$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b12c8a51-7b9b-37e1-839a-9bed854b3f80.roa File: b12c8a51-7b9b-37e1-839a-9bed854b3f80.roa (raw, json) Hash identifier: 0ULSrX11vHt1vSzTNhSq87RqmKmLtqudqS1TiRoH1oU= Subject key identifier: DE:9C:39:F4:92:1E:4D:B9:A8:E6:AA:51:CE:04:AB:47:9B:0C:53:B8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D59EA5E2184C470397C150580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b12c8a51-7b9b-37e1-839a-9bed854b3f80.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 13671 IP address blocks: 68.128.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5e:21:84:c4:70:39:7c:15:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=4296618a-020d-42a7-bb5c-b1f7f7c64e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:05:ca:70:c8:ee:28:46:73:bc:c8:c6:0d: ae:01:5d:62:b6:ad:56:d5:23:58:72:3d:ac:0c:ae: 66:ae:af:aa:f7:c8:cb:13:9e:e5:fe:f3:00:c2:07: ad:ba:c0:d8:83:c0:c7:f6:56:8a:ec:63:a9:55:7a: 71:89:0b:f8:bf:81:62:52:50:f0:32:6f:8f:1b:d9: cc:6a:44:a7:db:7e:b9:9e:2c:62:d6:8d:c1:c8:be: ba:55:15:e1:23:6d:3e:45:db:ee:02:0a:73:42:42: 57:56:b7:79:f1:60:8c:12:ee:17:bf:79:f7:28:30: 13:03:ed:08:ca:11:e0:fd:87:74:41:55:97:c2:ef: 4d:da:53:6e:d2:97:4c:e0:42:76:d7:eb:44:fc:9f: 15:de:9b:a1:73:47:1c:18:b0:73:59:5d:36:b3:a3: f0:d5:df:85:5d:4e:b2:23:5b:b1:50:e8:15:eb:98: 26:f0:47:56:97:f4:30:98:ae:08:47:51:6f:09:9c: e7:ab:10:a2:b0:e6:0d:13:10:e1:48:5a:64:7e:9e: a1:e3:41:1d:24:fd:a9:68:5d:b9:e1:38:ea:93:3d: d7:d6:16:3d:38:c7:c4:3b:32:a2:b0:7e:4d:56:94: 76:bc:9f:cd:67:1c:e0:c5:4c:e4:81:24:42:ef:24: dc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9C:39:F4:92:1E:4D:B9:A8:E6:AA:51:CE:04:AB:47:9B:0C:53:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b12c8a51-7b9b-37e1-839a-9bed854b3f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e0:22:50:6f:53:30:52:a0:11:ab:b5:43:54:61:ff:a9:f0: 4b:99:b8:eb:54:2a:b1:04:ae:b5:76:46:9b:33:97:d1:81:4d: f3:ab:b1:90:43:1e:4c:cc:4f:60:84:33:59:29:fe:ff:62:13: 37:bc:61:ef:3f:28:66:20:a8:be:88:77:d9:8d:80:e9:55:1f: d5:2f:03:f4:c0:2f:1e:56:03:58:a2:55:65:c1:a7:55:25:43: b0:10:83:14:64:4a:8e:90:fd:06:5a:f2:48:3e:55:3e:5b:df: c1:c7:cb:87:ee:2e:be:fc:2b:00:2f:b1:fd:2a:5b:eb:cd:5a: 6b:f1:84:6a:2d:b2:73:b0:b5:04:04:40:6b:9a:f2:b5:73:d4: 79:f7:e5:53:ec:79:40:88:65:1e:89:43:03:99:26:21:ef:be: 9b:e5:55:58:d1:d2:50:b0:cd:23:6f:b5:11:1f:0d:50:b1:a0: 9e:ab:0d:d0:bd:35:14:ef:d3:cc:c4:77:e1:bf:07:4f:2e:60: ef:b6:32:0c:da:96:79:9f:80:d7:6a:5a:74:ae:82:08:9c:0e: 05:98:02:80:c6:d7:f2:f0:dc:e4:10:41:38:18:b9:b9:be:85: 9b:12:a6:ab:4d:59:30:f7:f7:77:74:2a:96:12:38:0c:1f:af: 33:a6:b1:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6l4hhMRwOXwVBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NDI5NjYxOGEtMDIwZC00MmE3LWJiNWMtYjFmN2Y3YzY0ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRMFynDI7ihGc7zIxg2uAV1itq1W1SNYcj2s DK5mrq+q98jLE57l/vMAwgetusDYg8DH9laK7GOpVXpxiQv4v4FiUlDwMm+PG9nM akSn2365nixi1o3ByL66VRXhI20+RdvuAgpzQkJXVrd58WCMEu4Xv3n3KDATA+0I yhHg/Yd0QVWXwu9N2lNu0pdM4EJ21+tE/J8V3puhc0ccGLBzWV02s6Pw1d+FXU6y I1uxUOgV65gm8EdWl/QwmK4IR1FvCZznqxCisOYNExDhSFpkfp6h40EdJP2paF25 4Tjqkz3X1hY9OMfEOzKisH5NVpR2vJ/NZxzgxUzkgSRC7yTcUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6cOfSSHk25qOaqUc4Eq0ebDFO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjEyYzhhNTEtN2I5Yi0z N2UxLTgzOWEtOWJlZDg1NGIzZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/gIlBvUzBSoBGrtUNUYf+p8EuZuOtUKrEErrV2Rpszl9GBTfOrsZBD HkzMT2CEM1kp/v9iEze8Ye8/KGYgqL6Id9mNgOlVH9UvA/TALx5WA1iiVWXBp1Ul Q7AQgxRkSo6Q/QZa8kg+VT5b38HHy4fuLr78KwAvsf0qW+vNWmvxhGotsnOwtQQE QGua8rVz1Hn35VPseUCIZR6JQwOZJiHvvpvlVVjR0lCwzSNvtREfDVCxoJ6rDdC9 NRTv08zEd+G/B08uYO+2MgzalnmfgNdqWnSuggicDgWYAoDG1/Lw3OQQQTgYubm+ hZsSpqtNWTD393d0KpYSOAwfrzOmsS0= -----END CERTIFICATE-----Generated at Mon Apr 13 17:18:08 2026 by rpki-client