$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/60523804-6701-3c22-9743-09e45be5071e.roa File: 60523804-6701-3c22-9743-09e45be5071e.roa (raw, json) Hash identifier: UUQO2PmAxUnD/0MvXgLs4X/6TS11Qj00NLALq28lKGo= Subject key identifier: 06:54:52:C0:05:CE:F8:83:4F:E7:61:BA:D1:8D:21:D7:06:AF:EB:40 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A052FD8BA8B357423DAD680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/60523804-6701-3c22-9743-09e45be5071e.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 18973 IP address blocks: 198.138.68.0/23 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2f:d8:ba:8b:35:74:23:da:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=44433f05-fb5c-4d19-ac48-7a05bcbd4861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:4f:5b:0d:96:f1:6a:f1:ff:9a:59:00:5b: 50:a5:b2:f7:f1:db:86:89:1f:f9:16:43:b2:f9:09: 3c:58:6d:27:86:90:5f:e1:dc:af:3e:3e:03:8b:3a: 50:6d:89:66:ef:3a:89:45:73:e1:00:b2:0b:72:ba: db:6b:5c:bb:89:87:2e:6c:d9:65:f2:69:dd:92:78: 8b:c5:2a:5b:45:10:08:30:80:13:2a:47:90:5b:b9: 1c:64:c2:61:c3:7d:5f:6e:49:74:35:a0:5a:3b:be: 0d:6d:69:a1:b4:4e:57:89:08:66:68:6d:f3:db:80: 15:45:0d:8b:90:0f:81:e2:57:e8:54:74:93:44:e3: e4:9d:db:a1:fe:29:87:ad:07:48:ba:30:18:f7:36: f3:fe:95:22:df:ee:60:e8:0f:b1:97:33:ac:71:3a: d4:6d:2e:35:db:9c:46:db:90:49:c3:40:48:22:e3: 7e:c0:08:ea:a3:e2:f8:db:13:62:7f:69:6f:8f:37: 70:d8:42:ab:8d:4e:17:2e:82:f9:56:2a:b4:45:ef: ed:4b:ec:ec:6d:52:94:df:64:f0:86:e6:02:e3:39: ea:17:74:12:bc:40:ff:6c:a6:6f:21:91:91:db:0e: 19:6c:ff:4c:64:96:02:66:c7:52:82:97:3e:2e:06: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:54:52:C0:05:CE:F8:83:4F:E7:61:BA:D1:8D:21:D7:06:AF:EB:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/60523804-6701-3c22-9743-09e45be5071e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.138.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b4:4b:7e:ef:b8:d1:bf:25:b0:0c:8d:55:12:d2:7f:2f:8c: 18:e6:6d:6a:f4:06:51:41:e5:19:f2:ad:e0:da:b2:62:8c:5c: ba:18:93:73:34:e1:ba:92:96:79:1f:ce:0a:4d:8a:2d:cb:be: db:7d:35:5c:ca:15:dc:f0:0e:fe:fb:60:c9:4d:7f:63:2f:85: d6:ba:0b:35:94:09:87:2b:f2:9b:86:57:97:5a:c1:62:12:4c: 44:55:9f:66:c0:08:c9:8a:99:64:47:1c:73:a2:f9:63:39:6d: 00:6c:df:d5:da:f6:5c:1d:c5:71:4d:a6:3e:a3:c6:b3:f5:f4: ab:78:c3:a8:f4:dc:1f:1e:fa:bd:3e:4c:ac:28:d4:5f:52:79: 02:d6:b9:e5:38:7f:12:5b:14:e9:55:12:19:02:17:1f:44:ff: 6b:ce:85:73:48:db:22:75:b1:6b:7d:2a:25:39:90:0e:c6:ac: a1:f9:3d:f9:b2:75:24:c6:2e:9b:c4:74:e0:49:ce:e5:3f:7d: 1d:f4:69:d8:48:f9:01:64:41:2c:ce:83:97:22:3c:9f:ce:d4: a2:1b:7d:16:d7:1a:1d:0c:12:f4:e1:3d:26:c4:25:10:2e:43: 9d:c5:26:fb:1b:0c:b2:13:ec:6b:57:91:7c:37:24:91:e5:19: 94:6d:42:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BS/Yuos1dCPa1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NDQ0MzNmMDUtZmI1Yy00ZDE5LWFjNDgtN2EwNWJjYmQ0ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bRPWw2W8Wrx/5pZAFtQpbL38duGiR/5FkOy +Qk8WG0nhpBf4dyvPj4DizpQbYlm7zqJRXPhALILcrrba1y7iYcubNll8mndkniL xSpbRRAIMIATKkeQW7kcZMJhw31fbkl0NaBaO74NbWmhtE5XiQhmaG3z24AVRQ2L kA+B4lfoVHSTROPknduh/imHrQdIujAY9zbz/pUi3+5g6A+xlzOscTrUbS4125xG 25BJw0BIIuN+wAjqo+L42xNif2lvjzdw2EKrjU4XLoL5Viq0Re/tS+zsbVKU32Tw huYC4znqF3QSvED/bKZvIZGR2w4ZbP9MZJYCZsdSgpc+LgbhXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZUUsAFzviDT+dhutGNIdcGr+tAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjA1MjM4MDQtNjcwMS0z YzIyLTk3NDMtMDllNDViZTUwNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxopEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe0S37vuNG/JbAMjVUS0n8vjBjmbWr0BlFB5RnyreDasmKMXLoYk3M0 4bqSlnkfzgpNii3Lvtt9NVzKFdzwDv77YMlNf2Mvhda6CzWUCYcr8puGV5dawWIS TERVn2bACMmKmWRHHHOi+WM5bQBs39Xa9lwdxXFNpj6jxrP19Kt4w6j03B8e+r0+ TKwo1F9SeQLWueU4fxJbFOlVEhkCFx9E/2vOhXNI2yJ1sWt9KiU5kA7GrKH5Pfmy dSTGLpvEdOBJzuU/fR30adhI+QFkQSzOg5ciPJ/O1KIbfRbXGh0MEvThPSbEJRAu Q53FJvsbDLIT7GtXkXw3JJHlGZRtQog= -----END CERTIFICATE-----Generated at Fri Apr 17 22:25:57 2026 by rpki-client