$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4138a71f-a14e-3f2f-9f5b-e8603a073470.roa File: 4138a71f-a14e-3f2f-9f5b-e8603a073470.roa (raw, json) Hash identifier: 9W1HKaxYZCyazJicnyiPZShdomRZk+gfRsTyZahDzIs= Subject key identifier: C3:23:EF:4A:B1:15:0C:1C:2D:C8:22:16:FD:B5:56:E0:CE:7D:D1:9E Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584D7F9A890223A1E0327113C000 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4138a71f-a14e-3f2f-9f5b-e8603a073470.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 19107 IP address blocks: 216.234.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:89:02:23:a1:e0:32:71:13:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=212ba1ce-b983-4c5e-9f1d-0046c04a7189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3e:23:58:51:36:4d:ef:88:10:07:ca:92:2e: 1c:83:32:1b:8d:31:ed:d4:da:c8:17:84:68:c6:71: c3:f8:7b:81:96:2a:85:00:86:c3:cb:aa:b7:be:f9: c7:85:6e:4f:d2:90:bb:bf:80:17:ba:73:fa:e3:3c: e1:4b:67:2c:55:aa:84:d4:66:9e:67:c6:a3:0d:1d: 0b:51:ca:f6:6e:07:be:60:23:27:d0:99:ef:cf:56: 8a:d2:c6:8d:22:92:35:01:19:c5:e9:73:c3:05:00: d8:46:56:c2:dc:81:fa:65:7e:83:1a:73:84:18:98: 0d:1a:1b:40:e3:e6:7f:2f:3a:0a:ac:8f:b4:2e:f3: bc:69:d1:d8:89:87:0f:f2:97:23:ae:02:2b:9f:06: 87:87:80:df:23:b9:92:0d:5a:4c:1c:78:ac:ed:d9: 20:e1:f9:29:dd:d6:69:5b:ac:a6:36:30:34:d9:d8: 95:90:7d:10:c9:b5:07:c5:a6:2d:19:5f:d7:ea:19: 13:39:0b:1a:89:4c:d4:b6:1e:40:07:a4:e0:e3:e3: dd:c8:c3:57:1b:2c:eb:d7:bc:43:b2:95:3a:48:83: e4:89:3c:c7:e2:0a:39:a8:96:e1:cd:16:cf:9e:9f: 1c:81:ef:94:2a:ef:c8:b7:91:12:0d:fd:22:5c:2d: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:EF:4A:B1:15:0C:1C:2D:C8:22:16:FD:B5:56:E0:CE:7D:D1:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4138a71f-a14e-3f2f-9f5b-e8603a073470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 216.234.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3f:1c:48:5b:47:fd:49:5a:39:db:33:36:8f:e5:ae:20:c6: f8:86:f5:0a:9a:4d:bf:7b:58:64:cc:3d:60:63:e4:f3:04:31: 55:35:da:c8:89:7b:ab:91:33:aa:56:57:37:30:23:f9:8b:7e: 08:11:51:d9:bb:1c:fe:fd:3a:11:cc:d2:26:52:9d:c3:bd:d3: 57:a7:98:75:0b:29:77:fc:8c:f6:e4:8b:ae:d2:9a:08:a4:ac: e4:9f:09:35:18:24:6c:f9:9f:ff:c0:17:88:e9:a2:71:d6:b0: 5c:20:25:f3:7f:a1:c7:61:67:9e:36:5a:6b:0f:bd:69:e8:21: 86:c6:0b:a5:4d:5d:63:2a:2b:bf:2b:e9:32:d0:86:92:00:59: 28:e5:d5:45:13:5f:a6:46:31:4d:d5:fa:94:c3:6e:eb:df:16: a5:e2:88:ad:21:0b:26:d5:84:a4:5c:62:f4:18:1b:ed:62:49: b7:9f:1e:77:a8:55:ef:6e:3e:72:47:a2:54:cb:f4:84:b9:26: 43:19:e3:f3:c7:3e:8d:f1:9d:c3:3f:de:2a:54:19:d5:54:a2: 73:d3:1b:c5:f3:36:f2:ac:20:d9:1c:83:5a:02:2b:f0:ed:7b: 22:26:ac:d3:75:60:f4:f4:a7:11:97:91:a6:c1:11:7f:ee:c7: db:65:44:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mokCI6HgMnETwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MjEyYmExY2UtYjk4My00YzVlLTlmMWQtMDA0NmMwNGE3MTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD4jWFE2Te+IEAfKki4cgzIbjTHt1NrIF4Ro xnHD+HuBliqFAIbDy6q3vvnHhW5P0pC7v4AXunP64zzhS2csVaqE1GaeZ8ajDR0L Ucr2bge+YCMn0Jnvz1aK0saNIpI1ARnF6XPDBQDYRlbC3IH6ZX6DGnOEGJgNGhtA 4+Z/LzoKrI+0LvO8adHYiYcP8pcjrgIrnwaHh4DfI7mSDVpMHHis7dkg4fkp3dZp W6ymNjA02diVkH0QybUHxaYtGV/X6hkTOQsaiUzUth5AB6Tg4+PdyMNXGyzr17xD spU6SIPkiTzH4go5qJbhzRbPnp8cge+UKu/It5ESDf0iXC34XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMj70qxFQwcLcgiFv21VuDOfdGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNDEzOGE3MWYtYTE0ZS0z ZjJmLTlmNWItZTg2MDNhMDczNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM/HEhbR/1JWjnbMzaP5a4gxviG9QqaTb97WGTMPWBj5PMEMVU12siJ e6uRM6pWVzcwI/mLfggRUdm7HP79OhHM0iZSncO901enmHULKXf8jPbki67Smgik rOSfCTUYJGz5n//AF4jponHWsFwgJfN/ocdhZ542WmsPvWnoIYbGC6VNXWMqK78r 6TLQhpIAWSjl1UUTX6ZGMU3V+pTDbuvfFqXiiK0hCybVhKRcYvQYG+1iSbefHneo Ve9uPnJHolTL9IS5JkMZ4/PHPo3xncM/3ipUGdVUonPTG8XzNvKsINkcg1oCK/Dt eyImrNN1YPT0pxGXkabBEX/ux9tlRNo= -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:28 2026 by rpki-client