$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/b69df8b4-bbf5-3d61-ba91-dd2f3e33f772.roa File: b69df8b4-bbf5-3d61-ba91-dd2f3e33f772.roa (raw, json) Hash identifier: 57zKbRhbGorvIkTYdNRmk3z0W18pIiW6nDU3ndysgn0= Subject key identifier: F0:FF:06:D9:A0:F7:B4:8E:68:B8:EC:56:4C:B5:32:51:A6:80:8E:04 Certificate issuer: /CN=60cf5ad8-4c66-4ed9-8456-123c69bdd612 Certificate serial: 010D0C9F4328584DB1DAD9EC22B6B81D7B3C7EA0 Authority key identifier: 42:08:21:29:9F:A6:CB:AE:CB:C7:5D:9D:66:63:10:18:8F:68:FD:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/b69df8b4-bbf5-3d61-ba91-dd2f3e33f772.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 31945 IP address blocks: 204.57.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/60cf5ad8-4c66-4ed9-8456-123c69bdd612.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/60cf5ad8-4c66-4ed9-8456-123c69bdd612.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:d9:ec:22:b6:b8:1d:7b:3c:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60cf5ad8-4c66-4ed9-8456-123c69bdd612 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=6e59b4e1-fd39-476b-9cad-6cacaaac9033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:d2:94:89:3e:6f:d1:41:5b:b9:d2:d8:4c: d0:25:b3:1f:fb:35:bb:5a:ee:70:02:08:ca:1b:db: 5d:bd:b1:24:41:f2:48:4d:8a:8e:30:f3:f2:eb:b4: b5:4e:f5:30:00:7d:9a:5f:5a:c5:5b:10:a7:85:00: 36:c2:8b:9f:1e:41:0e:c3:9e:98:47:51:54:2f:77: 44:49:19:6f:b6:67:e9:f9:5e:4b:1f:fa:38:77:8a: ea:97:ff:59:9c:72:10:56:f6:23:4b:90:7d:cc:d6: ec:b5:1d:60:a4:c1:a7:e3:04:bf:c6:1c:28:c2:c9: 12:25:8b:7a:d9:50:b2:36:b1:38:69:26:af:d8:6f: 96:ea:1d:6b:07:a9:a3:c8:64:49:f9:ef:17:51:11: 14:8c:bb:d5:d8:06:c5:91:fc:62:f4:39:3c:99:83: 28:2e:70:6b:89:63:1f:b7:d3:1a:bb:dc:ce:2a:a0: 26:26:de:cc:15:96:44:03:e3:bb:21:70:03:95:7b: f7:14:ed:7e:b2:18:21:da:1a:d0:1f:cc:49:80:f3: 02:38:d4:04:38:28:90:b8:d6:bd:54:81:a1:39:f1: 4e:38:65:43:0d:3e:70:00:9e:d8:d0:74:e4:0b:06: 12:b2:5f:75:1c:22:9d:59:a5:4b:a1:a7:d9:81:97: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FF:06:D9:A0:F7:B4:8E:68:B8:EC:56:4C:B5:32:51:A6:80:8E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/b69df8b4-bbf5-3d61-ba91-dd2f3e33f772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/60cf5ad8-4c66-4ed9-8456-123c69bdd612.crl X509v3 Authority Key Identifier: keyid:42:08:21:29:9F:A6:CB:AE:CB:C7:5D:9D:66:63:10:18:8F:68:FD:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612.cer sbgp-ipAddrBlock: critical IPv4: 204.57.