$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a454b9e5-e8f3-3386-9b27-4fc43dd6ce4b.roa File: a454b9e5-e8f3-3386-9b27-4fc43dd6ce4b.roa (raw, json) Hash identifier: yXRTlDKvbk6jnIc38f9Dk57wTLpZJ7stxgq0jkcl+ww= Subject key identifier: 00:1A:56:B6:88:A5:A1:0C:AB:51:5F:B6:48:91:F0:F4:6F:3A:F7:0A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D746FFF150FEDBCD7075C4D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a454b9e5-e8f3-3386-9b27-4fc43dd6ce4b.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 701 IP address blocks: 68.160.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:ff:15:0f:ed:bc:d7:07:5c:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=ae91a8d5-2a22-4c3b-924d-c8a9df51df40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:1d:53:48:64:2d:08:b8:74:6f:6a:64:ff: 33:d4:a3:fd:f8:07:32:d3:43:29:92:55:e6:a1:5a: e8:5b:cb:25:90:c5:7f:3a:29:f2:d1:c7:46:54:84: 97:9c:cd:eb:42:94:76:46:cd:fb:73:6b:3a:cd:64: 27:d1:e6:ee:d7:12:aa:b0:7d:1b:22:b3:bb:de:05: dd:11:46:89:eb:9b:a0:1f:81:a3:62:fe:ef:2a:d1: e5:14:92:12:c6:02:ca:08:2c:b2:6d:98:ea:69:61: e1:e1:6f:32:b5:fe:c0:83:36:96:be:09:91:43:e0: 04:19:0f:8e:f7:33:58:c9:17:ff:ff:61:f9:52:31: 5f:42:be:27:0c:72:ce:04:93:be:3f:3f:d8:f3:a9: 68:f4:4d:e4:df:8d:95:ff:40:d0:15:1c:af:46:64: cb:76:d7:4e:5d:b4:ee:ef:ca:46:f5:b7:40:87:a3: 21:cc:26:7b:e0:b6:5b:e9:83:c8:dd:79:1a:7b:65: dc:88:e6:52:33:8c:64:41:36:ba:b8:07:24:bd:39: e7:6a:17:82:f8:2e:fa:1d:ca:bc:e2:4e:03:bd:7d: 55:e5:9d:a2:d7:0d:0a:e3:e2:4e:84:92:1f:3c:0f: 00:0f:a5:af:2e:53:0c:f2:bc:1b:b1:98:22:d0:15: e7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1A:56:B6:88:A5:A1:0C:AB:51:5F:B6:48:91:F0:F4:6F:3A:F7:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a454b9e5-e8f3-3386-9b27-4fc43dd6ce4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.160.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:94:1a:b9:91:0c:c7:41:75:37:8b:89:bb:9f:e8:4b:dc:c6: 93:43:17:b7:25:db:50:06:b9:89:1e:43:d4:6f:df:d2:80:e8: ae:11:2c:15:e4:5e:81:e6:de:69:45:2a:23:d8:ef:24:03:49: 1e:73:5f:37:e7:0d:90:5c:4e:2f:89:3a:af:67:b3:79:ee:f5: 3e:b8:c5:39:4d:39:bd:cf:79:ac:bb:a7:a4:17:91:f9:8b:aa: 02:e3:3f:22:39:2c:4c:3f:83:ca:d3:f4:6c:d9:7f:f2:af:53: 46:cf:19:1a:4f:8a:8e:35:36:39:91:60:8f:0f:34:52:f1:a5: 70:25:45:d9:3f:73:bf:30:66:4c:79:0b:a3:a6:10:af:cc:f5: 9b:61:94:9d:9a:b2:7b:94:6f:1c:46:1f:17:23:49:79:89:1a: b8:a0:a7:44:57:14:9b:15:f8:98:55:d4:61:11:40:89:2f:26: 26:f7:fe:e1:0b:86:e6:8b:eb:01:54:51:c5:92:d7:74:59:20: df:00:1e:3f:91:f0:d3:f1:bc:3e:50:62:c8:f3:80:20:a0:cb: 6f:66:76:74:7e:34:71:7f:4f:2f:f8:d8:86:80:5a:4d:13:f7: 5a:dd:7b:53:dc:99:18:f5:3a:65:c3:e3:49:fe:e0:40:87:c4: de:94:f1:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b/8VD+281wdcTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YWU5MWE4ZDUtMmEyMi00YzNiLTkyNGQtYzhhOWRmNTFkZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRsdU0hkLQi4dG9qZP8z1KP9+Acy00MpklXm oVroW8slkMV/Oiny0cdGVISXnM3rQpR2Rs37c2s6zWQn0ebu1xKqsH0bIrO73gXd EUaJ65ugH4GjYv7vKtHlFJISxgLKCCyybZjqaWHh4W8ytf7AgzaWvgmRQ+AEGQ+O 9zNYyRf//2H5UjFfQr4nDHLOBJO+Pz/Y86lo9E3k342V/0DQFRyvRmTLdtdOXbTu 78pG9bdAh6MhzCZ74LZb6YPI3Xkae2XciOZSM4xkQTa6uAckvTnnaheC+C76Hcq8 4k4DvX1V5Z2i1w0K4+JOhJIfPA8AD6WvLlMM8rwbsZgi0BXnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAaVraIpaEMq1FftkiR8PRvOvcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTQ1NGI5ZTUtZThmMy0z Mzg2LTliMjctNGZjNDNkZDZjZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRKCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmUGrmRDMdBdTeLibuf6EvcxpNDF7cl21AGuYkeQ9Rv39KA6K4RLBXk XoHm3mlFKiPY7yQDSR5zXzfnDZBcTi+JOq9ns3nu9T64xTlNOb3Peay7p6QXkfmL qgLjPyI5LEw/g8rT9GzZf/KvU0bPGRpPio41NjmRYI8PNFLxpXAlRdk/c78wZkx5 C6OmEK/M9ZthlJ2asnuUbxxGHxcjSXmJGrigp0RXFJsV+JhV1GERQIkvJib3/uEL huaL6wFUUcWS13RZIN8AHj+R8NPxvD5QYsjzgCCgy29mdnR+NHF/Ty/42IaAWk0T 91rde1PcmRj1OmXD40n+4ECHxN6U8V0= -----END CERTIFICATE-----Generated at Fri Apr 17 11:10:13 2026 by rpki-client