$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15f493c4-e740-3f52-b18a-5921e1b4f5f3.roa File: 15f493c4-e740-3f52-b18a-5921e1b4f5f3.roa (raw, json) Hash identifier: tbNl+5E5ZsUK+0tTST3qmGrcM/AQRjdz2QJOfvpyKh4= Subject key identifier: 47:B2:66:14:F7:FF:FF:1D:89:8E:A5:F1:01:E1:68:60:03:07:38:F1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235A25C36CDD5C7E8D1280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15f493c4-e740-3f52-b18a-5921e1b4f5f3.roa Signing time: Wed 19 Aug 2026 18:04:03 +0000 ROA not before: Wed 19 Aug 2026 18:04:03 +0000 ROA not after: Fri 12 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 40.66.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5a:25:c3:6c:dd:5c:7e:8d:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:03 2026 GMT Not After : Apr 12 04:00:00 2030 GMT Subject: CN=d5e486e4-15a7-4c2a-90f4-727ac69d2775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:13:6f:71:f4:e5:53:2d:b0:dd:b8:46:2e: c7:0e:85:6a:67:36:d7:44:cd:7e:d8:78:f9:0b:5b: f4:3a:90:a8:ea:e2:83:7a:5a:7b:b4:2f:1f:04:97: 5d:df:c9:8c:17:3d:6a:dc:eb:65:f3:49:50:d6:9f: a6:81:d5:dc:c7:64:34:a4:2f:db:69:5a:a4:7f:4f: 7e:1a:6a:23:b2:11:53:6f:8d:15:c9:d7:cc:11:59: 4a:96:05:29:28:7b:7f:3f:5f:59:cc:d3:a8:19:30: 57:f1:a7:e4:dc:79:35:9f:cf:6f:c4:7c:cd:f0:36: 03:e1:eb:32:12:46:07:ab:4a:9f:5f:3d:45:87:25: c1:84:a0:c3:bb:bc:d8:65:71:f0:35:99:30:d1:a7: ab:00:9b:37:0a:e5:a2:cc:27:b3:47:a7:b4:01:94: 35:8d:c4:ed:2f:57:46:1d:39:8b:2c:47:ce:23:6d: 42:eb:fb:6a:88:bc:f7:eb:3e:71:ca:9b:dc:54:58: a8:e7:cb:a2:18:37:1e:02:68:43:29:89:28:1b:32: 5e:b7:e7:0b:3e:9d:ef:06:2c:96:f5:91:a9:22:34: b1:d5:59:c9:08:8d:64:67:e7:2a:17:e0:7a:d2:b1: e8:d7:b1:56:e9:a5:59:2a:67:ec:1d:04:07:6b:e7: 6b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B2:66:14:F7:FF:FF:1D:89:8E:A5:F1:01:E1:68:60:03:07:38:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15f493c4-e740-3f52-b18a-5921e1b4f5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.66.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:03:08:dc:0e:0c:aa:e2:36:e7:2f:aa:f5:ff:22:6f:af:71: ce:1a:6f:ad:9d:8e:e7:ba:ce:42:28:c1:e7:72:54:9f:de:1f: 71:93:aa:36:be:07:da:f9:c4:de:49:a6:99:91:39:55:56:66: 4a:2e:48:7d:f8:e2:63:cd:fe:4e:39:3b:33:e8:53:c0:e3:bd: 92:c1:86:95:e5:25:bf:92:af:99:69:9c:17:0c:6c:bc:01:bd: 28:2f:d6:6e:46:0f:b8:c0:a4:e0:5c:b0:98:9d:96:34:89:f2: 90:8d:9f:cc:24:97:45:28:e2:1f:bc:29:a5:5d:f1:03:6f:f4: 8e:2e:53:22:73:95:b6:df:70:dd:69:81:a1:5b:d8:fb:a3:f3: d7:19:7c:c2:a3:4f:12:cb:44:2e:c3:0b:83:bc:f8:99:88:67: 24:9c:bd:60:94:88:34:a4:73:7f:19:e7:3b:77:5a:8f:b4:8a: ab:64:68:8a:7e:f6:fe:bf:c9:9b:1b:97:c1:0a:43:c3:58:f8: e2:8c:91:17:14:2f:7b:de:df:4a:0b:1d:41:e7:04:ac:51:4d: 4c:b4:3b:9d:49:89:ff:ba:78:a1:e8:8b:e8:8d:f2:c6:77:06: 89:69:8c:0c:df:39:af:1a:03:dc:d2:8b:5c:72:5f:a1:2c:7d: 67:f4:2b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1olw2zdXH6NEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwM1oXDTMwMDQxMjA0MDAwMFowLzEtMCsGA1UEAxMk ZDVlNDg2ZTQtMTVhNy00YzJhLTkwZjQtNzI3YWM2OWQyNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvysTb3H05VMtsN24Ri7HDoVqZzbXRM1+2Hj5 C1v0OpCo6uKDelp7tC8fBJdd38mMFz1q3Otl80lQ1p+mgdXcx2Q0pC/baVqkf09+ GmojshFTb40VydfMEVlKlgUpKHt/P19ZzNOoGTBX8afk3Hk1n89vxHzN8DYD4esy EkYHq0qfXz1FhyXBhKDDu7zYZXHwNZkw0aerAJs3CuWizCezR6e0AZQ1jcTtL1dG HTmLLEfOI21C6/tqiLz36z5xypvcVFio58uiGDceAmhDKYkoGzJet+cLPp3vBiyW 9ZGpIjSx1VnJCI1kZ+cqF+B60rHo17FW6aVZKmfsHQQHa+drTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeyZhT3//8diY6l8QHhaGADBzjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTVmNDkzYzQtZTc0MC0z ZjUyLWIxOGEtNTkyMWUxYjRmNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKEIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoDCNwODKriNucvqvX/Im+vcc4ab62djue6zkIowedyVJ/eH3GTqja+ B9r5xN5JppmROVVWZkouSH344mPN/k45OzPoU8DjvZLBhpXlJb+Sr5lpnBcMbLwB vSgv1m5GD7jApOBcsJidljSJ8pCNn8wkl0Uo4h+8KaVd8QNv9I4uUyJzlbbfcN1p gaFb2Puj89cZfMKjTxLLRC7DC4O8+JmIZyScvWCUiDSkc38Z5zt3Wo+0iqtkaIp+ 9v6/yZsbl8EKQ8NY+OKMkRcUL3ve30oLHUHnBKxRTUy0O51Jif+6eKHoi+iN8sZ3 BolpjAzfOa8aA9zSi1xyX6EsfWf0K7M= -----END CERTIFICATE-----Generated at Sat Sep 5 01:21:53 2026 by rpki-client