$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95dd321b-641a-3e0d-814e-9b302975ccab.roa File: 95dd321b-641a-3e0d-814e-9b302975ccab.roa (raw, json) Hash identifier: FGYOxibR7avaApiUKnfSFfmRB9iBGiJ98at9gfPqFzU= Subject key identifier: 6F:6F:28:28:82:CC:5D:A8:CF:00:58:B4:B9:5A:16:C7:B2:DC:3E:D1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584DBD05A6688B647325FFD14E40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95dd321b-641a-3e0d-814e-9b302975ccab.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 701 IP address blocks: 68.161.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:a6:68:8b:64:73:25:ff:d1:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=fe4e023e-b629-42a0-a860-9d517d483ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:55:33:85:35:f5:45:97:04:41:ca:3d:3a: c6:5f:ac:b0:3b:02:2e:e9:24:2a:92:43:7e:9b:ca: 6b:dc:4a:07:7b:af:7b:89:9c:90:62:91:bd:c1:e6: b7:4a:04:ac:43:a4:1b:dd:4b:86:b6:07:25:bf:76: 90:96:9c:7d:93:32:9e:4c:ed:6f:0e:f8:37:9b:ad: 91:4b:2f:1f:37:00:d1:f3:4f:5e:36:a4:e2:94:b7: a9:19:13:42:f0:ef:a7:6a:84:a0:b0:bb:75:ba:39: 34:62:d8:da:3b:0f:d9:12:23:e2:ce:d8:21:a3:2c: 40:ee:f2:71:10:0d:6a:a0:a1:ba:d6:47:6c:39:99: 6e:77:07:5c:ce:14:40:a3:c6:b9:1c:27:b8:83:8a: a8:5b:a6:f0:f3:ed:d7:65:5c:33:1c:a9:97:e2:e9: 2f:10:43:a3:6d:5d:b3:aa:ed:46:8c:b5:14:24:f4: 28:ce:c1:db:81:d6:68:2a:0d:5e:27:8a:29:4f:b1: 15:a9:5b:8b:be:dc:5d:06:41:49:09:be:38:49:45: f7:cc:bd:16:c3:d2:9c:08:c9:2d:5b:51:46:d2:c4: ed:84:0e:39:90:e5:5d:ad:cd:73:65:6b:72:e4:90: 0a:ea:54:97:b8:a4:16:f1:ad:d5:40:6a:44:63:10: 25:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6F:28:28:82:CC:5D:A8:CF:00:58:B4:B9:5A:16:C7:B2:DC:3E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95dd321b-641a-3e0d-814e-9b302975ccab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.161.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a7:12:36:1f:8c:7e:b4:ad:5a:d0:28:1b:d6:12:8c:ae:0e: 3b:2f:6b:5c:2f:24:48:6f:a0:bc:12:b8:aa:80:25:6b:07:75: 63:9a:3a:1d:9e:e4:50:f8:00:ed:ad:91:91:0f:82:a5:e8:7c: 64:9d:24:2b:b3:7e:39:3e:69:c0:29:4f:87:31:0b:bf:67:32: 34:93:4d:78:8d:91:39:62:32:25:ca:fa:9b:73:a2:59:c5:be: 7a:39:99:bd:5d:bb:16:cf:ec:57:2f:03:84:79:07:8e:ed:59: 8a:b4:a4:93:d2:c8:3b:a6:b6:cb:2f:3b:83:d2:99:88:81:1a: ca:16:3f:ac:04:e7:30:3b:1e:e4:fe:f2:c5:e2:83:62:dd:59: 1c:57:50:b2:08:55:15:5a:07:ef:be:5b:e0:6c:d9:cf:29:3f: 23:c2:c4:f0:84:cd:2a:26:d6:2b:66:d4:1e:97:cf:4a:60:8a: 1b:3e:4b:b6:74:88:76:f8:04:94:fc:78:fb:ac:64:ce:4c:e9: 4c:1f:36:b8:34:e0:95:44:14:cd:de:20:f4:40:c1:6f:2b:7d: db:e3:b6:9d:4c:0c:9d:b7:05:b9:4c:e2:b2:f5:09:4c:20:4b: dc:ef:80:6a:88:86:31:f0:95:4c:af:cb:ef:6a:af:5b:3f:35: 82:d7:d0:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaZoi2RzJf/RTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZmU0ZTAyM2UtYjYyOS00MmEwLWE4NjAtOWQ1MTdkNDgzYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaNVM4U19UWXBEHKPTrGX6ywOwIu6SQqkkN+ m8pr3EoHe697iZyQYpG9wea3SgSsQ6Qb3UuGtgclv3aQlpx9kzKeTO1vDvg3m62R Sy8fNwDR809eNqTilLepGRNC8O+naoSgsLt1ujk0YtjaOw/ZEiPiztghoyxA7vJx EA1qoKG61kdsOZludwdczhRAo8a5HCe4g4qoW6bw8+3XZVwzHKmX4ukvEEOjbV2z qu1GjLUUJPQozsHbgdZoKg1eJ4opT7EVqVuLvtxdBkFJCb44SUX3zL0Ww9KcCMkt W1FG0sTthA45kOVdrc1zZWty5JAK6lSXuKQW8a3VQGpEYxAlhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9vKCiCzF2ozwBYtLlaFsey3D7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTVkZDMyMWItNjQxYS0z ZTBkLTgxNGUtOWIzMDI5NzVjY2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHynEjYfjH60rVrQKBvWEoyuDjsva1wvJEhvoLwSuKqAJWsHdWOaOh2e 5FD4AO2tkZEPgqXofGSdJCuzfjk+acApT4cxC79nMjSTTXiNkTliMiXK+ptzolnF vno5mb1duxbP7FcvA4R5B47tWYq0pJPSyDumtssvO4PSmYiBGsoWP6wE5zA7HuT+ 8sXig2LdWRxXULIIVRVaB+++W+Bs2c8pPyPCxPCEzSom1itm1B6Xz0pgihs+S7Z0 iHb4BJT8ePusZM5M6UwfNrg04JVEFM3eIPRAwW8rfdvjtp1MDJ23BblM4rL1CUwg S9zvgGqIhjHwlUyvy+9qr1s/NYLX0OA= -----END CERTIFICATE-----Generated at Wed May 13 12:29:53 2026 by rpki-client