$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8b24ccbd-6674-3a29-beb0-9229a226ee94.roa File: 8b24ccbd-6674-3a29-beb0-9229a226ee94.roa (raw, json) Hash identifier: tPyysGnT5VA73PwyjJMIntjWztfTnPq97akvipsIPbg= Subject key identifier: DD:51:99:29:D4:08:98:C7:43:22:F4:35:15:A4:36:98:DB:AE:D3:EA Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA22EBF2AD14B6CEA376D80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8b24ccbd-6674-3a29-beb0-9229a226ee94.roa Signing time: Sun 19 Jul 2026 18:24:16 +0000 ROA not before: Sun 19 Jul 2026 18:24:16 +0000 ROA not after: Sat 17 Oct 2026 18:24:16 +0000 asID: 11404 IP address blocks: 68.66.144.0/20 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:2e:bf:2a:d1:4b:6c:ea:37:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:16 2026 GMT Not After : Oct 17 18:24:16 2026 GMT Subject: CN=31e3aed3-e320-4183-8761-06bf7bb1949c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:15:4f:ce:f8:04:6a:0d:1c:23:a7:3e:a4: 0b:9e:b1:ce:b1:96:2d:24:c0:40:6a:34:d8:48:39: 14:50:d2:1a:4c:3d:cb:1a:46:c3:80:ad:92:fb:af: b4:98:b0:45:5f:d0:25:59:47:11:d8:a9:36:a8:d1: 7d:1a:53:69:87:8d:86:5c:c7:56:9e:de:2c:40:6a: a5:de:97:4f:24:4b:58:52:44:2f:92:51:b0:58:4d: b8:56:28:02:c2:5e:0a:f2:5a:75:34:5d:bc:7d:ff: 44:15:ee:85:e7:06:33:a1:9c:93:55:37:b9:3c:5b: 72:f5:a5:cb:54:93:79:f7:9e:ab:32:1b:8f:3c:f4: 14:40:12:11:41:40:ef:b3:52:fc:fc:38:7e:34:73: 09:e2:ee:c1:a3:d8:e7:2c:f9:ea:e0:75:9c:e7:fc: b1:a0:15:7d:18:86:12:03:83:10:71:a5:45:9f:e5: 0b:ce:1f:2a:a0:ef:c0:30:d8:b9:a6:cd:31:67:f1: 16:9f:55:f3:d6:9c:51:92:f1:2e:52:ed:ba:f0:80: be:94:7b:87:b6:8d:2e:e6:34:a2:48:a3:4b:de:f8: f1:29:c2:56:0c:0a:0d:9e:6b:d3:53:74:bd:d0:c2: ca:ea:db:ce:ef:27:6c:ff:78:13:80:74:e2:0c:b3: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:51:99:29:D4:08:98:C7:43:22:F4:35:15:A4:36:98:DB:AE:D3:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8b24ccbd-6674-3a29-beb0-9229a226ee94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 68.66.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:83:9a:b0:20:f8:04:da:d9:46:dc:d7:1e:84:d6:55:81:84: f7:7d:02:3f:41:44:07:43:21:a6:cb:84:ea:93:b0:bf:ee:b2: 22:da:d2:83:87:67:11:46:21:24:5b:05:8d:e8:36:b2:93:d6: b4:f0:2b:17:46:fa:0a:f5:5a:86:87:2a:2c:af:09:93:a1:42: 00:de:d1:97:63:e5:c5:41:9b:c2:e8:19:f6:a3:92:1e:07:4f: 66:2e:6a:16:cb:27:b8:ff:c6:c9:58:54:1b:ab:34:ca:05:b8: ec:a0:9d:d1:99:d2:b7:79:35:d9:74:01:db:f5:f6:80:fc:ae: 14:60:58:d5:de:c9:4b:6a:6e:76:92:3c:30:3e:3c:27:34:9e: 78:99:25:cb:44:c4:49:7d:3e:ed:4f:34:65:10:9a:dd:cc:02: 48:dd:79:56:93:f7:f3:0a:ac:33:59:0d:b3:2a:0d:ad:30:c2: c7:bb:dc:94:f3:a4:e7:c5:26:1a:dd:8e:c8:8e:46:ab:07:d2: c5:33:36:e0:86:2d:4b:49:f1:11:2a:f0:d8:de:54:21:f6:ea: 21:58:a6:2e:4d:2b:cf:ad:31:e4:75:d9:94:41:f8:bf:04:3d: c7:d9:ae:a7:a5:20:7d:b3:a4:f9:12:87:e3:bf:94:6d:a5:01: 55:ee:41:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Noi6/KtFLbOo3bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQxNloXDTI2MTAxNzE4MjQxNlowLzEtMCsGA1UEAxMk MzFlM2FlZDMtZTMyMC00MTgzLTg3NjEtMDZiZjdiYjE5NDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HwVT874BGoNHCOnPqQLnrHOsZYtJMBAajTY SDkUUNIaTD3LGkbDgK2S+6+0mLBFX9AlWUcR2Kk2qNF9GlNph42GXMdWnt4sQGql 3pdPJEtYUkQvklGwWE24VigCwl4K8lp1NF28ff9EFe6F5wYzoZyTVTe5PFty9aXL VJN5956rMhuPPPQUQBIRQUDvs1L8/Dh+NHMJ4u7Bo9jnLPnq4HWc5/yxoBV9GIYS A4MQcaVFn+ULzh8qoO/AMNi5ps0xZ/EWn1Xz1pxRkvEuUu268IC+lHuHto0u5jSi SKNL3vjxKcJWDAoNnmvTU3S90MLK6tvO7yds/3gTgHTiDLOs8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1RmSnUCJjHQyL0NRWkNpjbrtPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOGIyNGNjYmQtNjY3NC0z YTI5LWJlYjAtOTIyOWEyMjZlZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWDmrAg+ATa2Ubc1x6E1lWBhPd9Aj9BRAdDIabLhOqTsL/usiLa0oOH ZxFGISRbBY3oNrKT1rTwKxdG+gr1WoaHKiyvCZOhQgDe0Zdj5cVBm8LoGfajkh4H T2YuahbLJ7j/xslYVBurNMoFuOygndGZ0rd5Ndl0Adv19oD8rhRgWNXeyUtqbnaS PDA+PCc0nniZJctExEl9Pu1PNGUQmt3MAkjdeVaT9/MKrDNZDbMqDa0wwse73JTz pOfFJhrdjsiORqsH0sUzNuCGLUtJ8REq8NjeVCH26iFYpi5NK8+tMeR12ZRB+L8E PcfZrqelIH2zpPkSh+O/lG2lAVXuQTM= -----END CERTIFICATE-----Generated at Tue Jul 21 22:37:30 2026 by rpki-client