$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa File: c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa (raw, json) Hash identifier: E7NVIkFP2+0Bb3HF49Af1r3OzoqDVQekqWj6NSiayCY= Subject key identifier: 8C:12:E2:02:2F:14:87:4D:D5:A5:E1:13:A1:B5:79:F1:54:FE:13:41 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC458E43C719C669F7986200 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 68.66.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:8e:43:c7:19:c6:69:f7:98:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=99e7c880-cecc-4af1-bb70-cfde54b0ca7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:52:a5:01:e8:f0:43:04:14:14:33:13:4c:28: f3:33:20:6a:ca:0d:e4:8a:99:1d:9e:0b:1d:87:7f: a9:72:5c:de:5f:a1:3a:69:35:02:b5:c7:ad:bb:55: 96:16:d5:4e:de:58:ec:62:4c:1c:dd:26:4e:7f:e5: a3:44:e5:65:7a:e8:3f:7c:0b:ba:0b:00:be:51:79: 98:c6:cd:83:0e:7f:6b:e1:8c:07:3f:09:63:e0:a7: 7c:fd:b7:9a:1c:14:7a:3e:a9:1b:61:fc:35:21:1e: 25:e2:4b:ea:0f:b1:39:e8:f4:0c:13:21:5a:5c:eb: 26:58:2b:18:4a:a4:00:c5:19:c4:e2:db:e9:20:3b: 17:8d:29:60:fe:1e:d3:45:17:65:d3:ad:5c:f2:8a: 01:01:6f:f6:3a:ba:cd:a6:19:7b:6f:4b:c8:d8:71: 0c:67:93:b6:c1:b2:99:37:31:90:00:d0:fe:09:91: 33:58:c2:1a:60:48:ab:d7:a3:12:c0:dd:4c:ab:7c: 6a:8e:51:1a:dc:49:9c:6c:61:71:7b:a4:5e:4f:0a: 70:53:3a:9a:d2:0b:d4:04:d1:a1:d2:b9:3a:2f:b6: 09:a3:31:00:75:21:52:34:2c:1a:c3:a0:6f:29:65: 4f:a6:0c:bf:f1:69:53:85:95:fc:b8:14:70:c3:97: be:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:12:E2:02:2F:14:87:4D:D5:A5:E1:13:A1:B5:79:F1:54:FE:13:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 68.66.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ef:19:dc:7c:e8:43:c7:56:43:17:36:7d:45:93:6b:53:76: 1d:59:46:73:49:52:52:de:e7:e4:f9:78:0d:1f:21:80:0c:83: 9e:ab:85:d4:d4:54:dd:83:b8:11:30:76:7e:e1:0b:fd:9a:1d: fa:ca:ad:cc:c3:e7:ea:52:97:80:cf:b8:97:f6:87:5e:fe:ff: 68:15:44:5c:f3:7d:01:32:31:6d:d7:c4:a5:76:ff:af:a5:07: d7:b2:e1:5a:dc:91:1b:93:d8:56:43:fc:e8:0f:96:c2:48:b8: fc:9b:28:38:74:e5:a3:b9:15:10:5a:14:fd:68:34:4e:54:0c: 3c:35:73:f6:fe:2b:5d:70:e1:15:77:24:8d:f0:d5:d6:6e:69: 7d:a1:e1:f3:38:66:0e:d2:a0:84:a6:47:9f:8a:8d:05:17:a4: 52:0a:78:1a:1c:81:89:96:7b:e8:8e:ff:2f:4b:b8:2d:6d:a9: 5c:62:26:e9:e7:dc:21:53:ba:89:4a:44:86:60:a4:7e:61:01: d1:1e:cf:ff:4a:81:6f:e5:b7:58:db:55:b2:b5:2b:12:7f:75: 46:02:39:67:8d:4d:7f:66:7f:85:91:c6:10:82:7d:c8:7b:9d: bd:65:57:0c:f3:e2:f6:2b:1d:69:a6:e5:0e:fb:56:69:cc:4d: 27:22:6d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRY5DxxnGafeYYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk OTllN2M4ODAtY2VjYy00YWYxLWJiNzAtY2ZkZTU0YjBjYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFKlAejwQwQUFDMTTCjzMyBqyg3kipkdngsd h3+pclzeX6E6aTUCtcetu1WWFtVO3ljsYkwc3SZOf+WjROVleug/fAu6CwC+UXmY xs2DDn9r4YwHPwlj4Kd8/beaHBR6PqkbYfw1IR4l4kvqD7E56PQMEyFaXOsmWCsY SqQAxRnE4tvpIDsXjSlg/h7TRRdl061c8ooBAW/2OrrNphl7b0vI2HEMZ5O2wbKZ NzGQAND+CZEzWMIaYEir16MSwN1Mq3xqjlEa3EmcbGFxe6ReTwpwUzqa0gvUBNGh 0rk6L7YJozEAdSFSNCwaw6BvKWVPpgy/8WlThZX8uBRww5e+3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwS4gIvFIdN1aXhE6G1efFU/hNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYzA4ZTMwZTUtMzY2Ny0z NTAzLWJjYjEtMDkyMmFiNWM3YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjvGdx86EPHVkMXNn1Fk2tTdh1ZRnNJUlLe5+T5eA0fIYAMg56rhdTU VN2DuBEwdn7hC/2aHfrKrczD5+pSl4DPuJf2h17+/2gVRFzzfQEyMW3XxKV2/6+l B9ey4VrckRuT2FZD/OgPlsJIuPybKDh05aO5FRBaFP1oNE5UDDw1c/b+K11w4RV3 JI3w1dZuaX2h4fM4Zg7SoISmR5+KjQUXpFIKeBocgYmWe+iO/y9LuC1tqVxiJunn 3CFTuolKRIZgpH5hAdEez/9KgW/lt1jbVbK1KxJ/dUYCOWeNTX9mf4WRxhCCfch7 nb1lVwzz4vYrHWmm5Q77VmnMTScibdQ= -----END CERTIFICATE-----Generated at Wed May 13 06:40:44 2026 by rpki-client