$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60b2e79a-24b3-33a9-afa4-3cd712ba0a0b.roa File: 60b2e79a-24b3-33a9-afa4-3cd712ba0a0b.roa (raw, json) Hash identifier: nVXAVizRS64fOAHc0c9eo2M9H/u0YrkJ++hbpjxFtIU= Subject key identifier: ED:2E:A2:1C:8F:99:37:B7:CA:15:D7:2E:54:60:34:C3:64:7C:DB:6C Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584D492A7667DE6917AC00F48040 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60b2e79a-24b3-33a9-afa4-3cd712ba0a0b.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 64267 IP address blocks: 68.234.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:76:67:de:69:17:ac:00:f4:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=45776fd5-1e64-42a9-bc78-ba3857299e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:61:07:e0:8b:45:9d:e3:1d:c5:34:51:9d:9b: 63:f9:45:df:b8:29:ad:fe:4c:68:f0:a8:81:38:84: 78:95:31:b2:c6:f8:3d:01:65:50:44:a1:f6:e9:68: a0:8f:d9:f1:26:0c:1a:9f:b2:f8:a3:d8:46:3f:db: 00:5a:37:f7:ca:e9:6e:c6:56:d9:a7:99:d3:bb:f3: c3:ad:41:8c:f1:71:85:2c:e4:c0:b6:a3:0e:d8:0f: 60:e6:90:cd:2a:a1:b8:d3:eb:58:7d:d2:d0:86:67: 5e:ef:55:21:68:22:41:d8:51:9f:d8:b8:2d:34:b0: fa:43:91:82:45:34:65:2e:ac:d5:3d:89:29:81:1a: 09:58:5f:c9:95:06:e9:1a:36:b2:2c:52:65:53:c3: e2:f3:b5:9a:da:e4:36:8b:bf:86:42:ec:be:1c:c1: 4b:66:cb:23:11:f3:53:38:e7:71:85:83:d9:92:75: 1e:3d:b0:68:46:3d:f8:64:cb:a5:b4:77:ef:74:0b: 0f:77:cd:e9:70:a1:cc:2e:50:bd:66:b3:10:06:08: 1d:2f:6b:ef:48:68:55:9f:a6:92:a0:f1:37:da:ea: 10:22:eb:90:63:64:a6:48:32:39:9c:4d:98:af:55: f2:d6:e5:2b:2a:46:b0:9f:bf:45:7f:0c:e0:53:dc: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2E:A2:1C:8F:99:37:B7:CA:15:D7:2E:54:60:34:C3:64:7C:DB:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60b2e79a-24b3-33a9-afa4-3cd712ba0a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 68.234.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f0:4c:18:5c:98:36:c0:a0:fd:38:c2:70:81:e7:ff:34:b3: 43:e3:1d:6d:b1:4f:05:1c:bf:c0:38:4d:4b:fc:82:4c:bc:1c: 19:ff:9e:50:41:ce:60:29:08:14:22:d6:b2:9e:62:37:cc:f4: 9b:2c:53:a5:2b:9b:05:44:2c:74:a4:c1:88:bb:61:c1:c6:cb: 74:07:6e:d0:3a:96:1d:1d:f2:b4:f0:bc:9b:bb:ba:05:39:a8: a3:e8:47:f3:4d:a8:cd:60:ff:35:9b:44:0d:e1:23:9c:75:6d: 01:0d:77:05:9f:73:98:72:be:4c:41:0f:c5:33:d1:25:03:be: fe:d4:9f:5e:90:42:8f:fe:59:66:ba:01:c6:13:b0:2f:6d:f0: f1:ac:a4:06:e9:cd:3e:c6:14:c3:51:13:6e:51:04:74:2d:f5: c9:41:50:04:34:76:60:b5:93:e5:ea:5e:8c:6b:90:f9:1c:bf: 54:da:8b:16:16:c5:52:81:28:cb:f4:5f:21:62:68:7b:03:57: 88:31:e0:2a:f8:20:cf:b4:15:dc:37:26:83:d1:d1:20:02:9a: a9:21:d7:d6:95:6d:bd:76:26:42:0c:df:ce:c1:d4:82:1f:e3: 3a:25:9f:eb:a6:4f:35:43:e6:42:74:33:e8:1a:d7:42:8b:bd: 16:c9:8e:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnZn3mkXrAD0gEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NDU3NzZmZDUtMWU2NC00MmE5LWJjNzgtYmEzODU3Mjk5ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWEH4ItFneMdxTRRnZtj+UXfuCmt/kxo8KiB OIR4lTGyxvg9AWVQRKH26Wigj9nxJgwan7L4o9hGP9sAWjf3yuluxlbZp5nTu/PD rUGM8XGFLOTAtqMO2A9g5pDNKqG40+tYfdLQhmde71UhaCJB2FGf2LgtNLD6Q5GC RTRlLqzVPYkpgRoJWF/JlQbpGjayLFJlU8Pi87Wa2uQ2i7+GQuy+HMFLZssjEfNT OOdxhYPZknUePbBoRj34ZMultHfvdAsPd83pcKHMLlC9ZrMQBggdL2vvSGhVn6aS oPE32uoQIuuQY2SmSDI5nE2Yr1Xy1uUrKkawn79FfwzgU9zreQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0uohyPmTe3yhXXLlRgNMNkfNtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjBiMmU3OWEtMjRiMy0z M2E5LWFmYTQtM2NkNzEyYmEwYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROoqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPwTBhcmDbAoP04wnCB5/80s0PjHW2xTwUcv8A4TUv8gky8HBn/nlBB zmApCBQi1rKeYjfM9JssU6UrmwVELHSkwYi7YcHGy3QHbtA6lh0d8rTwvJu7ugU5 qKPoR/NNqM1g/zWbRA3hI5x1bQENdwWfc5hyvkxBD8Uz0SUDvv7Un16QQo/+WWa6 AcYTsC9t8PGspAbpzT7GFMNRE25RBHQt9clBUAQ0dmC1k+XqXoxrkPkcv1TaixYW xVKBKMv0XyFiaHsDV4gx4Cr4IM+0Fdw3JoPR0SACmqkh19aVbb12JkIM387B1IIf 4zoln+umTzVD5kJ0M+ga10KLvRbJjqs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:40:09 2026 by rpki-client