$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa File: 5e44192e-f545-3343-9375-5f961aee2b74.roa (raw, json) Hash identifier: S4sJosOiHrO1Ga7UrbsIKQdsAWltQjF72R5XQYXiy/g= Subject key identifier: 42:BB:02:97:CC:3A:75:46:1C:EB:71:15:9F:1F:46:E4:E0:21:11:03 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584D7F9A8F9556EFDDB0CB17E0C0 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 19107 IP address blocks: 68.235.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8f:95:56:ef:dd:b0:cb:17:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=8d643ff5-206f-4ff8-a364-d6f20565aea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:9c:e9:c1:bc:6c:a2:88:7c:aa:91:e9:ba: 3e:d9:42:44:a7:eb:f9:63:8f:6b:88:40:59:9b:53: 37:2a:57:95:13:59:52:e2:d9:df:0c:fd:50:a7:a7: 81:6d:58:36:cd:0a:dd:9d:60:cc:ab:d8:9b:67:e5: b5:43:6b:4b:1a:48:2b:53:15:02:1f:09:24:02:d8: cf:80:2a:4f:0b:5b:0b:69:ca:a2:08:ed:c1:47:62: 5b:cc:a7:76:e3:78:bf:05:9e:61:24:60:f1:bd:e0: 7e:1d:e5:1e:81:1d:24:51:7e:68:6b:c3:06:de:0f: 8e:80:23:88:a5:c0:08:f1:43:03:af:bb:f5:6e:cc: a5:9c:44:76:3e:2c:59:9c:1b:78:fc:4c:79:bd:f8: 2e:3c:4b:d8:58:f6:3e:c9:38:c5:eb:69:04:27:7b: ae:65:e2:96:49:69:29:ec:9c:a1:65:33:ea:34:28: 08:f5:a6:47:f9:4e:79:a8:1c:04:61:72:e5:a9:6c: c5:8e:f4:5c:2a:96:1d:14:67:f1:5c:6c:b1:16:da: b5:d1:76:3b:15:44:ec:72:68:1a:32:c2:9d:c0:d7: e2:71:08:c8:8d:1f:ec:a5:78:76:d2:05:0b:1f:d9: 14:42:c7:a4:f2:43:b2:44:59:51:65:d3:68:27:4f: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BB:02:97:CC:3A:75:46:1C:EB:71:15:9F:1F:46:E4:E0:21:11:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:30:67:c4:99:2e:7f:a1:dc:88:d5:0e:d1:d3:80:a2:fc:fe: 11:68:74:35:1a:51:00:15:09:dc:4a:9f:21:ce:c0:c4:c1:a0: bb:48:ee:4a:c7:4c:19:0d:45:13:8c:08:ee:3d:4f:da:0a:27: 2e:91:49:5b:84:ec:89:59:43:b5:eb:5a:f7:0b:ed:6b:d1:7e: 7a:27:58:48:48:37:94:e2:0b:cf:a7:75:bb:26:7d:d6:c8:d0: 58:7b:8f:d9:08:6a:06:7a:c3:f0:db:d6:48:c4:91:6c:0a:1c: f1:0d:2b:2c:91:32:a9:dc:84:ac:2a:15:3e:6b:5d:eb:09:de: 10:ba:3f:41:06:21:9b:9d:87:53:25:c4:fe:1a:93:75:ad:2a: 3a:f0:51:ae:c0:83:74:73:6c:5a:42:a7:98:ff:6e:cf:2b:0d: 95:88:0b:18:70:9d:b7:de:b2:ff:03:49:6c:ca:01:94:73:c2: 61:39:72:a8:77:9b:37:7a:67:c3:f0:32:c0:31:14:ff:28:e7: fa:70:0b:3a:80:58:8a:4c:0b:8a:ee:7b:dd:b8:2b:db:20:f0: 05:94:56:4d:35:a1:f9:e6:a1:aa:5c:ff:be:8b:d8:3f:04:b0: df:99:da:14:22:ea:9e:77:e1:65:4f:84:e5:55:25:46:74:89: 77:6a:99:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mo+VVu/dsMsX4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk OGQ2NDNmZjUtMjA2Zi00ZmY4LWEzNjQtZDZmMjA1NjVhZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUSc6cG8bKKIfKqR6bo+2UJEp+v5Y49riEBZ m1M3KleVE1lS4tnfDP1Qp6eBbVg2zQrdnWDMq9ibZ+W1Q2tLGkgrUxUCHwkkAtjP gCpPC1sLacqiCO3BR2JbzKd243i/BZ5hJGDxveB+HeUegR0kUX5oa8MG3g+OgCOI pcAI8UMDr7v1bsylnER2PixZnBt4/Ex5vfguPEvYWPY+yTjF62kEJ3uuZeKWSWkp 7JyhZTPqNCgI9aZH+U55qBwEYXLlqWzFjvRcKpYdFGfxXGyxFtq10XY7FUTscmga MsKdwNficQjIjR/spXh20gULH9kUQsek8kOyRFlRZdNoJ08SQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK7ApfMOnVGHOtxFZ8fRuTgIREDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNWU0NDE5MmUtZjU0NS0z MzQzLTkzNzUtNWY5NjFhZWUyYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0wZ8SZLn+h3IjVDtHTgKL8/hFodDUaUQAVCdxKnyHOwMTBoLtI7krH TBkNRROMCO49T9oKJy6RSVuE7IlZQ7XrWvcL7WvRfnonWEhIN5TiC8+ndbsmfdbI 0Fh7j9kIagZ6w/Db1kjEkWwKHPENKyyRMqnchKwqFT5rXesJ3hC6P0EGIZudh1Ml xP4ak3WtKjrwUa7Ag3RzbFpCp5j/bs8rDZWICxhwnbfesv8DSWzKAZRzwmE5cqh3 mzd6Z8PwMsAxFP8o5/pwCzqAWIpMC4rue924K9sg8AWUVk01ofnmoapc/76L2D8E sN+Z2hQi6p534WVPhOVVJUZ0iXdqmbo= -----END CERTIFICATE-----Generated at Sat Apr 18 03:03:30 2026 by rpki-client