$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa File: d0843c5d-c232-3c52-a28c-e504b426fab2.roa (raw, json) Hash identifier: 50bWfsTjQs0EToMSytJb8PKCxHY44AqTFS5r7CnQGNI= Subject key identifier: 52:20:C3:FE:63:71:D1:1B:46:81:0A:26:9F:7C:D1:34:24:89:82:B8 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584D7F9A8FEF55E66F7188F7C780 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 19107 IP address blocks: 68.235.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8f:ef:55:e6:6f:71:88:f7:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=052fbccd-bb78-4d38-9f72-7f4781d4521a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:90:c8:02:32:8d:2b:e4:82:5b:78:3a:d8: 02:e7:87:a7:6a:45:af:0f:3e:d0:d8:67:6e:c9:31: 01:48:a3:bf:b8:6b:6a:7d:06:fd:c2:c0:6f:b4:5e: 98:1b:2a:f1:b5:47:fa:62:f3:13:73:38:d8:5b:12: e5:d5:a7:27:df:48:f8:a9:c0:e7:9c:85:ec:74:df: ed:f2:aa:6f:36:d7:dc:18:21:d0:59:c9:59:c1:ca: cb:58:85:2e:93:5f:87:6d:8e:6f:f7:06:9e:5d:56: 6e:48:56:73:ee:18:4d:93:e5:78:9a:04:56:c5:84: e6:89:9d:a4:e0:d4:3a:78:40:96:c8:fc:d4:75:38: 1a:0e:a1:0a:03:24:17:34:3d:4b:b8:36:c0:31:5f: 3b:69:e7:44:f8:5f:38:e6:96:3b:9f:cf:41:33:d9: 84:4a:1f:8c:a4:0e:91:3b:b2:db:2a:83:28:5c:34: ab:b6:16:7b:1a:ec:9a:07:f0:a4:65:cf:46:c1:6c: 86:37:ec:44:61:3c:77:ee:26:22:63:eb:13:23:e3: 61:06:ff:25:88:85:86:52:29:40:4a:d4:6a:5a:bf: f2:c2:a2:73:7b:eb:64:5c:bc:04:db:02:b9:8c:60: 22:b4:db:55:40:ef:b0:92:5c:63:1f:b7:18:6f:01: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:20:C3:FE:63:71:D1:1B:46:81:0A:26:9F:7C:D1:34:24:89:82:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:09:d7:df:19:71:cb:50:51:6a:e2:ab:ad:d6:cc:71:03:5c: 53:7b:63:6d:09:6b:d0:5e:c6:17:f5:d9:64:1f:76:d1:89:c3: e3:46:28:f2:24:10:31:b4:37:1f:d9:6f:2f:ff:87:25:e0:41: 70:97:d7:0e:f7:f2:56:f6:58:24:5f:a4:18:d3:08:ee:f6:d1: 36:a6:aa:a8:27:d7:be:d0:b5:c8:9f:5f:5c:5e:41:0e:fd:5d: 2c:1c:8c:13:ca:e4:05:de:01:5c:90:ea:ec:f1:21:7c:ed:1c: c2:5e:92:43:d9:84:98:07:23:ed:9e:a8:42:28:06:8a:fc:81: 71:a2:2e:44:f1:f2:67:69:5f:0d:da:07:1e:c4:ee:c1:4b:9d: bd:c6:b4:b7:f3:a8:ed:f6:95:b3:93:05:6e:97:4d:ea:62:f7: 7a:55:35:ab:81:66:ef:76:32:ab:67:d8:07:53:15:3d:fd:0a: b6:b9:59:ec:75:f9:28:5d:a0:a7:28:df:19:62:0e:fc:c6:37: a8:c8:12:3f:0f:72:49:d6:f7:eb:0f:0b:e1:f2:00:28:82:16: 5c:7b:72:5b:8e:c6:39:0d:e6:c6:ce:9e:07:98:cc:2e:c0:79: d1:38:c0:15:a6:c2:ab:f5:3a:bf:6c:ae:ba:2e:7d:cd:f3:2c: 65:2e:ae:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mo/vVeZvcYj3x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MDUyZmJjY2QtYmI3OC00ZDM4LTlmNzItN2Y0NzgxZDQ1MjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGeQyAIyjSvkglt4OtgC54enakWvDz7Q2Gdu yTEBSKO/uGtqfQb9wsBvtF6YGyrxtUf6YvMTczjYWxLl1acn30j4qcDnnIXsdN/t 8qpvNtfcGCHQWclZwcrLWIUuk1+HbY5v9waeXVZuSFZz7hhNk+V4mgRWxYTmiZ2k 4NQ6eECWyPzUdTgaDqEKAyQXND1LuDbAMV87aedE+F845pY7n89BM9mESh+MpA6R O7LbKoMoXDSrthZ7GuyaB/CkZc9GwWyGN+xEYTx37iYiY+sTI+NhBv8liIWGUilA StRqWr/ywqJze+tkXLwE2wK5jGAitNtVQO+wklxjH7cYbwHQ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIgw/5jcdEbRoEKJp980TQkiYK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvZDA4NDNjNWQtYzIzMi0z YzUyLWEyOGMtZTUwNGI0MjZmYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8J198ZcctQUWriq63WzHEDXFN7Y20Ja9Bexhf12WQfdtGJw+NGKPIk EDG0Nx/Zby//hyXgQXCX1w738lb2WCRfpBjTCO720Tamqqgn177QtcifX1xeQQ79 XSwcjBPK5AXeAVyQ6uzxIXztHMJekkPZhJgHI+2eqEIoBor8gXGiLkTx8mdpXw3a Bx7E7sFLnb3GtLfzqO32lbOTBW6XTepi93pVNauBZu92Mqtn2AdTFT39Cra5Wex1 +ShdoKco3xliDvzGN6jIEj8PcknW9+sPC+HyACiCFlx7cluOxjkN5sbOngeYzC7A edE4wBWmwqv1Or9srroufc3zLGUuro0= -----END CERTIFICATE-----Generated at Fri Apr 17 14:24:13 2026 by rpki-client