$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3e8584b-879e-3f7a-b38e-60270fb62d29.roa File: b3e8584b-879e-3f7a-b38e-60270fb62d29.roa (raw, json) Hash identifier: YLTnGVu99EApxHfCxmdMVtZalHBU5pL6g9lrh2VJ82Q= Subject key identifier: 7E:18:33:50:0C:3F:33:40:3A:87:2F:F1:05:8C:10:FE:F7:0B:84:F4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D9755681F15542C43485D6780 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3e8584b-879e-3f7a-b38e-60270fb62d29.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 8069 IP address blocks: 4.213.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:68:1f:15:54:2c:43:48:5d:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=f6ec4897-d101-4596-bbd3-9ec5ea8934d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:22:05:3a:54:53:30:b6:fc:9d:f9:4f:82:2b: ff:0e:61:29:14:6d:a3:66:b6:96:03:33:41:30:bb: 69:5a:fb:a2:c1:d2:a6:9f:4c:f3:af:b8:4a:30:f6: 26:d8:dd:4b:e0:a5:0c:25:50:e0:6c:ae:b1:88:d3: bf:05:dd:ad:1d:2d:fe:cc:92:51:48:c9:91:8e:d0: c4:cb:cd:8f:e9:3d:bf:93:c3:76:e8:c5:23:49:15: e5:52:c7:a5:7c:1f:a8:fa:18:70:b4:d9:cd:eb:1d: 54:99:92:cf:b1:34:43:1e:3d:de:21:15:e5:d2:c7: 7b:7f:34:0c:b3:bd:23:a3:d5:f3:96:65:2c:5c:a2: a7:b8:41:29:f9:01:58:13:a8:96:7f:19:c4:c2:b5: 80:2d:41:c0:be:37:ff:80:9e:0f:4d:68:40:1e:cb: a5:b4:f1:a1:70:3f:2a:70:9b:a0:cf:7a:b7:cc:4f: 91:5b:ed:1b:20:05:c8:74:83:81:85:17:31:8b:c0: 61:cf:6f:0d:aa:46:55:b6:71:db:27:c4:7d:66:9b: 58:1d:ef:e9:2e:69:f3:65:21:ec:4c:fc:25:25:23: 31:67:3e:43:4e:c7:e2:dd:18:8d:42:97:4b:f2:45: d6:40:17:e7:3f:f2:15:ee:51:e1:93:ca:a7:70:0a: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:18:33:50:0C:3F:33:40:3A:87:2F:F1:05:8C:10:FE:F7:0B:84:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3e8584b-879e-3f7a-b38e-60270fb62d29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 4.213.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4a:19:58:6a:b1:21:2b:2f:10:12:5f:55:28:d2:6b:b4:47: be:ad:8d:53:1b:6e:aa:61:84:50:92:f8:a8:fc:be:e1:e1:30: 99:00:6c:42:70:ce:b7:a8:45:cc:da:a8:47:d1:fa:f8:f8:83: 09:66:92:ec:dc:ad:10:03:52:ab:96:53:63:97:f2:d1:24:81: 2a:f5:29:62:c3:53:69:20:53:4a:ac:98:b7:cf:a9:ae:75:51: aa:40:1e:1e:7f:00:e0:6f:be:89:a0:40:cb:b0:cd:2f:e3:03: b6:7e:98:5b:68:d0:cd:96:00:8d:a1:b7:4e:40:cf:a8:67:77: ad:b0:22:41:b1:bc:ea:7c:6c:14:fd:9d:04:8a:47:31:75:f0: ad:9a:30:33:64:a8:4a:87:8a:63:75:ac:f3:14:10:0a:c9:f2: c1:67:85:e2:dc:09:b8:1c:5a:fc:a9:37:c1:7b:5d:50:48:e2: b6:95:17:f7:d9:36:17:a8:39:a5:6f:54:8b:54:2c:69:a2:04: d7:e5:72:e3:35:b5:2d:9c:95:18:b5:8f:5e:09:8a:5f:d2:9a: ee:61:91:a9:c2:c5:c9:d2:99:c5:60:38:74:b9:b5:5e:fc:a3: 5b:8a:6d:cb:68:11:40:e7:39:69:83:c5:de:66:86:61:46:9e: 17:8b:af:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWgfFVQsQ0hdZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk ZjZlYzQ4OTctZDEwMS00NTk2LWJiZDMtOWVjNWVhODkzNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyIFOlRTMLb8nflPgiv/DmEpFG2jZraWAzNB MLtpWvuiwdKmn0zzr7hKMPYm2N1L4KUMJVDgbK6xiNO/Bd2tHS3+zJJRSMmRjtDE y82P6T2/k8N26MUjSRXlUselfB+o+hhwtNnN6x1UmZLPsTRDHj3eIRXl0sd7fzQM s70jo9XzlmUsXKKnuEEp+QFYE6iWfxnEwrWALUHAvjf/gJ4PTWhAHsultPGhcD8q cJugz3q3zE+RW+0bIAXIdIOBhRcxi8Bhz28NqkZVtnHbJ8R9ZptYHe/pLmnzZSHs TPwlJSMxZz5DTsfi3RiNQpdL8kXWQBfnP/IV7lHhk8qncArZGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4YM1AMPzNAOocv8QWMEP73C4T0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjNlODU4NGItODc5ZS0z ZjdhLWIzOGUtNjAyNzBmYjYyZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABNX3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpKGVhqsSErLxASX1Uo0mu0R76tjVMbbqphhFCS+Kj8vuHhMJkAbEJw zreoRczaqEfR+vj4gwlmkuzcrRADUquWU2OX8tEkgSr1KWLDU2kgU0qsmLfPqa51 UapAHh5/AOBvvomgQMuwzS/jA7Z+mFto0M2WAI2ht05Az6hnd62wIkGxvOp8bBT9 nQSKRzF18K2aMDNkqEqHimN1rPMUEArJ8sFnheLcCbgcWvypN8F7XVBI4raVF/fZ NheoOaVvVItULGmiBNflcuM1tS2clRi1j14Jil/Smu5hkanCxcnSmcVgOHS5tV78 o1uKbctoEUDnOWmDxd5mhmFGnheLr0M= -----END CERTIFICATE-----Generated at Wed May 13 10:45:02 2026 by rpki-client