$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa File: 6de1fbab-8ba5-3ece-969d-b6be65026f84.roa (raw, json) Hash identifier: hr4D6qFlAF0VtzfeoEhh3etx5JobdRvO8EHagjJrm9s= Subject key identifier: D1:1E:13:A8:D8:AF:AA:20:52:FE:B3:7E:CE:84:AF:93:67:CC:21:69 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D1707D8DD229945196FE2BE80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 68.64.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:d8:dd:22:99:45:19:6f:e2:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=82307b30-cc22-4480-b68e-429a39a7c0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:73:8c:bc:41:2d:f1:7c:83:07:f6:46:c6: 7f:89:81:9f:f4:c0:a3:fc:21:46:f8:6f:a0:99:13: 28:dc:f2:d1:3a:aa:67:e2:fb:3c:c8:3a:d5:52:5c: 8e:ac:d9:07:4a:e2:ab:bd:77:aa:53:7f:be:83:1d: 4f:d3:cc:61:e3:ec:fa:c7:17:65:6b:b7:41:10:21: 37:93:7e:3a:64:a9:39:36:68:54:8c:70:07:1c:b3: 87:fa:b4:fb:8f:95:21:e3:da:4c:24:21:65:c4:92: c0:09:b4:1d:19:53:e7:b4:8d:a3:8c:66:e9:33:72: f4:f1:8c:32:37:70:6f:f7:27:40:8c:2e:9c:2d:38: 22:d0:94:5f:0e:4b:a5:77:b0:fa:99:e7:e8:41:4b: c6:38:05:b3:64:57:ab:89:5e:ce:83:31:fa:26:59: 53:84:04:5f:51:fe:50:e9:85:46:94:27:66:21:2c: 30:26:01:29:68:09:6e:5f:07:44:07:ec:23:94:ea: 85:6b:e6:c7:19:ed:7e:51:11:15:ce:fe:5b:4f:4f: af:ef:97:1a:b0:b9:b7:67:cf:b4:5e:49:f3:6f:a1: 84:67:58:06:ea:e9:61:49:b1:0d:6a:ea:a6:42:25: 84:36:d1:7f:f7:61:c0:3c:cf:a7:21:ae:75:e4:41: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1E:13:A8:D8:AF:AA:20:52:FE:B3:7E:CE:84:AF:93:67:CC:21:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e8:71:ad:06:64:4b:db:f7:4b:65:0d:10:0a:5d:82:ef:74: c0:1b:36:ab:da:54:82:ef:26:c4:e6:2a:0e:43:1b:cc:ca:02: 32:73:d0:2f:cb:7b:bd:5f:02:88:e8:13:72:3c:7d:13:20:94: ca:e2:be:b0:fe:8e:45:05:a5:9e:47:34:e5:c9:73:3e:0c:97: 94:41:10:21:c1:f1:e1:e9:49:03:6c:ec:9b:35:22:8d:72:bc: d4:6f:fb:32:94:41:0d:52:38:e1:bb:6b:1c:cf:8b:20:51:a4: a1:b7:ef:d7:87:85:63:ad:b7:00:86:9e:9d:98:07:4e:b8:a8: b6:59:84:fc:71:f3:2b:62:b5:04:b9:8a:69:d2:93:c4:e3:c3: a4:bc:4c:04:23:82:dd:30:a2:e5:4c:5f:33:4d:47:f9:77:cd: e4:0d:93:03:93:50:ac:e2:09:7a:01:d9:a7:03:c7:ff:80:91: ea:6a:82:4b:fc:b8:e8:f0:b2:00:cc:af:70:cb:d7:93:f7:c7: 00:b4:36:67:cf:bf:70:ae:c7:bd:d6:40:02:a5:f1:03:9a:45: 0a:9d:98:43:13:90:92:46:9e:15:25:9f:ae:d4:a5:38:4f:b5: 62:d2:f3:d8:fc:93:bb:b3:c8:b2:5c:ca:68:a9:2d:a3:07:d6: 27:32:0b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB9jdIplFGW/ivoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk ODIzMDdiMzAtY2MyMi00NDgwLWI2OGUtNDI5YTM5YTdjMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPFzjLxBLfF8gwf2RsZ/iYGf9MCj/CFG+G+g mRMo3PLROqpn4vs8yDrVUlyOrNkHSuKrvXeqU3++gx1P08xh4+z6xxdla7dBECE3 k346ZKk5NmhUjHAHHLOH+rT7j5Uh49pMJCFlxJLACbQdGVPntI2jjGbpM3L08Ywy N3Bv9ydAjC6cLTgi0JRfDkuld7D6mefoQUvGOAWzZFeriV7OgzH6JllThARfUf5Q 6YVGlCdmISwwJgEpaAluXwdEB+wjlOqFa+bHGe1+UREVzv5bT0+v75casLm3Z8+0 Xknzb6GEZ1gG6ulhSbENauqmQiWENtF/92HAPM+nIa515EFStwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEeE6jYr6ogUv6zfs6Er5NnzCFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmRlMWZiYWItOGJhNS0z ZWNlLTk2OWQtYjZiZTY1MDI2Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjoca0GZEvb90tlDRAKXYLvdMAbNqvaVILvJsTmKg5DG8zKAjJz0C/L e71fAojoE3I8fRMglMrivrD+jkUFpZ5HNOXJcz4Ml5RBECHB8eHpSQNs7Js1Io1y vNRv+zKUQQ1SOOG7axzPiyBRpKG379eHhWOttwCGnp2YB064qLZZhPxx8ytitQS5 imnSk8Tjw6S8TAQjgt0wouVMXzNNR/l3zeQNkwOTUKziCXoB2acDx/+Akepqgkv8 uOjwsgDMr3DL15P3xwC0NmfPv3Cux73WQAKl8QOaRQqdmEMTkJJGnhUln67UpThP tWLS89j8k7uzyLJcymipLaMH1icyC1c= -----END CERTIFICATE-----Generated at Thu Mar 26 03:59:51 2026 by rpki-client