$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/312a9b01-284f-3e9a-b0b7-7b02008fb992.roa File: 312a9b01-284f-3e9a-b0b7-7b02008fb992.roa (raw, json) Hash identifier: vVD5+0QN7zkWmQclwalYiEiFn4BQXOY8Xkoo8AcJhkw= Subject key identifier: 60:0E:51:86:17:26:8C:2E:DE:9F:FC:4C:C4:D6:2F:FD:E9:5A:F6:66 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584D4A8F8C7FC0D17AFDF1CD2880 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/312a9b01-284f-3e9a-b0b7-7b02008fb992.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 6079 IP address blocks: 68.209.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8c:7f:c0:d1:7a:fd:f1:cd:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=67a9549c-52a1-426b-b472-3f1e5a833953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:63:cc:68:ed:14:39:1c:56:14:92:88:7c:52: 3c:42:b2:10:cb:e7:b6:f5:99:12:f8:52:3c:fc:c9: 2e:ff:dd:fd:04:98:da:2c:43:98:2f:9a:7c:2a:fd: d1:32:57:a5:27:5d:de:cb:78:1b:be:cc:3c:9d:b5: 49:66:cd:37:88:88:22:6c:e2:0a:96:58:65:b4:33: e0:34:f7:5f:29:db:07:8b:44:b9:6e:2f:26:bc:29: ac:c8:1a:a8:bd:7d:04:8c:a3:53:da:e6:55:00:b5: 90:d3:fa:07:3a:6b:59:e6:72:41:47:bf:cd:ec:27: 64:60:d3:10:4f:ad:d7:0e:3f:db:74:2d:06:b9:87: d6:5d:4a:e8:25:56:df:0f:35:9b:31:ab:0e:26:d5: fb:70:23:2e:b5:5f:c5:ca:ed:74:87:0b:a2:83:b4: fb:ce:88:01:16:07:0c:e4:f7:a9:1b:f1:37:f0:eb: c8:1b:d1:07:4e:41:ab:32:73:33:16:e4:b3:ff:c7: 51:fc:71:93:ab:d2:b3:b5:b0:e0:68:1f:4e:15:26: f8:9a:53:3d:dc:1d:c6:99:6f:d9:47:ea:34:08:aa: 32:22:46:a0:83:5b:fa:8c:1a:bf:b7:2b:5a:39:d7: a1:f3:34:7c:e9:ac:98:e9:db:de:bf:9f:2f:36:47: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0E:51:86:17:26:8C:2E:DE:9F:FC:4C:C4:D6:2F:FD:E9:5A:F6:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/312a9b01-284f-3e9a-b0b7-7b02008fb992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 68.209.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:15:b2:88:57:fe:4a:e4:e5:5f:cf:91:9e:e5:2a:16:b8:61: 59:f2:77:d9:5b:fd:09:8e:19:ec:8f:fb:97:51:f1:64:5a:7e: ac:23:4b:ed:f9:16:c9:e0:41:09:08:9c:7f:25:64:37:f0:e7: 07:90:74:39:84:a7:f2:ce:c3:c5:28:67:f1:97:cf:21:49:22: 91:0e:54:c2:52:46:30:1f:c9:9b:a6:ae:43:b7:4f:9f:59:f3: 8d:78:7c:6f:d6:df:b7:fe:1b:29:1e:7b:e0:b7:10:e2:ec:fc: 41:25:e1:d1:c3:19:99:11:93:fc:de:5a:c7:bc:f7:7f:dd:7a: 82:aa:00:9a:59:ce:fb:dc:f1:b3:6d:2e:f5:72:71:43:e5:15: ea:6f:74:20:a8:60:51:8c:a7:46:de:58:e8:5d:75:11:64:85: 3b:c4:8e:03:5e:6e:68:30:9b:74:80:b2:0b:8f:d1:a5:80:85: b4:eb:86:2c:b2:5f:7d:48:fd:9c:d6:8d:b1:85:41:a4:5c:72: 92:75:40:d6:7a:e1:91:1b:f4:98:5c:15:63:ce:80:a3:54:98: 0d:d4:17:12:3a:f5:18:e0:8a:b2:0b:3f:1e:2b:b8:cb:8d:85: 0a:14:7b:e3:5b:3c:6f:8e:0c:e8:a9:12:c1:a7:b1:df:43:95: 1a:34:4d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4x/wNF6/fHNKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NjdhOTU0OWMtNTJhMS00MjZiLWI0NzItM2YxZTVhODMzOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGPMaO0UORxWFJKIfFI8QrIQy+e29ZkS+FI8 /Mku/939BJjaLEOYL5p8Kv3RMlelJ13ey3gbvsw8nbVJZs03iIgibOIKllhltDPg NPdfKdsHi0S5bi8mvCmsyBqovX0EjKNT2uZVALWQ0/oHOmtZ5nJBR7/N7CdkYNMQ T63XDj/bdC0GuYfWXUroJVbfDzWbMasOJtX7cCMutV/Fyu10hwuig7T7zogBFgcM 5PepG/E38OvIG9EHTkGrMnMzFuSz/8dR/HGTq9KztbDgaB9OFSb4mlM93B3GmW/Z R+o0CKoyIkagg1v6jBq/tytaOdeh8zR86ayY6dvev58vNkc4yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAOUYYXJowu3p/8TMTWL/3pWvZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMzEyYTliMDEtMjg0Zi0z ZTlhLWIwYjctN2IwMjAwOGZiOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRNEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8VsohX/krk5V/PkZ7lKha4YVnyd9lb/QmOGeyP+5dR8WRafqwjS+35 FsngQQkInH8lZDfw5weQdDmEp/LOw8UoZ/GXzyFJIpEOVMJSRjAfyZumrkO3T59Z 8414fG/W37f+Gykee+C3EOLs/EEl4dHDGZkRk/zeWse893/deoKqAJpZzvvc8bNt LvVycUPlFepvdCCoYFGMp0beWOhddRFkhTvEjgNebmgwm3SAsguP0aWAhbTrhiyy X31I/ZzWjbGFQaRccpJ1QNZ64ZEb9JhcFWPOgKNUmA3UFxI69RjgirILPx4ruMuN hQoUe+NbPG+ODOipEsGnsd9DlRo0Tdo= -----END CERTIFICATE-----Generated at Mon Apr 13 03:42:22 2026 by rpki-client