$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24d49e52-fd2d-35b6-8a09-33624b88b8de.roa File: 24d49e52-fd2d-35b6-8a09-33624b88b8de.roa (raw, json) Hash identifier: wr4Kgpld0NdP35nv30hLeSTjioVOP1HOsGHFexqsfSc= Subject key identifier: 6D:B7:A6:5C:08:38:F3:F1:B1:51:42:31:0E:58:2B:DE:33:E0:B3:EF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423528856A3FFFC6DA7DEB4 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24d49e52-fd2d-35b6-8a09-33624b88b8de.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Wed 10 Apr 2030 04:00:00 +0000 asID: 8068 IP address blocks: 104.44.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:52:88:56:a3:ff:fc:6d:a7:de:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Apr 10 04:00:00 2030 GMT Subject: CN=806e5e93-e8ad-44b0-ab35-cd6defcf0b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:23:96:bb:32:26:ef:89:fe:93:4c:e5:1c:3a: e8:a4:81:16:b1:9f:83:0a:b2:b7:a8:45:23:d8:fa: 2f:12:0f:26:c1:eb:00:10:3e:ea:2a:67:f7:64:65: a1:79:1d:f1:3e:99:bc:82:f4:f1:e2:02:3c:d0:33: f6:ac:be:dd:8c:a1:61:44:bc:6b:cf:fb:06:13:9e: 6f:b8:9a:da:6f:d7:db:7e:cf:0f:95:90:e7:cb:0f: f6:32:71:e5:60:b6:4b:a3:60:1c:a5:a2:2c:8e:ba: 32:8f:71:eb:86:01:aa:d6:ea:95:dc:ce:25:3d:65: c2:f7:60:94:e3:6e:10:af:75:e0:9b:1f:e0:49:ed: 14:b0:fd:96:fc:06:7b:d9:bf:3b:84:60:66:f6:df: e7:7b:c1:5c:b4:e4:2e:06:ec:88:bb:a6:ab:b0:75: 79:27:46:04:31:08:28:6a:40:67:88:fb:24:0e:80: 1e:af:80:84:54:38:00:02:c6:a9:65:9a:79:89:f4: 19:c1:48:db:95:09:e6:85:49:90:01:8e:c4:51:9a: a5:ee:9c:f0:6b:34:d7:0d:79:00:01:fa:7f:2e:6e: 5a:a1:33:aa:30:bb:32:06:85:6a:70:ce:73:e9:15: b8:28:f1:8d:c1:27:55:4b:c3:66:ce:c6:af:36:7f: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B7:A6:5C:08:38:F3:F1:B1:51:42:31:0E:58:2B:DE:33:E0:B3:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/24d49e52-fd2d-35b6-8a09-33624b88b8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 104.44.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:63:5b:2a:b4:2a:40:2e:d4:b8:6b:84:da:fa:6a:35:67:10: cc:21:32:db:6a:bd:36:19:04:d4:c2:d0:d1:43:ca:6b:ff:1f: e1:ba:2f:c3:fb:67:02:27:8c:ca:13:bc:63:74:72:9e:5e:33: 66:ec:d6:3c:55:78:b1:2e:2b:e3:a1:df:e8:da:9b:ee:0e:e9: df:d1:28:20:76:e1:cb:63:1f:bb:57:00:c3:42:3c:75:f1:5f: e1:ee:18:82:68:41:94:61:e4:ea:b8:0a:43:4f:50:b2:2e:b6: 3e:d4:7d:9e:65:e8:2f:2f:43:1b:e0:cc:9e:4b:2e:0f:4a:14: 30:62:bf:bd:82:63:10:07:a2:17:a3:af:6a:15:13:83:a0:b4: a3:c4:45:fa:c1:66:61:69:19:3f:67:be:27:eb:25:c6:89:a0: f5:10:dd:59:1b:73:60:ed:f3:05:86:2c:3b:5b:11:de:fb:f9: 0a:6e:b5:9d:f0:ff:8a:77:b1:f2:92:10:2a:58:0b:77:51:20: 67:eb:2e:7b:e0:fd:0c:93:d9:5f:6e:3b:92:62:27:d2:5b:26: ea:a4:05:80:89:c9:c9:c0:6c:18:0a:20:77:1e:d5:d2:eb:85: dd:32:c4:9f:78:73:7b:46:4e:c0:b2:8d:f4:6c:99:8f:49:10: 82:92:d2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1KIVqP//G2n3rQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ODA2ZTVlOTMtZThhZC00NGIwLWFiMzUtY2Q2ZGVmY2YwYjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiOWuzIm74n+k0zlHDropIEWsZ+DCrK3qEUj 2PovEg8mwesAED7qKmf3ZGWheR3xPpm8gvTx4gI80DP2rL7djKFhRLxrz/sGE55v uJrab9fbfs8PlZDnyw/2MnHlYLZLo2AcpaIsjroyj3HrhgGq1uqV3M4lPWXC92CU 424Qr3Xgmx/gSe0UsP2W/AZ72b87hGBm9t/ne8FctOQuBuyIu6arsHV5J0YEMQgo akBniPskDoAer4CEVDgAAsapZZp5ifQZwUjblQnmhUmQAY7EUZql7pzwazTXDXkA Afp/Lm5aoTOqMLsyBoVqcM5z6RW4KPGNwSdVS8NmzsavNn+zwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG23plwIOPPxsVFCMQ5YK94z4LPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjRkNDllNTItZmQyZC0z NWI2LThhMDktMzM2MjRiODhiOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCxGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhjWyq0KkAu1LhrhNr6ajVnEMwhMttqvTYZBNTC0NFDymv/H+G6L8P7 ZwInjMoTvGN0cp5eM2bs1jxVeLEuK+Oh3+jam+4O6d/RKCB24ctjH7tXAMNCPHXx X+HuGIJoQZRh5Oq4CkNPULIutj7UfZ5l6C8vQxvgzJ5LLg9KFDBiv72CYxAHohej r2oVE4OgtKPERfrBZmFpGT9nvifrJcaJoPUQ3Vkbc2Dt8wWGLDtbEd77+QputZ3w /4p3sfKSECpYC3dRIGfrLnvg/QyT2V9uO5JiJ9JbJuqkBYCJycnAbBgKIHce1dLr hd0yxJ94c3tGTsCyjfRsmY9JEIKS0sA= -----END CERTIFICATE-----Generated at Sat Sep 5 06:07:06 2026 by rpki-client