$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa File: 25e244e3-f519-394a-951d-cdac4dc84db7.roa (raw, json) Hash identifier: F7+iyLZBWgmP/naKyq74OIAc4l/iGUVnKiUjyhYKpiU= Subject key identifier: 44:C8:90:9D:54:A4:6B:B0:7C:30:DF:9E:77:52:0D:1D:69:F7:0D:5C Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584D80FFF0335C7D3B0A110E9D60 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 8014 IP address blocks: 108.60.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f0:33:5c:7d:3b:0a:11:0e:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=143ffbef-9b32-4378-8f71-4066ab5c70e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:fd:64:3b:ec:96:a0:91:0e:78:a9:f1:35: 36:b1:9c:f5:ce:79:f7:7c:fc:7e:1f:47:6a:57:1e: f0:04:27:49:e1:87:8e:b9:65:b0:e3:45:75:06:93: a7:3c:fb:ae:6d:7b:b2:f5:3e:52:ee:16:9d:c4:85: f0:1b:ad:a1:a1:bd:4e:41:ca:f0:4f:4c:a3:9a:d1: 5d:8d:0e:9b:34:df:30:40:b9:6b:40:80:34:fd:4c: 7d:09:87:0c:85:b4:fd:9b:97:0a:c4:81:c1:d6:f5: be:40:e0:ee:18:e1:e1:76:26:c6:86:b2:ca:0b:36: 79:8f:3a:41:d1:6b:c3:eb:05:03:41:37:0e:bb:10: 32:5d:3e:f5:59:09:77:fc:0d:f8:20:7c:9d:f6:bd: e8:df:e0:b0:9e:54:19:9f:c0:ec:6c:41:80:e5:1e: 8e:e8:5d:53:29:99:65:e1:c9:51:71:22:45:43:5b: a2:aa:68:fd:27:9a:8c:05:69:72:83:53:ee:be:c4: 5b:d6:a0:47:1d:33:98:c0:d6:af:8b:3d:ad:3a:f5: 48:1b:13:25:8c:fa:61:12:d0:a4:0d:66:4a:81:d4: ef:07:33:cb:09:a8:e3:de:5f:0f:60:ce:0b:9f:ec: 4c:fa:7d:f5:bc:ed:a6:15:5c:43:25:78:76:cf:39: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C8:90:9D:54:A4:6B:B0:7C:30:DF:9E:77:52:0D:1D:69:F7:0D:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 108.60.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:74:c5:72:b5:40:f3:ba:74:0b:ab:d1:7b:34:c3:3c:9c:41: 71:ab:04:27:b7:67:ca:1a:85:ec:79:32:8d:c6:24:f0:84:85: 5a:47:13:e7:c1:be:93:6f:68:9c:1f:c0:0c:48:09:f5:31:79: 71:23:8d:f3:4f:a7:fb:3f:2e:d7:90:1d:54:61:85:cb:06:07: 34:4a:5f:16:b5:ca:0e:bc:ed:9a:18:db:7c:c5:b9:62:95:5f: 19:67:1c:6d:96:ec:65:05:0c:4f:4c:b0:3f:b5:a5:04:52:e7: 8f:09:8e:ac:20:32:05:5a:f9:30:88:9c:64:14:16:75:18:e4: 48:3b:6d:ed:c6:c3:46:29:bb:20:c7:f7:09:55:4c:55:81:81: 02:46:98:64:dd:7a:32:2e:f2:92:2e:02:4c:62:d8:31:d5:46: 75:93:8d:d0:98:3a:ce:58:a0:57:7e:0c:c9:98:43:f8:34:aa: 91:a5:c4:fa:db:64:bc:39:68:03:86:4e:60:e1:87:0e:cb:8e: fc:e1:e1:0c:22:84:fd:00:f7:0a:06:07:46:eb:25:f2:2f:98: 65:26:b4:6f:45:ff:23:80:cf:fc:1d:f1:ff:09:9c:e4:fe:70: 16:4e:77:a5:0b:97:3b:c1:f5:ff:ea:19:a0:0b:d9:a3:79:96: f9:8b:cc:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//AzXH07ChEOnWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MTQzZmZiZWYtOWIzMi00Mzc4LThmNzEtNDA2NmFiNWM3MGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqH9ZDvslqCRDnip8TU2sZz1znn3fPx+H0dq Vx7wBCdJ4YeOuWWw40V1BpOnPPuubXuy9T5S7hadxIXwG62hob1OQcrwT0yjmtFd jQ6bNN8wQLlrQIA0/Ux9CYcMhbT9m5cKxIHB1vW+QODuGOHhdibGhrLKCzZ5jzpB 0WvD6wUDQTcOuxAyXT71WQl3/A34IHyd9r3o3+CwnlQZn8DsbEGA5R6O6F1TKZll 4clRcSJFQ1uiqmj9J5qMBWlyg1PuvsRb1qBHHTOYwNaviz2tOvVIGxMljPphEtCk DWZKgdTvBzPLCajj3l8PYM4Ln+xM+n31vO2mFVxDJXh2zzmODwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETIkJ1UpGuwfDDfnndSDR1p9w1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvMjVlMjQ0ZTMtZjUxOS0z OTRhLTk1MWQtY2RhYzRkYzg0ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbDzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ0xXK1QPO6dAur0Xs0wzycQXGrBCe3Z8oahex5Mo3GJPCEhVpHE+fB vpNvaJwfwAxICfUxeXEjjfNPp/s/LteQHVRhhcsGBzRKXxa1yg687ZoY23zFuWKV XxlnHG2W7GUFDE9MsD+1pQRS548JjqwgMgVa+TCInGQUFnUY5Eg7be3Gw0YpuyDH 9wlVTFWBgQJGmGTdejIu8pIuAkxi2DHVRnWTjdCYOs5YoFd+DMmYQ/g0qpGlxPrb ZLw5aAOGTmDhhw7Ljvzh4QwihP0A9woGB0brJfIvmGUmtG9F/yOAz/wd8f8JnOT+ cBZOd6ULlzvB9f/qGaAL2aN5lvmLzFQ= -----END CERTIFICATE-----Generated at Fri Apr 17 19:58:05 2026 by rpki-client