$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e4b18068-04de-3706-9227-35bfc3d0d195.roa File: e4b18068-04de-3706-9227-35bfc3d0d195.roa (raw, json) Hash identifier: hJVBovmxrhk5AncpFbVXfF5mXjGd4K7uBtX38EgaxRs= Subject key identifier: 93:3F:29:71:FF:FD:82:97:19:EF:60:DF:6C:9C:81:29:74:08:2E:83 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423581986097E87E4B05F90 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e4b18068-04de-3706-9227-35bfc3d0d195.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Tue 09 Apr 2030 04:00:00 +0000 asID: 8070 IP address blocks: 2001:489a:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:58:19:86:09:7e:87:e4:b0:5f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Apr 9 04:00:00 2030 GMT Subject: CN=49734eff-631b-47b8-9ee9-b87807a514c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b1:53:1f:b3:64:31:73:d5:67:98:c2:ff:9b: e9:43:13:04:d8:71:c5:55:6c:5c:4d:8a:97:36:81: 44:d8:eb:87:c0:a6:51:b3:bf:01:7f:f7:9e:15:01: e7:54:e8:59:2d:00:74:c9:b7:af:cd:98:4e:9c:f7: 1d:53:11:46:92:3c:7c:59:92:d1:f0:50:72:7d:6e: 7e:71:a7:6d:7e:a5:da:c6:84:d5:4f:5b:d7:53:40: 61:48:aa:45:d1:91:c2:67:27:8c:77:97:66:1c:0e: a3:4a:3b:e1:16:3a:36:44:a0:5f:3f:46:95:51:0e: 48:6f:56:66:fa:b5:52:6d:50:37:d4:28:aa:27:f1: 35:a2:98:de:9b:4c:b8:6f:d2:5e:40:86:df:f8:11: ac:a4:62:09:dc:88:f1:7d:50:e3:6b:71:4b:c9:85: 3d:7c:43:6e:73:0d:8a:64:ae:df:8c:6c:f5:90:dc: 13:54:c3:14:9a:fe:dd:a1:22:bc:35:40:73:ee:33: c2:99:b2:d1:88:1a:0e:17:a2:1e:62:52:dc:e2:46: b5:cd:25:ed:06:aa:c5:c4:eb:57:d1:1a:1a:cc:c3: b5:fc:24:e2:a3:95:a0:5d:70:e8:7c:2c:f3:f1:e7: a0:c9:96:57:3a:43:11:ad:32:c3:77:44:38:45:cc: 2b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3F:29:71:FF:FD:82:97:19:EF:60:DF:6C:9C:81:29:74:08:2E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e4b18068-04de-3706-9227-35bfc3d0d195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv6: 2001:489a:4000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b0:67:6e:89:91:db:0f:72:71:03:ff:0c:cb:74:ed:f4:2e: 64:7f:a3:11:c7:71:51:b2:40:04:50:1f:dc:d0:a2:ff:07:77: db:fc:a4:8c:de:54:d4:92:f1:35:37:97:46:82:ba:c2:d6:60: ac:f6:da:40:9a:8c:52:5a:5a:f0:0f:66:b7:04:69:8b:96:fe: 74:2b:a5:46:30:3e:d5:72:80:a2:4d:10:0b:e5:c2:25:19:81: 5c:19:db:b7:36:9d:8f:ca:c0:8e:38:4a:58:cb:4c:b1:f2:30: 66:fd:6b:0a:d2:89:9e:01:13:ad:d7:4c:c0:95:e9:b5:64:ac: 71:b6:a5:97:05:f9:62:82:5d:c9:cc:45:16:a8:0c:c3:d2:73: 9b:9a:72:ee:2f:8c:a2:b0:f9:24:2a:fc:64:02:3d:a5:5f:2a: a7:53:18:03:71:5b:3e:a4:c0:91:b7:3a:bc:1b:75:ae:6d:81: 0e:2a:0f:53:1e:75:fe:7e:e3:c7:13:70:91:b6:bd:6b:23:41: 0e:1e:fe:d9:b9:5f:cf:15:bf:d0:db:bf:e5:02:90:4d:88:ad: 27:cf:16:9e:ea:63:33:19:73:c9:94:cb:33:2e:f4:e5:6c:af: ce:0e:7d:3a:4f:6f:6a:2f:c4:db:04:d7:33:ab:b1:0a:81:63: 06:d5:0a:36 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7kI1gZhgl+h+SwX5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDQwOTA0MDAwMFowLzEtMCsGA1UEAxMk NDk3MzRlZmYtNjMxYi00N2I4LTllZTktYjg3ODA3YTUxNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLFTH7NkMXPVZ5jC/5vpQxME2HHFVWxcTYqX NoFE2OuHwKZRs78Bf/eeFQHnVOhZLQB0ybevzZhOnPcdUxFGkjx8WZLR8FByfW5+ cadtfqXaxoTVT1vXU0BhSKpF0ZHCZyeMd5dmHA6jSjvhFjo2RKBfP0aVUQ5Ib1Zm +rVSbVA31CiqJ/E1opjem0y4b9JeQIbf+BGspGIJ3IjxfVDja3FLyYU9fENucw2K ZK7fjGz1kNwTVMMUmv7doSK8NUBz7jPCmbLRiBoOF6IeYlLc4ka1zSXtBqrFxOtX 0RoazMO1/CTio5WgXXDofCzz8eegyZZXOkMRrTLDd0Q4RcwrOwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJM/KXH//YKXGe9g32ycgSl0CC6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTRiMTgwNjgtMDRkZS0z NzA2LTkyMjctMzViZmMzZDBkMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFIAFImkAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcbBnbomR2w9ycQP/DMt07fQuZH+jEcdxUbJABFAf3NCi/wd32/yk jN5U1JLxNTeXRoK6wtZgrPbaQJqMUlpa8A9mtwRpi5b+dCulRjA+1XKAok0QC+XC JRmBXBnbtzadj8rAjjhKWMtMsfIwZv1rCtKJngETrddMwJXptWSscballwX5YoJd ycxFFqgMw9Jzm5py7i+MorD5JCr8ZAI9pV8qp1MYA3FbPqTAkbc6vBt1rm2BDioP Ux51/n7jxxNwkba9ayNBDh7+2blfzxW/0Nu/5QKQTYitJ88WnupjMxlzyZTLMy70 5Wyvzg59Ok9vai/E2wTXM6uxCoFjBtUKNg== -----END CERTIFICATE-----Generated at Sun Sep 13 12:56:57 2026 by rpki-client