$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b42bdcdd-8549-3770-abd1-eef9f27d251e.roa File: b42bdcdd-8549-3770-abd1-eef9f27d251e.roa (raw, json) Hash identifier: V1nXX56Em9vRaBwSMnE2/faH61VVuVqSa/Vvbze4LzY= Subject key identifier: 1F:6E:62:82:F9:1B:94:D1:4F:2E:6B:DB:78:A3:B1:0A:A0:70:40:D6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423559E316D4000B8A88F40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b42bdcdd-8549-3770-abd1-eef9f27d251e.roa Signing time: Wed 19 Aug 2026 18:04:01 +0000 ROA not before: Wed 19 Aug 2026 18:04:01 +0000 ROA not after: Mon 11 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 70.152.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:55:9e:31:6d:40:00:b8:a8:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:01 2026 GMT Not After : Mar 11 04:00:00 2030 GMT Subject: CN=51adacbb-94a9-437e-94a4-a715e55496e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:54:ba:55:ba:f7:a3:22:5e:7e:38:67:02: 6e:b4:51:c5:79:ea:b8:16:e3:b6:94:b9:11:de:e6: e4:b5:88:8c:28:ad:8b:98:fd:da:3f:0b:6d:44:a8: cc:8c:0a:8d:97:7b:89:dd:08:51:d8:c6:cc:93:91: 05:8a:e8:0a:5e:23:01:f3:2d:c2:dd:fe:df:38:ea: 0a:3b:fe:9a:10:de:e5:f0:64:46:15:b2:5b:87:3c: 56:cb:db:9d:24:17:43:a1:9d:a7:b6:5f:8a:77:b4: 4d:f4:1b:83:67:ba:d9:7b:c0:6d:95:8d:08:07:b3: b5:c9:f8:cd:3f:a1:40:5a:a6:50:23:17:0d:05:c2: 0c:86:c1:9b:55:1c:ca:e4:da:17:54:70:8f:5d:c4: 88:e1:38:33:74:18:7a:1f:2f:70:04:52:cd:48:d0: 1e:ec:21:f4:ec:20:d0:69:6d:8a:dd:23:b1:1c:d0: 1a:ed:08:fd:a2:fa:5b:d0:a6:dc:72:3d:88:d2:53: 57:a5:a7:86:ed:d0:b3:bd:51:82:a0:a3:e3:26:2d: 58:ee:7f:bb:90:74:c8:35:74:a2:ad:aa:6e:0f:de: 4c:b5:99:db:5a:86:0e:82:93:d7:42:13:54:84:4a: 4d:c3:10:bd:0c:67:c5:d8:c5:5c:9a:37:a1:5e:cd: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6E:62:82:F9:1B:94:D1:4F:2E:6B:DB:78:A3:B1:0A:A0:70:40:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b42bdcdd-8549-3770-abd1-eef9f27d251e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 70.152.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2b:d3:2b:b9:f0:af:05:a6:43:b2:cc:fb:63:f1:55:9f:3d: 0d:db:9a:36:e0:ab:aa:09:6e:1a:bf:95:96:29:21:ae:79:61: 30:41:88:cf:07:5c:62:10:2f:a0:7c:c3:05:17:fb:ac:07:23: e1:b1:93:52:6d:fd:7d:9e:70:d6:60:09:25:d6:b9:a3:51:5b: bf:3f:ea:af:76:5a:9d:98:a2:19:2f:fc:5d:1d:50:a3:ea:d8: 55:98:4c:63:4c:6d:0d:5c:ee:92:1c:b9:fa:6f:70:70:cf:1f: 5a:fd:38:a1:cd:84:cb:17:c8:ee:37:28:06:cd:3f:1d:b8:be: 40:d4:e2:0b:74:6f:aa:85:3e:69:90:1e:d7:5b:bf:70:d0:1a: cc:bc:7e:60:28:fe:ab:48:78:cd:5a:82:39:66:a0:5e:5c:9e: d3:f2:ad:73:ac:60:36:e4:ce:18:59:da:c3:0f:a0:a6:9f:cb: a6:92:70:b9:c1:b5:4a:15:d9:5c:97:bf:0a:0f:32:34:8f:79: eb:51:a2:51:66:5e:3d:1e:65:eb:0c:03:8a:ca:1c:b3:af:ee: 23:c5:a9:a8:c3:47:88:dd:44:d3:cc:80:e9:54:8b:a0:3a:c2: db:d8:a5:24:37:1c:56:fb:76:53:27:c8:4f:65:1f:1e:b0:68: 69:49:66:54 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1WeMW1AALioj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMVoXDTMwMDMxMTA0MDAwMFowLzEtMCsGA1UEAxMk NTFhZGFjYmItOTRhOS00MzdlLTk0YTQtYTcxNWU1NTQ5NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArntUulW696MiXn44ZwJutFHFeeq4FuO2lLkR 3ubktYiMKK2LmP3aPwttRKjMjAqNl3uJ3QhR2MbMk5EFiugKXiMB8y3C3f7fOOoK O/6aEN7l8GRGFbJbhzxWy9udJBdDoZ2ntl+Kd7RN9BuDZ7rZe8BtlY0IB7O1yfjN P6FAWqZQIxcNBcIMhsGbVRzK5NoXVHCPXcSI4TgzdBh6Hy9wBFLNSNAe7CH07CDQ aW2K3SOxHNAa7Qj9ovpb0Kbccj2I0lNXpaeG7dCzvVGCoKPjJi1Y7n+7kHTINXSi rapuD95MtZnbWoYOgpPXQhNUhEpNwxC9DGfF2MVcmjehXs1fMQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB9uYoL5G5TRTy5r23ijsQqgcEDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjQyYmRjZGQtODU0OS0z NzcwLWFiZDEtZWVmOWYyN2QyNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBRpgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAByvTK7nwrwWmQ7LM+2PxVZ89DduaNuCrqgluGr+VlikhrnlhMEGIzwdc YhAvoHzDBRf7rAcj4bGTUm39fZ5w1mAJJda5o1Fbvz/qr3ZanZiiGS/8XR1Qo+rY VZhMY0xtDVzukhy5+m9wcM8fWv04oc2EyxfI7jcoBs0/Hbi+QNTiC3RvqoU+aZAe 11u/cNAazLx+YCj+q0h4zVqCOWagXlye0/Ktc6xgNuTOGFnaww+gpp/LppJwucG1 ShXZXJe/Cg8yNI9561GiUWZePR5l6wwDisocs6/uI8WpqMNHiN1E08yA6VSLoDrC 29ilJDccVvt2UyfIT2UfHrBoaUlmVA== -----END CERTIFICATE-----Generated at Sat Sep 5 00:37:16 2026 by rpki-client