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:06:48:56:7f:86:f9:d6:5f:a1:ab:f5:67:8e:f8:3d:0c:62: 00:45:2d:0e:1d:15:ad:35:1d:d6:93:6c:d3:d7:c0:41:97:7e: 21:9c:60:b2:1f:2b:a7:28:e5:53:dc:95:90:1e:dc:77:31:3c: c8:a9:bc:5d:eb:0b:8a:42:ff:ca:56:75:bf:f3:79:1c:c9:0b: f6:1a:5c:b4:4e:f7:7d:a6:b5:09:bd:59:50:e0:16:1d:81:d3: 3e:5a:82:d8:82:56:ec:3f:a4:55:75:fb:4d:a1:20:91:8a:54: c7:da:a8:16:a4:02:99:4a:a7:19:b4:5a:23:79:b1:95:8e:d2: ea:62:af:db:61:e9:30:d5:2c:02:dd:4b:63:8c:32:73:b6:34: ef:da:d8:c4:03:92:1a:9b:44:14:e6:ca:90:ba:50:0e:88:43: f6:54:65:4c:81:f3:16:17:fc:78:a6:b7:db:49:d3:8e:c2:56: 2a:71:f5:25:d2:4f:79:01:c2:58:4d:ae:af:50:fc:de:54:5d: 3d:fc:95:fa:eb:37:65:dd:13:c2:0d:cb:1c:6a:45:5b:18:fc: f9:6c:30:ea:1d:8b:04:24:36:32:33:e4:f7:20:e7:6f:d3:3f: fb:de:fb:42:b5:29:e0:d7:9c:a3:4d:68:71:22:a1:d2:46:28: 7c:23:f2:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2tnsIra4HXs8fqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBjZjVhZDgtNGM2Ni00ZWQ5LTg0NTYtMTIzYzY5YmRk NjEyMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk NmU1OWI0ZTEtZmQzOS00NzZiLTljYWQtNmNhY2FhYWM5MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFrSlIk+b9FBW7nS2EzQJbMf+zW7Wu5wAgjK G9tdvbEkQfJITYqOMPPy67S1TvUwAH2aX1rFWxCnhQA2woufHkEOw56YR1FUL3dE SRlvtmfp+V5LH/o4d4rql/9ZnHIQVvYjS5B9zNbstR1gpMGn4wS/xhwowskSJYt6 2VCyNrE4aSav2G+W6h1rB6mjyGRJ+e8XUREUjLvV2AbFkfxi9Dk8mYMoLnBriWMf t9Mau9zOKqAmJt7MFZZEA+O7IXADlXv3FO1+shgh2hrQH8xJgPMCONQEOCiQuNa9 VIGhOfFOOGVDDT5wAJ7Y0HTkCwYSsl91HCKdWaVLoafZgZdKcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPD/Btmg97SOaLjsVky1MlGmgI4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGNm NWFkOC00YzY2LTRlZDktODQ1Ni0xMjNjNjliZGQ2MTIvYjY5ZGY4YjQtYmJmNS0z ZDYxLWJhOTEtZGQyZjNlMzNmNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjBjZjVhZDgtNGM2Ni00ZWQ5LTg0 NTYtMTIzYzY5YmRkNjEyLzYwY2Y1YWQ4LTRjNjYtNGVkOS04NDU2LTEyM2M2OWJk ZDYxMi5jcmwwHwYDVR0jBBgwFoAUQgghKZ+my67Lx12dZmMQGI9o/fQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGNmNWFkOC00YzY2LTRlZDktODQ1Ni0xMjNj NjliZGQ2MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8GSFZ/hvnWX6Gr9WeO+D0MYgBFLQ4dFa01HdaTbNPXwEGXfiGcYLIf K6co5VPclZAe3HcxPMipvF3rC4pC/8pWdb/zeRzJC/YaXLRO932mtQm9WVDgFh2B 0z5agtiCVuw/pFV1+02hIJGKVMfaqBakAplKpxm0WiN5sZWO0upir9th6TDVLALd S2OMMnO2NO/a2MQDkhqbRBTmypC6UA6IQ/ZUZUyB8xYX/Himt9tJ047CVipx9SXS T3kBwlhNrq9Q/N5UXT38lfrrN2XdE8INyxxqRVsY/PlsMOodiwQkNjIz5Pcg52/T P/ve+0K1KeDXnKNNaHEiodJGKHwj8sE= -----END CERTIFICATE-----Generated at Wed May 13 08:44:30 2026 by rpki-client