$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2f16055-ce8a-303c-8e3f-530ceda242c5.roa File: a2f16055-ce8a-303c-8e3f-530ceda242c5.roa (raw, json) Hash identifier: QZpn9EuCX5GSLAzICfnB2r9SxEE87NurPAnt2fGMQQw= Subject key identifier: 34:1B:39:8B:D0:AE:2E:E5:1E:27:97:60:D5:DD:99:6B:4B:AE:06:B8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9755663F4D5DAAF6A35E77C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2f16055-ce8a-303c-8e3f-530ceda242c5.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 40.65.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:66:3f:4d:5d:aa:f6:a3:5e:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=9fae1c46-d722-401c-80be-3595d8ee3fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:8f:da:a4:61:25:e7:dc:73:23:1c:26:ee: 73:81:ac:83:5a:19:fb:89:da:7a:41:6d:eb:42:c9: 5d:94:02:95:83:d1:78:96:25:16:85:e8:58:09:70: f2:dd:ac:a8:95:54:7d:d5:58:12:a9:bd:f1:d7:e1: a3:01:e7:21:e4:00:83:a9:2a:82:34:69:5c:14:51: 43:5c:b3:b7:97:41:6c:35:2f:4f:6b:36:47:e0:18: 63:d7:6f:ea:32:bb:f1:70:71:40:8e:f0:da:da:75: db:ff:79:bc:99:69:25:93:43:d3:37:d3:cd:08:9f: ee:d0:3a:22:45:49:38:af:66:c7:91:24:01:43:61: d6:53:87:a9:99:02:c1:30:58:71:82:c1:32:f1:e3: d7:ff:d4:08:b1:83:ba:d5:59:24:80:06:2e:4d:40: da:94:f7:60:d9:c5:c0:5d:08:38:0e:a5:e6:1d:af: 8b:05:76:c8:a4:02:82:69:a2:f8:16:9b:2c:4f:27: 1a:1b:7f:69:8b:5b:d8:e9:35:b8:61:64:90:29:4c: 02:28:5f:e1:e7:9a:56:7e:82:c4:ae:be:33:6e:8e: 79:85:cb:50:32:45:e3:3b:fd:64:59:05:49:fc:ab: 1b:0f:7e:b6:2b:08:c7:7f:db:fe:df:d2:ae:28:72: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1B:39:8B:D0:AE:2E:E5:1E:27:97:60:D5:DD:99:6B:4B:AE:06:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a2f16055-ce8a-303c-8e3f-530ceda242c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.65.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:46:73:ca:5b:ec:c3:67:88:93:69:4e:72:97:94:51:fb:c3: 6e:c5:4d:89:a4:c0:7e:0e:f9:4d:02:2d:3c:41:ed:3b:39:d9: 76:0c:bb:45:a4:ca:15:18:78:c2:54:86:71:d0:6d:7e:1f:2f: 00:fc:c5:fb:2f:38:18:8d:ac:c2:97:00:92:2d:0f:89:9d:eb: a7:ab:7f:1c:7e:58:3e:8a:ba:4a:84:f0:b0:28:92:f0:49:7b: 9b:e9:40:2d:8a:eb:a8:15:fa:6f:7b:75:fb:7a:cb:8e:09:d2: c6:b7:e8:77:78:b4:69:fe:c0:4d:ff:13:d7:0d:3f:83:d9:15: 62:7d:83:f3:c8:e6:0a:e2:f2:ac:3b:75:83:38:36:88:20:d6: 5b:fb:22:a5:39:d6:82:77:71:9a:89:e2:2a:a6:e9:0a:0e:d0: 2d:55:d2:d1:67:0f:0e:77:9f:4c:3b:21:64:19:d6:e1:79:76: 28:88:e3:86:26:db:12:33:26:26:8d:f3:cf:86:d8:00:9b:35: 1c:13:f8:08:77:43:b9:c3:68:dc:81:43:e6:2a:22:b5:6b:ba: 3d:f7:a2:2b:4a:b5:0f:32:50:94:f2:5c:67:c7:4d:7f:6c:58: 37:dd:0a:bc:2d:d6:d0:d6:84:1d:6c:d0:61:40:03:b1:81:c5: d5:12:cf:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWY/TV2q9qNed8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk OWZhZTFjNDYtZDcyMi00MDFjLTgwYmUtMzU5NWQ4ZWUzZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5qP2qRhJefccyMcJu5zgayDWhn7idp6QW3r QsldlAKVg9F4liUWhehYCXDy3ayolVR91VgSqb3x1+GjAech5ACDqSqCNGlcFFFD XLO3l0FsNS9PazZH4Bhj12/qMrvxcHFAjvDa2nXb/3m8mWklk0PTN9PNCJ/u0Doi RUk4r2bHkSQBQ2HWU4epmQLBMFhxgsEy8ePX/9QIsYO61VkkgAYuTUDalPdg2cXA XQg4DqXmHa+LBXbIpAKCaaL4FpssTycaG39pi1vY6TW4YWSQKUwCKF/h55pWfoLE rr4zbo55hctQMkXjO/1kWQVJ/KsbD362KwjHf9v+39KuKHJ93wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQbOYvQri7lHieXYNXdmWtLrga4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTJmMTYwNTUtY2U4YS0z MDNjLThlM2YtNTMwY2VkYTI0MmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKEFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBGc8pb7MNniJNpTnKXlFH7w27FTYmkwH4O+U0CLTxB7Ts52XYMu0Wk yhUYeMJUhnHQbX4fLwD8xfsvOBiNrMKXAJItD4md66erfxx+WD6KukqE8LAokvBJ e5vpQC2K66gV+m97dft6y44J0sa36Hd4tGn+wE3/E9cNP4PZFWJ9g/PI5gri8qw7 dYM4Nogg1lv7IqU51oJ3cZqJ4iqm6QoO0C1V0tFnDw53n0w7IWQZ1uF5diiI44Ym 2xIzJiaN88+G2ACbNRwT+Ah3Q7nDaNyBQ+YqIrVruj33oitKtQ8yUJTyXGfHTX9s WDfdCrwt1tDWhB1s0GFAA7GBxdUSz2Q= -----END CERTIFICATE-----Generated at Wed May 13 12:48:51 2026 by rpki-client