8:44:c4: 27:05:3d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6kUMWwZ6hW/xfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OTQ4NmVkMzYtOGI3Ni00YzhjLTgyYTYtYTM0YjU2YTYzNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5IffalcMxSTxcnhPnoB0cpQzUn70XFVIktF G1Xq4bWmo1qbyO3+xJSDaHVLWFY9+JkmpVknTa0VlG6KJTnGlmnKFaYf1LUOFizj U6BFIp3SGO22KcZr++JVm7vUgI9722lVvbTB5o+iQ/b/ztuqwbT3Yd/rt5zvPklq GXnJJoGbTeAXXvOI7K3KXn+Ll97PVR5L2aH0P6HlzXa3TqoUHczUZ0eOq9N3o4ou 9CZiZzbI7ksYzkF6xo2XGit+u7F3ioyjcpqLMM2ySljQ0sJx/VDyPWsISozpSoal KM4WmBgniJjllMiG8vkYbyeyXpjO/33q12jN0CBeF9VGxAxGWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0ZHKTf0ipF+cQ+gi9M/9K0pVhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWM5MzFhYTktYmEwMy0z NzQ2LTljZjYtMWM3MWU0NTE2MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeas/RJEqHlKayFPe75vUMPtZ/GFehCVqoRK4uYlxDn58CUkoWTikD7 Og37DBZeUCcYeV0UJEgUtAqrfORpa7HyP2QxBL0TWmgDD4JdBZLm5jT4ZGlNXs0s pEWBQyV3Tncg0tlSNpuGvooQFt7TcXu7t8UJ6kmGEg87x34X5amboN/g50WEqSwz Ln/yaTRAVqjzcDvcvge+vJ9Rvequc+kGVV3AACk86lUEahZ7Dy/0KouJqHp9Nf8R EaZFHOKyyO20+S2CJCibZGkH98RrEzAw0lk0HIqVn2vqUcZOYA0hLO8UHFaF0PnG Mf0t3970JjwkcnWFthVGcehExCcFPQw= -----END CERTIFICATE-----Generated at Mon Apr 13 17:19:38 2026 by rpki-client