$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa File: d3144be4-dbb0-30da-85fc-0254be5834d1.roa (raw, json) Hash identifier: 5wWmQSeWC91ZSHFBcUpeG7BHjDTGW+n8po0PrEqWgfg= Subject key identifier: A0:16:B7:75:24:60:72:17:BA:F5:59:B4:CC:41:C1:A5:90:A5:81:01 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D9A2011347D100B9BD9FD4C00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 68.64.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:11:34:7d:10:0b:9b:d9:fd:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=e5b79231-f06b-4aa6-beaa-a2b225dc5360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:40:3b:4c:53:a7:96:a5:59:05:cf:fb:dc: 6f:ea:11:0a:aa:d6:9c:a2:34:50:d1:57:3a:28:24: 0a:5d:dc:6a:77:b1:f7:c6:6b:2c:9f:23:3a:06:c2: 52:0b:6a:be:09:c6:78:bf:97:7b:89:8f:d1:59:8e: 90:03:d2:82:44:c3:1f:20:b7:16:50:49:9d:64:ed: 24:a5:64:d5:f9:8f:d4:47:f7:77:d9:54:2f:51:de: 40:b1:15:48:c8:05:32:f9:5b:ba:de:24:71:69:9e: cc:53:77:9d:ff:23:26:48:c4:d3:89:bf:61:3a:64: 41:18:62:51:96:ba:6a:e5:1c:27:ae:f4:e6:50:f3: 56:ba:ad:9c:e6:2d:fc:56:61:e4:db:c8:fe:17:cc: a6:12:60:f5:20:9f:12:40:55:24:40:cc:6f:c7:80: c1:0a:d0:7f:13:f4:1f:2f:76:0e:10:5b:25:21:fe: ae:2c:e2:91:88:e6:4f:14:f4:ea:b1:16:a8:90:e2: 1e:61:08:7d:40:05:04:6d:2e:15:52:d8:87:a9:2c: bc:bf:25:a6:94:6c:34:dc:fc:00:0b:4a:cf:66:72: 6a:9c:d6:c3:bb:95:25:02:8f:9c:10:e2:d2:97:4e: 27:33:cb:f5:4c:52:f5:8c:35:cf:04:33:d9:cc:3b: 35:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:16:B7:75:24:60:72:17:BA:F5:59:B4:CC:41:C1:A5:90:A5:81:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:22:98:6d:49:be:8f:7d:e2:bf:5a:d7:97:ac:3f:49:1f:22: 3e:b3:78:f0:58:38:a7:49:b9:a4:49:07:14:72:5f:09:67:16: 89:d1:67:08:bd:e9:3a:1f:35:87:fd:7d:46:5d:cc:a3:96:4e: b1:3b:b7:03:9d:e0:b7:3f:2e:b3:e1:16:ab:d8:e8:5e:57:5f: c6:1d:0d:4d:cc:b5:d2:58:b0:2c:94:c0:a7:69:ac:cf:1c:3e: 27:e6:21:02:53:00:39:b7:5f:fb:af:27:48:70:7a:9a:ed:a2: 1e:99:00:f7:b5:79:e2:f2:18:9c:83:9c:7d:d0:df:0c:dd:31: 3e:23:24:81:5f:88:91:41:a7:85:7c:dd:2b:b7:6c:3a:c1:e1: b8:de:c3:11:48:3f:28:cd:bd:df:c9:76:64:f7:10:27:3c:74: ac:dc:a7:88:57:44:12:cb:67:e6:77:02:f3:3c:b0:6d:7f:e0: 60:a4:73:57:c4:5b:bc:b4:4e:1a:ed:c4:ba:72:e5:02:fb:73: fa:c8:1f:94:a3:38:b8:34:ce:cd:db:87:4e:b9:17:57:7c:11: 05:84:6f:15:5a:29:b7:ee:c7:b5:61:b8:31:99:cc:68:49:0c: db:08:26:18:f9:24:be:80:6e:b7:16:98:12:65:20:37:d3:0a: 9f:7a:81:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIBE0fRALm9n9TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk ZTViNzkyMzEtZjA2Yi00YWE2LWJlYWEtYTJiMjI1ZGM1MzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk75AO0xTp5alWQXP+9xv6hEKqtacojRQ0Vc6 KCQKXdxqd7H3xmssnyM6BsJSC2q+CcZ4v5d7iY/RWY6QA9KCRMMfILcWUEmdZO0k pWTV+Y/UR/d32VQvUd5AsRVIyAUy+Vu63iRxaZ7MU3ed/yMmSMTTib9hOmRBGGJR lrpq5RwnrvTmUPNWuq2c5i38VmHk28j+F8ymEmD1IJ8SQFUkQMxvx4DBCtB/E/Qf L3YOEFslIf6uLOKRiOZPFPTqsRaokOIeYQh9QAUEbS4VUtiHqSy8vyWmlGw03PwA C0rPZnJqnNbDu5UlAo+cEOLSl04nM8v1TFL1jDXPBDPZzDs1wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAWt3UkYHIXuvVZtMxBwaWQpYEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZDMxNDRiZTQtZGJiMC0z MGRhLTg1ZmMtMDI1NGJlNTgzNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREAGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANAimG1Jvo994r9a15esP0kfIj6zePBYOKdJuaRJBxRyXwlnFonRZwi9 6TofNYf9fUZdzKOWTrE7twOd4Lc/LrPhFqvY6F5XX8YdDU3MtdJYsCyUwKdprM8c PifmIQJTADm3X/uvJ0hweprtoh6ZAPe1eeLyGJyDnH3Q3wzdMT4jJIFfiJFBp4V8 3Su3bDrB4bjewxFIPyjNvd/JdmT3ECc8dKzcp4hXRBLLZ+Z3AvM8sG1/4GCkc1fE W7y0ThrtxLpy5QL7c/rIH5SjOLg0zs3bh065F1d8EQWEbxVaKbfux7VhuDGZzGhJ DNsIJhj5JL6AbrcWmBJlIDfTCp96gTo= -----END CERTIFICATE-----Generated at Wed May 13 13:10:28 2026 by rpki-client