$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa File: dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa (raw, json) Hash identifier: NqoJBnz4IC81F0OTlTb0bHacuXfNDqIeOdFG52prqx0= Subject key identifier: 64:7E:4B:D9:F3:9C:5B:3A:B7:F9:30:CF:63:FD:23:85:53:F9:15:B1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FC8D5E8F29E023FDA4600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 701 IP address blocks: 68.128.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:c8:d5:e8:f2:9e:02:3f:da:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=92d358be-636f-4612-a476-6a17a938ba8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:31:32:ed:d3:47:b5:db:8a:69:12:fd:1d: 42:5b:36:9d:7e:6d:89:de:90:c6:69:37:7a:62:59: 05:d2:6b:47:0d:8a:0e:14:a4:1e:5b:6d:c6:aa:d2: 15:ea:3b:07:aa:54:8a:e0:e4:83:62:f1:22:75:86: 81:7b:67:71:f0:bb:06:95:bc:1b:d7:e0:86:f8:65: 02:51:68:18:bd:c5:5c:d2:d5:86:ba:a8:20:6d:c7: dc:9a:13:fa:80:4c:2e:22:7b:57:d1:38:33:44:02: af:48:34:87:52:f2:ac:49:a6:f9:89:f7:4a:b4:b8: 75:bb:a2:e2:67:27:1e:7c:16:bb:7c:4a:7b:c1:11: bc:35:1c:b3:96:4a:d9:9a:c3:52:40:85:12:d0:5d: c9:6a:4b:ca:51:21:ef:ea:a5:f2:c3:22:8f:27:8d: 0f:fa:be:ca:0c:a1:1d:5d:cd:cf:8e:c3:ba:f3:13: 33:b4:4c:60:99:65:c9:2c:b9:0e:47:cc:0a:37:a3: 07:1e:d4:93:14:c8:65:f6:38:b7:6f:94:9f:ad:99: e2:a7:08:57:c3:30:92:c7:79:93:24:00:b6:60:f2: 1f:ec:e3:20:d1:b8:46:0e:32:38:d3:ba:fd:3a:9c: 23:05:c2:41:53:5c:cc:20:5a:0c:1e:38:08:bd:23: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7E:4B:D9:F3:9C:5B:3A:B7:F9:30:CF:63:FD:23:85:53:F9:15:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a9:87:d8:00:61:8f:4e:5d:44:d8:3d:6a:03:b1:c2:0e:cb: a5:49:b2:74:0d:d0:1d:ad:fb:b0:70:72:fb:7b:21:46:10:20: ff:2a:fd:e2:d6:f2:52:2a:8c:cf:b9:9c:ce:3b:5c:49:d1:72: 11:b9:d8:92:83:c7:78:f7:6f:4d:94:9f:e4:28:28:7c:c0:a1: 2c:c6:45:2b:eb:47:02:ff:92:88:0b:40:58:90:34:18:ba:40: 00:b6:38:b3:60:b1:aa:b5:30:aa:54:19:cf:85:8a:47:9a:a2: 93:15:55:db:d3:13:9e:8d:78:c6:b3:21:e5:ec:5f:af:d3:76: 4b:63:d5:7f:b6:28:50:b1:d0:0f:6d:96:56:63:da:7a:5c:95: 79:31:21:3c:0f:99:01:25:a0:c2:3b:6d:fc:52:3e:5e:da:ca: f7:2b:26:a3:cc:8f:02:0a:18:2e:70:0a:8d:13:5e:e1:45:04: 50:92:ef:df:ec:66:61:03:74:f1:bc:c9:a3:81:06:14:4e:63: 9e:ee:79:a5:81:1d:18:1e:b1:bf:35:25:ae:38:3a:7b:d5:d6: 56:ff:89:6c:ea:81:a3:f9:71:a8:b6:60:c9:21:70:c4:c7:37: 83:06:65:1c:5a:da:32:f0:5a:56:ce:99:b6:8d:a5:c9:cd:57: c6:ff:63:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8jV6PKeAj/aRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk OTJkMzU4YmUtNjM2Zi00NjEyLWE0NzYtNmExN2E5MzhiYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugoxMu3TR7XbimkS/R1CWzadfm2J3pDGaTd6 YlkF0mtHDYoOFKQeW23GqtIV6jsHqlSK4OSDYvEidYaBe2dx8LsGlbwb1+CG+GUC UWgYvcVc0tWGuqggbcfcmhP6gEwuIntX0TgzRAKvSDSHUvKsSab5ifdKtLh1u6Li ZycefBa7fEp7wRG8NRyzlkrZmsNSQIUS0F3JakvKUSHv6qXywyKPJ40P+r7KDKEd Xc3PjsO68xMztExgmWXJLLkOR8wKN6MHHtSTFMhl9ji3b5SfrZnipwhXwzCSx3mT JAC2YPIf7OMg0bhGDjI407r9OpwjBcJBU1zMIFoMHjgIvSOQFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR+S9nznFs6t/kwz2P9I4VT+RWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGQ1Mzc5OTctZGJlYi0z Mzk0LWFiNmEtZGRjMDU4NTJkNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRIAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+ph9gAYY9OXUTYPWoDscIOy6VJsnQN0B2t+7Bwcvt7IUYQIP8q/eLW 8lIqjM+5nM47XEnRchG52JKDx3j3b02Un+QoKHzAoSzGRSvrRwL/kogLQFiQNBi6 QAC2OLNgsaq1MKpUGc+FikeaopMVVdvTE56NeMazIeXsX6/Tdktj1X+2KFCx0A9t llZj2npclXkxITwPmQEloMI7bfxSPl7ayvcrJqPMjwIKGC5wCo0TXuFFBFCS79/s ZmEDdPG8yaOBBhROY57ueaWBHRgesb81Ja44OnvV1lb/iWzqgaP5cai2YMkhcMTH N4MGZRxa2jLwWlbOmbaNpcnNV8b/Y5U= -----END CERTIFICATE-----Generated at Fri Apr 17 16:08:34 2026 by rpki-client