$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a153cfa6-cf85-3cc1-a9c0-7af65cf593b3.roa File: a153cfa6-cf85-3cc1-a9c0-7af65cf593b3.roa (raw, json) Hash identifier: 0NWkg9PKGtdQac+rCwXvnHvHOSp8AMQnBuHB7WX3ycw= Subject key identifier: 21:46:9A:C5:F4:A8:AC:67:DC:4B:64:CB:02:71:DD:F1:E5:B9:73:86 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FBCFEF975E369ED638340 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a153cfa6-cf85-3cc1-a9c0-7af65cf593b3.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 701 IP address blocks: 68.237.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:bc:fe:f9:75:e3:69:ed:63:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=8d286abf-14a6-4e8b-870d-3af22c4b4ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:56:e3:b7:98:1d:f5:02:34:98:9e:27:ad:41: ca:3a:4f:5d:3b:e5:05:13:f9:fc:f9:a7:01:5d:9f: c9:48:30:96:f2:f1:ad:83:4c:43:ca:a3:be:0e:00: fd:8c:1c:1e:3e:c9:4e:3a:24:80:89:b3:e3:fb:aa: c2:55:22:c7:d0:76:c0:56:b9:21:72:08:b9:ba:2b: 7f:5d:57:d6:4b:e7:de:45:36:c8:3b:ec:94:29:c9: 53:dd:5d:13:5f:64:11:bf:ea:36:e2:25:1a:7d:a8: 69:84:c3:f8:61:ca:61:8d:73:8a:e6:fa:c8:67:46: 39:1e:0c:50:33:e7:16:5c:08:3e:86:c4:aa:e4:73: 30:83:95:44:57:6c:79:57:71:47:8e:86:b8:1d:d0: 14:32:48:fb:0f:19:6a:54:52:cc:be:b6:f7:e7:9f: 9d:75:d8:6e:e8:23:b2:6e:ba:12:18:6b:2a:04:27: 56:b7:bd:c5:f6:41:11:53:9f:96:29:1e:64:32:d3: 92:bc:fb:99:d7:7b:37:8d:ef:f3:e0:69:44:70:2f: 07:87:a9:23:df:fb:e7:db:a6:ae:ec:f4:a3:e5:ce: 2d:5f:25:15:79:90:41:45:f1:99:c8:e2:84:2b:72: a4:5e:1d:a7:2b:ff:fa:1a:b7:66:86:d4:20:9c:c7: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:46:9A:C5:F4:A8:AC:67:DC:4B:64:CB:02:71:DD:F1:E5:B9:73:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a153cfa6-cf85-3cc1-a9c0-7af65cf593b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.237.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:64:a9:d0:aa:12:42:e9:8d:4f:53:eb:6e:2e:e3:dd:ad:c5: ef:eb:06:fb:74:3a:73:29:da:3b:8c:f5:5e:20:1f:03:5f:d5: 5b:cf:a4:1a:e1:8c:1f:7f:66:73:68:a0:92:dd:ae:ac:7e:2c: 6a:89:c8:37:90:f4:6c:b7:09:8f:ad:45:40:2d:35:19:da:64: 83:65:55:9e:8c:f0:de:94:84:93:0f:2e:fa:e1:d0:7b:b2:cb: 1f:8b:c0:f8:e1:72:aa:af:60:27:96:7a:7c:2a:5b:4f:c2:17: 65:f1:73:fa:83:ca:65:c0:97:42:1e:a1:08:26:70:64:73:51: cf:d6:92:28:5f:ff:0f:3f:8d:0a:ce:3c:db:b6:c6:23:06:aa: 93:d9:cb:90:e9:f8:68:23:aa:b0:1c:cf:f5:e5:92:38:34:84: b9:88:b0:78:35:52:45:ed:ed:d3:53:f3:20:78:b6:1b:31:3d: 79:12:35:ca:87:f7:ef:2c:02:cf:ff:c4:8c:ee:e2:33:b1:4a: 99:c7:90:53:72:f7:02:82:47:f2:1c:a2:12:ff:0a:c8:45:64: a6:11:9c:34:0f:4e:49:e9:f8:47:4b:3d:27:28:b6:a1:c4:a4: d8:5f:36:f0:47:1f:50:87:de:aa:8c:5c:99:55:ee:18:d4:94: 20:6e:89:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7z++XXjae1jg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk OGQyODZhYmYtMTRhNi00ZThiLTg3MGQtM2FmMjJjNGI0ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1bjt5gd9QI0mJ4nrUHKOk9dO+UFE/n8+acB XZ/JSDCW8vGtg0xDyqO+DgD9jBwePslOOiSAibPj+6rCVSLH0HbAVrkhcgi5uit/ XVfWS+feRTbIO+yUKclT3V0TX2QRv+o24iUafahphMP4YcphjXOK5vrIZ0Y5HgxQ M+cWXAg+hsSq5HMwg5VEV2x5V3FHjoa4HdAUMkj7DxlqVFLMvrb355+dddhu6COy broSGGsqBCdWt73F9kERU5+WKR5kMtOSvPuZ13s3je/z4GlEcC8Hh6kj3/vn26au 7PSj5c4tXyUVeZBBRfGZyOKEK3KkXh2nK//6GrdmhtQgnMc1bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFGmsX0qKxn3EtkywJx3fHluXOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTE1M2NmYTYtY2Y4NS0z Y2MxLWE5YzAtN2FmNjVjZjU5M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRO3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVkqdCqEkLpjU9T624u492txe/rBvt0OnMp2juM9V4gHwNf1VvPpBrh jB9/ZnNooJLdrqx+LGqJyDeQ9Gy3CY+tRUAtNRnaZINlVZ6M8N6UhJMPLvrh0Huy yx+LwPjhcqqvYCeWenwqW0/CF2Xxc/qDymXAl0IeoQgmcGRzUc/Wkihf/w8/jQrO PNu2xiMGqpPZy5Dp+GgjqrAcz/Xlkjg0hLmIsHg1UkXt7dNT8yB4thsxPXkSNcqH 9+8sAs//xIzu4jOxSpnHkFNy9wKCR/IcohL/CshFZKYRnDQPTknp+EdLPScotqHE pNhfNvBHH1CH3qqMXJlV7hjUlCBuicQ= -----END CERTIFICATE-----Generated at Fri Apr 17 12:19:59 2026 by rpki-client