$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec21cdd1-d4ff-3e16-aa1d-163f9a6c9027.roa File: ec21cdd1-d4ff-3e16-aa1d-163f9a6c9027.roa (raw, json) Hash identifier: hmT+nDV6XEPUrPED1e9pOZEQ5KDb6yKNxCs8PWgyrgQ= Subject key identifier: D9:E4:0E:61:8E:A8:E5:A4:52:46:7B:81:AA:C5:37:0F:54:F1:54:BD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D59EAB28441AA73242793C680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec21cdd1-d4ff-3e16-aa1d-163f9a6c9027.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 13671 IP address blocks: 68.128.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b2:84:41:aa:73:24:27:93:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=e1ca852b-b529-4297-9f13-ea296f5acedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:1b:ba:f0:44:7a:70:3d:89:2f:ec:6c:b9: 6d:7e:82:0b:6d:aa:d4:75:53:59:b7:b9:ab:6c:97: 97:c5:f0:f3:c4:fc:66:b1:01:b4:85:a7:4a:da:47: 81:11:60:ef:68:c6:1f:82:82:c8:1b:75:8a:91:4a: a4:bd:b4:6b:02:df:a1:cf:5d:37:37:b4:de:a9:c0: d8:a3:93:91:bd:16:ff:33:57:c5:14:6d:40:ab:d7: 6b:70:6d:a7:fe:64:80:c9:53:21:27:df:c2:44:d6: e9:ff:68:65:12:a0:f9:b7:00:03:c2:69:69:6c:01: d4:0e:a8:40:eb:f6:47:99:60:53:a4:37:88:61:29: 40:9b:25:67:5b:88:7a:9a:d3:2f:ed:6c:74:a7:40: b1:a7:10:b7:ea:64:d2:95:31:90:25:a5:ed:c1:d2: 09:98:22:ad:75:31:df:27:e3:94:e7:4f:7d:e4:14: 9d:79:cb:09:6e:db:34:f5:7e:b1:ed:31:c1:a5:1d: 0e:35:21:35:84:11:63:a4:d2:99:ca:6b:5a:ea:3e: 6d:2d:0a:ba:38:d6:50:ed:38:19:80:c2:f8:a0:e7: 23:dd:76:7e:d8:c7:c4:1a:8e:59:d9:7b:ff:c6:78: 39:ca:55:a2:dd:1e:98:85:d6:c2:a1:23:34:ee:bd: 5d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E4:0E:61:8E:A8:E5:A4:52:46:7B:81:AA:C5:37:0F:54:F1:54:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec21cdd1-d4ff-3e16-aa1d-163f9a6c9027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c2:6a:78:24:46:24:b4:97:3d:b7:c9:14:5b:4f:0a:7c:6b: b8:e6:e9:c7:e7:6d:1c:ca:05:49:53:c2:4f:bc:ee:a6:0b:32: 55:e1:6d:35:69:18:9d:31:8b:2e:69:e8:46:71:41:bb:e6:dc: 9c:ab:70:26:c5:af:40:32:52:1d:ae:cd:0b:07:1d:7a:df:2c: 5a:2c:bd:d3:8a:02:b9:c3:9c:5a:1e:c4:e0:a0:a7:0d:90:b2: e1:92:65:02:62:a4:b0:c3:84:22:7f:af:a8:b5:2d:ae:2c:32: eb:06:0f:e3:bf:35:44:a0:aa:6b:7f:6c:ce:5b:66:cb:8d:8d: e3:0b:93:31:35:88:a2:03:7c:15:8f:11:a2:6b:88:b0:7d:99: aa:3f:56:0b:25:66:a7:eb:fc:a3:3b:e6:3c:0f:a3:cf:34:6b: 63:18:14:41:7d:7c:07:0f:74:49:41:73:32:e5:01:3e:98:ea: b6:44:96:b7:83:cd:6a:ba:ee:d3:c2:11:ae:79:94:11:3e:a4: 2b:a1:90:b5:ca:ff:36:c3:07:12:08:af:5c:73:3c:ed:7b:c3: 77:12:68:fa:bf:cf:98:57:16:12:e3:cd:69:30:4b:e1:56:3e: 16:df:3b:e6:97:07:0a:9a:d5:e3:31:d4:cd:a0:71:09:0a:fd: a1:c1:55:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rKEQapzJCeTxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZTFjYTg1MmItYjUyOS00Mjk3LTlmMTMtZWEyOTZmNWFjZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofEbuvBEenA9iS/sbLltfoILbarUdVNZt7mr bJeXxfDzxPxmsQG0hadK2keBEWDvaMYfgoLIG3WKkUqkvbRrAt+hz103N7TeqcDY o5ORvRb/M1fFFG1Aq9drcG2n/mSAyVMhJ9/CRNbp/2hlEqD5twADwmlpbAHUDqhA 6/ZHmWBTpDeIYSlAmyVnW4h6mtMv7Wx0p0CxpxC36mTSlTGQJaXtwdIJmCKtdTHf J+OU50995BSdecsJbts09X6x7THBpR0ONSE1hBFjpNKZymta6j5tLQq6ONZQ7TgZ gML4oOcj3XZ+2MfEGo5Z2Xv/xng5ylWi3R6YhdbCoSM07r1dlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnkDmGOqOWkUkZ7garFNw9U8VS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWMyMWNkZDEtZDRmZi0z ZTE2LWFhMWQtMTYzZjlhNmM5MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARIDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrCangkRiS0lz23yRRbTwp8a7jm6cfnbRzKBUlTwk+87qYLMlXhbTVp GJ0xiy5p6EZxQbvm3JyrcCbFr0AyUh2uzQsHHXrfLFosvdOKArnDnFoexOCgpw2Q suGSZQJipLDDhCJ/r6i1La4sMusGD+O/NUSgqmt/bM5bZsuNjeMLkzE1iKIDfBWP EaJriLB9mao/VgslZqfr/KM75jwPo880a2MYFEF9fAcPdElBczLlAT6Y6rZElreD zWq67tPCEa55lBE+pCuhkLXK/zbDBxIIr1xzPO17w3cSaPq/z5hXFhLjzWkwS+FW PhbfO+aXBwqa1eMx1M2gcQkK/aHBVf8= -----END CERTIFICATE-----Generated at Mon Apr 13 17:17:58 2026 by rpki-client