$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/06cca47d-833e-326a-8584-0f4891b5f225.roa File: 06cca47d-833e-326a-8584-0f4891b5f225.roa (raw, json) Hash identifier: 3J4OT/zhrNZufznRynNZNH6iLz0sy7gogR2gM4s0RBE= Subject key identifier: 4F:81:09:3E:ED:7F:51:CB:74:EC:3F:B8:0F:6F:58:84:74:6A:26:08 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC45850D9F90EAA44FEF4D80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/06cca47d-833e-326a-8584-0f4891b5f225.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54858 IP address blocks: 68.66.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:85:0d:9f:90:ea:a4:4f:ef:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=0bc406d1-261a-4fa9-ba95-f32e02d94863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:fc:a6:82:47:f3:5d:25:55:38:50:9a:2f: 4e:7c:f5:91:28:90:87:d3:88:ed:9b:3b:ab:dc:b0: b4:6a:97:4c:d6:57:9e:de:2f:0c:7a:86:0b:fa:72: bd:2f:6c:27:d7:bc:3e:c9:11:ef:b7:7d:c3:b2:c8: aa:40:f3:47:6a:eb:83:01:64:96:07:a9:41:31:56: 50:de:ed:d1:04:54:78:e3:92:ea:85:34:1b:ca:f9: de:ce:2c:3f:b8:60:0a:a8:62:5b:af:0e:fa:b4:06: cb:76:d4:5b:55:37:ab:11:0c:6c:22:28:47:29:6e: 58:b3:59:1d:d6:39:38:64:80:77:07:c1:54:f0:52: 00:3d:71:c1:59:b0:dd:1e:4e:3f:a2:69:fc:19:51: 00:23:d9:84:75:6b:bf:b2:3a:06:4c:73:83:2f:5e: 63:6d:c0:0c:2a:25:91:0f:f7:ed:70:46:fa:a2:b4: 46:2d:50:af:af:bb:ad:93:be:68:db:71:67:db:b5: 10:b2:77:46:c8:c0:4c:69:54:e4:55:59:89:42:7c: d8:e7:61:6e:d5:33:64:a9:99:aa:13:d7:05:89:33: 85:4d:e3:dc:da:5b:68:8d:3d:2d:c2:c9:85:fa:e5: 4e:20:ed:db:81:0f:35:31:39:60:a1:bd:30:8d:63: 1d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:81:09:3E:ED:7F:51:CB:74:EC:3F:B8:0F:6F:58:84:74:6A:26:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/06cca47d-833e-326a-8584-0f4891b5f225.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 68.66.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:66:8c:a8:55:45:9f:6f:e4:d1:86:87:12:e4:31:17:ca:35: b0:af:57:ce:47:16:74:53:56:cc:04:6d:ac:49:a9:02:0e:bd: 75:5f:1d:37:21:16:86:d1:69:12:8e:65:a7:ce:85:ba:b8:f4: 71:81:42:31:bd:65:49:60:c7:14:cb:ad:8f:ae:cc:d8:dd:07: 00:c6:f4:fa:6e:9b:40:51:17:55:1b:84:0b:37:bc:90:e2:9b: 3d:a5:b8:4d:0a:46:25:1c:85:17:cc:e3:c6:a6:b7:20:52:a3: 40:73:17:6e:e8:cd:79:79:4e:a1:dc:d5:52:c7:1d:ce:9b:50: 1c:27:2a:2c:76:de:37:1f:7e:66:ce:01:35:90:69:5c:03:a7: 91:bf:50:f7:7c:4a:20:21:86:cd:8a:82:bc:12:5a:81:15:a6: 55:a7:47:32:13:88:60:9a:ee:2c:5c:a4:70:73:d5:d2:b8:53: 1a:fe:99:11:4c:e9:59:d9:f2:8c:d6:36:6c:b3:5c:70:5b:1b: 07:6f:e1:e3:e3:e9:ed:4d:b3:a6:60:89:56:ad:14:d5:28:8b: 76:c2:e7:43:a6:a7:db:ec:e9:b4:7d:38:54:3d:00:36:36:e4: 3c:c6:6a:d8:e3:d7:27:9c:f7:30:8e:88:f2:64:ac:e6:3b:78: fe:c3:c6:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRYUNn5DqpE/vTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MGJjNDA2ZDEtMjYxYS00ZmE5LWJhOTUtZjMyZTAyZDk0ODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ib8poJH810lVThQmi9OfPWRKJCH04jtmzur 3LC0apdM1lee3i8MeoYL+nK9L2wn17w+yRHvt33DssiqQPNHauuDAWSWB6lBMVZQ 3u3RBFR445LqhTQbyvneziw/uGAKqGJbrw76tAbLdtRbVTerEQxsIihHKW5Ys1kd 1jk4ZIB3B8FU8FIAPXHBWbDdHk4/omn8GVEAI9mEdWu/sjoGTHODL15jbcAMKiWR D/ftcEb6orRGLVCvr7utk75o23Fn27UQsndGyMBMaVTkVVmJQnzY52Fu1TNkqZmq E9cFiTOFTePc2ltojT0twsmF+uVOIO3bgQ81MTlgob0wjWMd1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+BCT7tf1HLdOw/uA9vWIR0aiYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMDZjY2E0N2QtODMzZS0z MjZhLTg1ODQtMGY0ODkxYjVmMjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlmjKhVRZ9v5NGGhxLkMRfKNbCvV85HFnRTVswEbaxJqQIOvXVfHTch FobRaRKOZafOhbq49HGBQjG9ZUlgxxTLrY+uzNjdBwDG9Ppum0BRF1UbhAs3vJDi mz2luE0KRiUchRfM48amtyBSo0BzF27ozXl5TqHc1VLHHc6bUBwnKix23jcffmbO ATWQaVwDp5G/UPd8SiAhhs2KgrwSWoEVplWnRzITiGCa7ixcpHBz1dK4Uxr+mRFM 6VnZ8ozWNmyzXHBbGwdv4ePj6e1Ns6ZgiVatFNUoi3bC50Omp9vs6bR9OFQ9ADY2 5DzGatjj1yec9zCOiPJkrOY7eP7DxuQ= -----END CERTIFICATE-----Generated at Wed May 13 08:50:22 2026 by rpki-client