$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/b1101ba9-9fc3-397f-bea6-471d73949e1e.roa File: b1101ba9-9fc3-397f-bea6-471d73949e1e.roa (raw, json) Hash identifier: Q7ki1LyrT9SqxO6aSpTLVtUetzjVe5qPkl3FFEDp7SI= Subject key identifier: BD:1F:72:8C:F6:C0:CE:43:0F:91:05:3B:F6:02:7F:CD:4B:FD:66:0A Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584F19FD027114F9BA4F27995680 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/b1101ba9-9fc3-397f-bea6-471d73949e1e.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 15049 IP address blocks: 68.70.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fd:02:71:14:f9:ba:4f:27:99:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=bf447172-cac4-453f-8e87-442bef5e8dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:b3:22:a9:46:e0:cd:c0:8c:f2:43:0f:84: e6:ad:ba:a9:96:14:ad:9e:fb:0d:04:74:6d:59:88: d3:cf:00:fb:c6:9a:78:96:39:6e:00:d4:14:12:fe: 8e:c3:5d:83:0a:0f:4c:1c:26:f4:e0:11:a1:e9:16: f7:66:f8:99:58:ee:59:3e:9e:ae:ff:42:ce:48:b1: df:f0:28:53:1f:e3:54:3d:ee:39:5d:e7:97:5f:b1: c9:b2:94:bd:20:bb:2d:72:39:9a:de:a4:5d:ac:63: a2:ef:6a:31:fe:bb:9c:6a:74:78:ec:bd:23:66:5f: 0e:6c:71:85:d2:cd:4c:9b:e9:28:0f:e3:b0:25:16: 55:59:56:95:08:43:1e:a3:a7:ee:85:0c:b7:f0:30: b7:0a:2c:c0:71:b3:e3:b7:6f:e9:9b:03:e3:80:8e: 99:e3:ab:61:79:6f:8d:24:42:4b:e5:20:6b:99:5f: f5:61:43:83:64:3d:76:df:cf:87:1a:3e:78:d0:84: 61:ac:d5:0e:46:01:d0:6d:d4:1b:13:db:f6:59:7f: c4:72:c0:f7:cd:74:0e:18:55:84:3f:c3:1e:d1:0e: 50:2d:a4:90:e0:c8:50:06:46:17:76:59:0e:13:41: 76:3a:c1:22:47:fb:69:c8:ba:3a:56:72:35:55:87: 45:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1F:72:8C:F6:C0:CE:43:0F:91:05:3B:F6:02:7F:CD:4B:FD:66:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/b1101ba9-9fc3-397f-bea6-471d73949e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 68.70.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:12:ae:40:19:97:dc:2d:b5:32:18:c1:80:38:b3:04:df:0a: a7:74:33:8c:6c:da:b6:9c:a6:84:be:57:c3:58:89:55:28:f0: 32:55:3b:9c:71:64:ec:fa:f8:fc:3b:e3:90:fb:fa:bc:82:6d: 90:f3:31:36:31:bb:21:57:75:e7:b8:b1:0f:05:11:2c:74:f7: 25:e7:5a:ec:94:e0:a2:b1:3e:96:72:dd:05:0c:98:39:7f:3f: ab:fa:26:f2:a1:2d:02:ae:86:51:83:72:06:02:a6:41:68:ab: 9f:68:6c:83:07:5b:1e:af:ee:5c:46:e1:cf:ff:4c:47:00:ac: b8:cb:2c:69:3b:3f:3d:43:86:ff:ce:54:bb:6b:36:6d:13:da: 61:a5:6e:c7:ec:02:75:95:e9:f6:dd:c3:1c:bd:73:5c:98:dc: ae:77:83:e6:e2:2b:79:4a:6c:e5:28:62:e3:a6:9a:3b:4f:eb: bc:20:77:37:f1:f9:77:44:d2:58:97:bb:7c:d4:31:6b:96:46: 45:e9:1f:cd:4d:0f:d2:db:79:11:7b:67:61:6a:b8:85:76:39: 9c:46:ec:8d:63:58:29:a0:ce:3b:88:6d:95:85:6f:c0:9b:59: 8c:5b:77:4a:e3:74:e5:dc:2f:4e:0c:2c:2b:45:f8:69:42:7d: 72:ec:d1:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/QJxFPm6TyeZVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk YmY0NDcxNzItY2FjNC00NTNmLThlODctNDQyYmVmNWU4ZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRizIqlG4M3AjPJDD4TmrbqplhStnvsNBHRt WYjTzwD7xpp4ljluANQUEv6Ow12DCg9MHCb04BGh6Rb3ZviZWO5ZPp6u/0LOSLHf 8ChTH+NUPe45XeeXX7HJspS9ILstcjma3qRdrGOi72ox/rucanR47L0jZl8ObHGF 0s1Mm+koD+OwJRZVWVaVCEMeo6fuhQy38DC3CizAcbPjt2/pmwPjgI6Z46theW+N JEJL5SBrmV/1YUODZD1238+HGj540IRhrNUORgHQbdQbE9v2WX/EcsD3zXQOGFWE P8Me0Q5QLaSQ4MhQBkYXdlkOE0F2OsEiR/tpyLo6VnI1VYdFEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0fcoz2wM5DD5EFO/YCf81L/WYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvYjExMDFiYTktOWZjMy0z OTdmLWJlYTYtNDcxZDczOTQ5ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREY7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4SrkAZl9wttTIYwYA4swTfCqd0M4xs2racpoS+V8NYiVUo8DJVO5xx ZOz6+Pw745D7+ryCbZDzMTYxuyFXdee4sQ8FESx09yXnWuyU4KKxPpZy3QUMmDl/ P6v6JvKhLQKuhlGDcgYCpkFoq59obIMHWx6v7lxG4c//TEcArLjLLGk7Pz1Dhv/O VLtrNm0T2mGlbsfsAnWV6fbdwxy9c1yY3K53g+biK3lKbOUoYuOmmjtP67wgdzfx +XdE0liXu3zUMWuWRkXpH81ND9LbeRF7Z2FquIV2OZxG7I1jWCmgzjuIbZWFb8Cb WYxbd0rjdOXcL04MLCtF+GlCfXLs0YY= -----END CERTIFICATE-----Generated at Tue Oct 13 08:41:06 2026 by rpki-client