$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b60b01c-d2f1-3ee6-ab72-6de8886a093b.roa File: 3b60b01c-d2f1-3ee6-ab72-6de8886a093b.roa (raw, json) Hash identifier: PsoiM0LAFag+epPiIvk6ATbHF8D4n+R/Vbxqmr50iRE= Subject key identifier: 00:21:34:B8:2F:38:83:24:EE:C7:F2:43:78:62:CB:EE:9B:E7:96:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC51E51AA9BAD34CD6DCC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b60b01c-d2f1-3ee6-ab72-6de8886a093b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.61.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:51:e5:1a:a9:ba:d3:4c:d6:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=f99de9fa-13ea-48d4-a2dd-f65f135df625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:c6:dd:f0:5b:ab:ee:f0:12:4a:98:e7:b7: 13:e4:97:65:44:65:f4:04:09:06:49:49:45:49:3a: 56:27:65:0a:30:61:fc:4c:73:4a:27:5f:10:ab:27: b3:ae:39:84:68:b2:87:e8:97:9b:e1:bd:ef:75:2d: e2:91:6a:bb:3f:c4:ce:8f:a0:74:d3:15:03:3d:fe: 82:47:19:21:f3:0a:6a:37:37:27:55:0d:38:c9:e6: 2f:42:7d:1b:1a:c6:8f:df:99:0f:ec:59:93:32:7a: c9:88:20:7d:cf:5f:42:95:c3:d9:cd:85:37:9a:08: b3:4d:aa:c2:99:2f:a6:bb:b8:51:02:eb:27:e5:46: da:a4:fa:6d:c4:0d:fa:ca:48:1c:81:42:d3:7d:ed: c5:d9:23:79:59:ed:32:65:82:31:47:24:1d:ac:b4: e1:48:ee:74:f3:03:3f:55:15:c8:5c:c4:31:03:a4: 86:15:74:7b:69:d5:6f:d8:ec:a6:9a:f3:2b:64:e3: e7:fb:60:87:cf:77:1b:b2:26:ea:df:e7:88:ef:ab: 54:7e:e8:da:42:af:09:e8:d1:eb:29:34:19:02:fb: 03:2a:c3:1b:30:78:dc:09:e6:2f:2e:eb:16:05:85: 60:36:2e:e1:41:3a:d0:63:a3:51:ab:10:07:d1:83: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:21:34:B8:2F:38:83:24:EE:C7:F2:43:78:62:CB:EE:9B:E7:96:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b60b01c-d2f1-3ee6-ab72-6de8886a093b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.61.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:2d:32:9c:a5:ff:9f:d9:79:bb:4e:25:a8:92:f6:7f:78:02: c2:76:2d:1d:66:c1:1e:3f:52:d6:6e:a9:fd:b7:d0:43:b9:6b: fb:b7:ef:1a:6b:ff:76:ec:3b:9e:b6:27:a5:72:14:7d:e4:18: a4:c2:61:3f:64:2d:77:f0:d8:f2:22:10:64:0c:32:bd:ab:67: 53:74:6b:db:02:98:ec:92:8d:04:70:02:9a:7f:53:69:52:3e: 12:87:6b:63:09:7d:e8:45:ef:64:e0:94:dc:df:45:ca:be:c1: 8c:38:ba:58:f9:82:cf:e0:01:a3:51:0d:a5:0f:ad:e2:1c:d6: 85:49:21:21:39:7b:6d:19:df:b7:0a:31:5a:a3:5e:f4:d3:66: c2:3e:94:af:20:0b:8d:1d:0a:1a:c6:ac:57:61:d5:44:95:15: 0e:db:ef:3e:d1:6b:e5:98:cd:7d:6b:9f:3d:73:a7:17:d6:73: c2:fe:17:bd:22:4c:bf:28:f5:31:7e:00:91:1a:d5:f4:2e:80: 3c:d7:c2:1d:10:aa:22:1f:ad:59:01:ad:f4:ca:03:08:f6:88: 96:f5:d0:49:38:11:a2:24:91:b1:57:ac:16:5b:5d:28:ff:17: e0:39:89:d2:c2:e5:6e:cc:51:a9:64:56:29:d7:ed:79:98:5e: fa:a7:ce:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvFHlGqm600zW3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Zjk5ZGU5ZmEtMTNlYS00OGQ0LWEyZGQtZjY1ZjEzNWRmNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIzG3fBbq+7wEkqY57cT5JdlRGX0BAkGSUlF STpWJ2UKMGH8THNKJ18QqyezrjmEaLKH6Jeb4b3vdS3ikWq7P8TOj6B00xUDPf6C Rxkh8wpqNzcnVQ04yeYvQn0bGsaP35kP7FmTMnrJiCB9z19ClcPZzYU3mgizTarC mS+mu7hRAusn5UbapPptxA36ykgcgULTfe3F2SN5We0yZYIxRyQdrLThSO508wM/ VRXIXMQxA6SGFXR7adVv2OymmvMrZOPn+2CHz3cbsibq3+eI76tUfujaQq8J6NHr KTQZAvsDKsMbMHjcCeYvLusWBYVgNi7hQTrQY6NRqxAH0YNujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAhNLgvOIMk7sfyQ3hiy+6b55aEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2I2MGIwMWMtZDJmMS0z ZWU2LWFiNzItNmRlODg4NmEwOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARD1+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQtMpyl/5/ZebtOJaiS9n94AsJ2LR1mwR4/UtZuqf230EO5a/u37xpr /3bsO562J6VyFH3kGKTCYT9kLXfw2PIiEGQMMr2rZ1N0a9sCmOySjQRwApp/U2lS PhKHa2MJfehF72TglNzfRcq+wYw4ulj5gs/gAaNRDaUPreIc1oVJISE5e20Z37cK MVqjXvTTZsI+lK8gC40dChrGrFdh1USVFQ7b7z7Ra+WYzX1rnz1zpxfWc8L+F70i TL8o9TF+AJEa1fQugDzXwh0QqiIfrVkBrfTKAwj2iJb10Ek4EaIkkbFXrBZbXSj/ F+A5idLC5W7MUalkVinX7XmYXvqnzmk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:28:43 2026 by rpki-client