$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/068688c1-0def-318a-acc5-4f64a4b57119.roa File: 068688c1-0def-318a-acc5-4f64a4b57119.roa (raw, json) Hash identifier: rFlUKFzOQLBg4sKD/xOkZ0dBVDhKm2Ed4nenfWm2w7w= Subject key identifier: D1:AE:B5:7C:0A:29:1A:B0:99:09:3F:95:3F:EC:26:34:5E:EC:72:01 Certificate issuer: /CN=35b4b3a4-a195-4325-8f07-9376a8ef2903 Certificate serial: 010D0C9F4328584DD35B0A5BADEEE52F3E69E980 Authority key identifier: B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/068688c1-0def-318a-acc5-4f64a4b57119.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 32923 IP address blocks: 66.94.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:0a:5b:ad:ee:e5:2f:3e:69:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b4b3a4-a195-4325-8f07-9376a8ef2903 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=85ecddeb-4dcc-4b9d-9886-8ce77a5bfd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1e:38:74:fd:ef:5c:43:0a:8d:41:63:a7:e2: b1:54:06:48:78:ce:78:64:65:e7:36:30:ce:1c:31: cc:1f:52:ee:8c:8c:d8:b4:fb:93:42:4d:27:d3:4f: ec:f2:71:de:af:d3:da:8f:33:3d:b4:63:23:45:70: 58:f7:34:dd:d0:60:8a:be:99:89:86:00:82:fc:25: 30:c8:41:ba:8a:31:cc:6a:d5:c9:4e:56:bc:ad:0c: 2b:6d:be:44:d5:b4:36:32:aa:d5:ee:ea:58:2d:26: ff:23:27:65:45:0a:78:10:96:11:e8:b3:99:bd:d2: 9e:e8:4a:3d:19:45:c6:f1:32:65:1f:aa:a0:04:40: 3a:13:0c:fc:0c:3e:26:e4:15:da:3d:cc:8a:b0:9e: 1d:56:94:7b:79:79:c0:82:e6:8a:d1:21:0f:07:67: 97:21:ec:87:8f:64:d3:3c:ce:92:b8:36:63:7e:67: 1f:b8:67:78:8e:d8:54:cc:91:98:7c:3f:ff:c4:6e: 95:2b:04:5d:3d:8e:0c:41:a7:b6:40:36:e8:c6:71: b8:0a:3f:f4:84:a8:94:e8:7c:2d:28:0e:e4:24:c9: 52:f6:10:43:57:9a:1a:b9:75:7c:ae:2a:aa:64:f2: e2:97:da:8e:c9:d1:19:34:dc:a6:98:72:05:b3:7e: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AE:B5:7C:0A:29:1A:B0:99:09:3F:95:3F:EC:26:34:5E:EC:72:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/068688c1-0def-318a-acc5-4f64a4b57119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl X509v3 Authority Key Identifier: keyid:B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer sbgp-ipAddrBlock: critical IPv4: 66.94.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d9:04:68:2e:ae:63:a3:e1:96:ed:a0:9e:30:5b:2e:cd:1c: e4:04:56:5c:24:e7:74:21:00:9d:29:6a:8b:ef:6b:cf:31:5e: 81:2a:b5:ee:86:04:77:a0:9a:5f:82:2c:a8:7c:00:14:b8:6d: 5f:2f:27:04:85:f6:31:f2:1b:66:b6:7c:30:2b:10:14:10:a5: 4d:ac:30:1c:d1:2f:5a:88:33:ab:e8:70:b7:cf:f7:4c:30:a5: 4c:5e:3c:df:c4:0d:44:28:24:2c:45:33:4c:37:aa:a6:bb:e3: 8e:40:ac:49:ab:a9:82:2e:b0:d3:47:27:1a:a4:2f:3f:c2:e8: 67:72:5f:9e:08:3a:a4:e6:6c:77:58:59:d3:c4:6c:57:5b:96: 66:ff:26:a0:65:e1:79:5e:93:13:40:51:ce:2a:3d:31:cc:81: a0:47:cd:c9:a4:cf:2c:e8:3b:1b:dd:d4:2c:1f:a4:66:7c:92: 25:15:a5:86:1a:f1:80:fc:eb:0c:87:c7:a3:87:61:bb:73:5e: ce:c6:5e:14:0f:5c:56:a7:98:c4:38:09:60:59:79:31:0e:eb: 0d:4e:25:08:71:f4:72:38:3d:d5:61:c1:f2:d9:13:17:2a:13: 60:06:f2:ef:94:03:0a:ff:8d:56:8b:3d:29:08:83:d3:03:fa: ea:de:0e:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWwpbre7lLz5p6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViNGIzYTQtYTE5NS00MzI1LThmMDctOTM3NmE4ZWYy OTAzMB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk ODVlY2RkZWItNGRjYy00YjlkLTk4ODYtOGNlNzdhNWJmZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x44dP3vXEMKjUFjp+KxVAZIeM54ZGXnNjDO HDHMH1LujIzYtPuTQk0n00/s8nHer9PajzM9tGMjRXBY9zTd0GCKvpmJhgCC/CUw yEG6ijHMatXJTla8rQwrbb5E1bQ2MqrV7upYLSb/IydlRQp4EJYR6LOZvdKe6Eo9 GUXG8TJlH6qgBEA6Ewz8DD4m5BXaPcyKsJ4dVpR7eXnAguaK0SEPB2eXIeyHj2TT PM6SuDZjfmcfuGd4jthUzJGYfD//xG6VKwRdPY4MQae2QDboxnG4Cj/0hKiU6Hwt KA7kJMlS9hBDV5oauXV8riqqZPLil9qOydEZNNymmHIFs345uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGutXwKKRqwmQk/lT/sJjRe7HIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0 YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2YThlZjI5MDMvMDY4Njg4YzEtMGRlZi0z MThhLWFjYzUtNGY2NGE0YjU3MTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzViNGIzYTQtYTE5NS00MzI1LThm MDctOTM3NmE4ZWYyOTAzLzM1YjRiM2E0LWExOTUtNDMyNS04ZjA3LTkzNzZhOGVm MjkwMy5jcmwwHwYDVR0jBBgwFoAUuan0c5Rg+PnDmag9AVdSgl973GYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2 YThlZjI5MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/ZBGgurmOj4ZbtoJ4wWy7NHOQEVlwk53QhAJ0paovva88xXoEqte6G BHegml+CLKh8ABS4bV8vJwSF9jHyG2a2fDArEBQQpU2sMBzRL1qIM6vocLfP90ww pUxePN/EDUQoJCxFM0w3qqa7445ArEmrqYIusNNHJxqkLz/C6GdyX54IOqTmbHdY WdPEbFdblmb/JqBl4XlekxNAUc4qPTHMgaBHzcmkzyzoOxvd1CwfpGZ8kiUVpYYa 8YD86wyHx6OHYbtzXs7GXhQPXFanmMQ4CWBZeTEO6w1OJQhx9HI4PdVhwfLZExcq E2AG8u+UAwr/jVaLPSkIg9MD+ureDkw= -----END CERTIFICATE-----Generated at Wed Jun 3 20:16:11 2026 by rpki-client