$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa File: 6986273c-343b-39c2-9dd1-bb8ca363c568.roa (raw, json) Hash identifier: L+Nhztj+usk1e3M7feVMmfbkaQL54NMXQTl1Wedlgw8= Subject key identifier: B0:BB:13:9E:87:94:60:24:F6:05:A1:2D:EB:55:5D:5E:00:56:7E:8E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D975567721E88E5839E5682C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 40.87.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:67:72:1e:88:e5:83:9e:56:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=7a0e157a-0097-4082-a136-c6465b7f3cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:56:aa:b1:d9:98:fc:df:cb:3d:13:d3:44: 0d:af:65:68:05:4e:08:aa:93:3a:e8:bf:90:d3:78: 36:9a:0e:c4:bf:37:89:78:f1:41:49:1d:de:24:4d: a6:56:f0:8d:f7:52:0d:b8:e4:0e:4a:d4:3e:8f:f2: 37:a0:d8:4b:a7:c0:78:8e:9f:1a:44:ad:6a:95:fb: 95:bf:b1:b6:d4:46:92:42:b3:a5:79:1d:db:7c:4c: 44:bf:46:ca:bb:fe:1f:f6:93:db:2d:a0:48:57:8b: a2:f5:81:17:0b:a9:08:78:20:80:34:bf:74:5c:43: 33:53:2b:ac:e7:64:59:56:0e:32:ca:95:6d:5b:dc: ee:06:52:5f:e1:f4:12:f6:43:8a:03:21:1c:14:10: e2:8b:2d:b8:4f:78:21:b1:c5:42:71:b6:74:0f:10: 96:6d:ca:e6:ac:8d:32:67:3c:7b:a6:ec:9c:0e:35: a0:b8:69:f3:0f:8e:5c:5d:c0:f3:d7:ac:12:6f:9d: e6:0e:0a:28:5b:07:a3:cd:9b:23:b7:9e:43:fb:7b: 37:13:80:84:8a:c0:ae:ec:7e:aa:dd:9a:4e:b6:c8: 83:76:f8:0c:6f:11:c1:61:fe:0b:b3:3b:85:6f:de: 67:a8:be:21:9e:86:23:b0:b6:fd:56:7b:2a:7f:50: 4f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BB:13:9E:87:94:60:24:F6:05:A1:2D:EB:55:5D:5E:00:56:7E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.87.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e8:2e:06:05:17:e7:f2:5d:08:8f:f8:6c:55:6f:78:44:ed: 3b:f9:52:84:49:cf:d8:7e:fe:a9:32:b1:8a:6d:72:b6:42:ce: 1d:28:5f:b1:a2:8e:7b:ba:d8:07:f0:5d:0c:c9:b8:00:b7:8a: cf:cb:b1:cb:8f:eb:5e:44:66:90:51:71:81:d3:48:95:cc:0a: f2:f6:ee:90:80:66:cb:3a:0c:6b:16:66:74:73:f4:40:25:44: 6a:db:9c:d0:5e:21:ab:81:53:17:df:17:35:37:ae:f6:c4:88: da:49:f5:ce:2c:6c:eb:eb:22:96:49:cb:21:a0:42:29:c7:c4: 2a:1b:da:b2:ee:fb:a8:a8:f4:4f:4f:6f:8e:ab:90:d0:cf:0f: 3f:f9:b8:e9:aa:34:22:0b:65:21:0a:20:96:8c:ec:88:be:af: de:15:19:65:86:c5:e6:70:13:bf:8b:9c:e7:16:ae:11:b0:9d: 4d:c3:f1:73:54:63:b4:6e:39:29:b9:60:6e:7f:4d:ee:65:cb: 08:02:8b:fb:20:06:77:ff:e5:85:f9:8b:a6:b4:96:cd:13:32: 67:e0:40:b7:7e:21:ec:e2:e2:50:8d:25:03:13:94:c7:24:a3: 3c:20:86:5f:66:81:b9:18:74:82:8a:5f:96:d7:ba:d4:a0:52: 38:48:ca:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWdyHojlg55WgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk N2EwZTE1N2EtMDA5Ny00MDgyLWExMzYtYzY0NjViN2YzY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqtWqrHZmPzfyz0T00QNr2VoBU4IqpM66L+Q 03g2mg7EvzeJePFBSR3eJE2mVvCN91INuOQOStQ+j/I3oNhLp8B4jp8aRK1qlfuV v7G21EaSQrOleR3bfExEv0bKu/4f9pPbLaBIV4ui9YEXC6kIeCCANL90XEMzUyus 52RZVg4yypVtW9zuBlJf4fQS9kOKAyEcFBDiiy24T3ghscVCcbZ0DxCWbcrmrI0y Zzx7puycDjWguGnzD45cXcDz16wSb53mDgooWwejzZsjt55D+3s3E4CEisCu7H6q 3ZpOtsiDdvgMbxHBYf4LszuFb95nqL4hnoYjsLb9Vnsqf1BPFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLC7E56HlGAk9gWhLetVXV4AVn6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk4NjI3M2MtMzQzYi0z OWMyLTlkZDEtYmI4Y2EzNjNjNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKFcnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPoLgYFF+fyXQiP+GxVb3hE7Tv5UoRJz9h+/qkysYptcrZCzh0oX7Gi jnu62AfwXQzJuAC3is/LscuP615EZpBRcYHTSJXMCvL27pCAZss6DGsWZnRz9EAl RGrbnNBeIauBUxffFzU3rvbEiNpJ9c4sbOvrIpZJyyGgQinHxCob2rLu+6io9E9P b46rkNDPDz/5uOmqNCILZSEKIJaM7Ii+r94VGWWGxeZwE7+LnOcWrhGwnU3D8XNU Y7RuOSm5YG5/Te5lywgCi/sgBnf/5YX5i6a0ls0TMmfgQLd+Iezi4lCNJQMTlMck ozwghl9mgbkYdIKKX5bXutSgUjhIyvA= -----END CERTIFICATE-----Generated at Wed May 13 14:31:21 2026 by rpki-client