$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa File: 2026f06e-1431-31e6-8460-5ff177b4b260.roa (raw, json) Hash identifier: OVmmagxXEjl3Ecg+cia61/89hTxB00rTaDE1I/4TzKU= Subject key identifier: AD:96:5D:13:2D:2E:B1:2A:07:02:C9:B3:E6:1B:69:08:D7:33:FF:99 Certificate issuer: /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Certificate serial: 010D0C9F4328584F7782E7E85B663907520C9B00 Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 68.70.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:e7:e8:5b:66:39:07:52:0c:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=42189121-4541-432d-a343-d849167794c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:ee:65:58:26:ce:bd:2f:38:d8:69:e6:1e: 49:4d:43:46:73:7a:27:e9:3b:cd:2f:d6:24:52:b2: 22:4e:1c:fe:40:56:d4:43:4c:5d:fa:b3:02:bc:26: 0d:0c:ea:94:ea:9e:94:fa:42:2d:7e:ff:b8:f8:fc: 6c:87:2b:f8:ad:74:1a:ef:26:75:dd:74:c7:a9:da: ac:e4:30:87:53:4b:3a:8a:f8:c8:58:ca:4c:43:c1: f5:78:d4:46:35:49:7d:b9:b5:0b:9c:6c:09:85:b2: b1:16:20:25:8f:43:70:03:aa:2a:f1:b6:05:ff:d1: ce:a7:93:ef:e0:c7:f5:dd:4d:a1:ae:29:2a:e1:26: 76:90:54:be:b2:0a:11:33:57:11:fd:5a:ce:17:a5: e2:90:38:95:33:46:f3:14:e4:ad:c9:74:a3:d4:25: 69:bc:53:60:46:c3:3d:3f:21:d6:c6:ca:00:39:2b: 9a:26:a2:a3:6e:9e:82:2b:94:6c:8b:02:95:f9:00: 58:4e:6b:c7:50:12:ce:5c:bd:df:0e:84:a0:bf:8e: 41:3f:c0:bb:1e:bc:3f:03:0b:34:76:e7:fe:09:d1: 62:fd:b4:fc:70:69:d8:c6:7e:42:c9:4b:48:3c:41: 25:3c:f9:f5:92:22:08:36:d8:90:da:63:30:ae:9e: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:96:5D:13:2D:2E:B1:2A:07:02:C9:B3:E6:1B:69:08:D7:33:FF:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl X509v3 Authority Key Identifier: keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer sbgp-ipAddrBlock: critical IPv4: 68.70.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c5:26:37:21:29:d7:57:bd:6b:d7:8f:f8:c7:75:53:21:4b: 16:7c:f4:5f:1e:92:a9:f5:7b:cb:96:28:27:95:a6:7c:1d:80: df:c6:ff:36:0f:0b:bf:44:0c:b2:c7:dd:38:30:90:17:d0:ac: cc:21:60:a5:c0:18:86:57:a0:a0:94:a1:19:5f:af:03:31:11: 7d:9f:08:78:61:5b:c6:09:85:71:6a:86:f5:dd:21:62:0d:a7: 4d:60:6b:93:09:fd:df:c1:37:e4:1a:82:3f:6a:dc:e3:fa:f3: f5:2f:43:e3:5d:d0:3e:1e:99:cd:f5:97:db:e3:67:08:de:c8: 0c:f2:2d:a2:c4:05:57:1f:d6:6c:8c:4d:27:23:8b:18:67:9f: 94:3e:b7:8d:23:15:4a:ea:54:17:57:2d:d3:fa:d1:ba:c7:36: 04:ec:a7:03:ec:c9:d0:b6:18:6a:82:92:28:65:de:38:dd:0d: f8:e4:d4:2c:77:2d:40:ba:81:2d:c5:30:89:4e:7d:10:d6:d2: 75:76:a3:e6:80:c5:4b:d7:1e:1a:8d:70:af:66:68:b2:70:c3: a7:a6:d3:56:00:29:0f:ae:71:a3:3d:a2:cc:06:89:2f:ab:4a: 30:45:62:c7:85:7b:54:69:1b:9f:41:cf:50:29:ec:49:93:c1: 6a:bc:f5:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gufoW2Y5B1IMmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmM2ZiMzQtOWQ2MS00NDc2LTgxMTAtOGNhMjg3NmU3 OTI4MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDIxODkxMjEtNDU0MS00MzJkLWEzNDMtZDg0OTE2Nzc5NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjILuZVgmzr0vONhp5h5JTUNGc3on6TvNL9Yk UrIiThz+QFbUQ0xd+rMCvCYNDOqU6p6U+kItfv+4+Pxshyv4rXQa7yZ13XTHqdqs 5DCHU0s6ivjIWMpMQ8H1eNRGNUl9ubULnGwJhbKxFiAlj0NwA6oq8bYF/9HOp5Pv 4Mf13U2hrikq4SZ2kFS+sgoRM1cR/VrOF6XikDiVM0bzFOStyXSj1CVpvFNgRsM9 PyHWxsoAOSuaJqKjbp6CK5RsiwKV+QBYTmvHUBLOXL3fDoSgv45BP8C7Hrw/Aws0 duf+CdFi/bT8cGnYxn5CyUtIPEElPPn1kiIINtiQ2mMwrp7LFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2WXRMtLrEqBwLJs+YbaQjXM/+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYz ZmIzNC05ZDYxLTQ0NzYtODExMC04Y2EyODc2ZTc5MjgvMjAyNmYwNmUtMTQzMS0z MWU2LTg0NjAtNWZmMTc3YjRiMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDFmM2ZiMzQtOWQ2MS00NDc2LTgx MTAtOGNhMjg3NmU3OTI4L2QxZjNmYjM0LTlkNjEtNDQ3Ni04MTEwLThjYTI4NzZl NzkyOC5jcmwwHwYDVR0jBBgwFoAUHVxtl3sO0IsXB0lOny3PFM65iiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYzZmIzNC05ZDYxLTQ0NzYtODExMC04Y2Ey ODc2ZTc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7FJjchKddXvWvXj/jHdVMhSxZ89F8ekqn1e8uWKCeVpnwdgN/G/zYP C79EDLLH3TgwkBfQrMwhYKXAGIZXoKCUoRlfrwMxEX2fCHhhW8YJhXFqhvXdIWIN p01ga5MJ/d/BN+Qagj9q3OP68/UvQ+Nd0D4emc31l9vjZwjeyAzyLaLEBVcf1myM TScjixhnn5Q+t40jFUrqVBdXLdP60brHNgTspwPsydC2GGqCkihl3jjdDfjk1Cx3 LUC6gS3FMIlOfRDW0nV2o+aAxUvXHhqNcK9maLJww6em01YAKQ+ucaM9oswGiS+r SjBFYseFe1RpG59Bz1Ap7EmTwWq89QI= -----END CERTIFICATE-----Generated at Mon Oct 12 03:53:39 2026 by rpki-client