$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa File: 8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa (raw, json) Hash identifier: q9ldWa2X0NIOxg3RQyrDTQKOQ914/wOgD+D10faH42s= Subject key identifier: B8:63:12:4E:BC:A0:F9:05:06:54:76:F3:93:A9:08:98:27:8D:DE:75 Certificate issuer: /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Certificate serial: 010D0C9F4328584E31CF11993911F3420E543100 Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 68.70.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:11:99:39:11:f3:42:0e:54:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=10f9473e-269b-4d54-bd82-337dbfdd40c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:00:9d:99:d0:1a:56:25:61:24:00:7e:2d: ab:e4:53:a4:90:fb:b5:46:4a:5b:5c:05:e7:1d:18: 9e:c6:24:02:33:25:4d:09:e7:94:6f:5e:31:40:be: 06:fa:df:7d:d3:34:25:d0:11:9b:aa:ac:d0:59:04: ac:19:14:7b:db:e4:c3:7e:de:f3:3e:7e:54:1e:1d: 15:ec:80:f1:70:bd:37:92:7c:9a:b8:7b:4a:ed:c0: 97:de:e3:25:8a:73:81:18:eb:ff:60:e4:a9:c3:80: fe:7a:7a:5f:4f:96:2c:c6:d0:f6:58:b5:1e:0b:5e: 25:bc:62:7a:09:00:38:53:0b:cb:2a:14:24:29:fc: 01:86:22:59:e9:63:ba:43:39:23:3b:17:45:98:89: 13:25:5e:ce:7b:0c:5f:2d:96:fc:3f:5c:4e:ad:0b: 70:6f:c5:c5:37:49:1f:87:af:cb:20:60:6a:47:ce: dc:06:13:ea:04:13:bb:80:a2:20:03:46:56:b7:68: 61:71:ca:d8:b0:ec:30:ba:51:fa:56:9c:cb:f5:e2: ce:6a:4e:3a:dc:7f:b4:91:f5:53:e4:05:9b:52:51: ad:89:7e:7e:68:ec:44:05:ed:6a:67:e6:d1:dd:46: 1f:75:54:c1:cf:94:b7:54:27:09:01:06:4e:ec:6a: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:63:12:4E:BC:A0:F9:05:06:54:76:F3:93:A9:08:98:27:8D:DE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl X509v3 Authority Key Identifier: keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer sbgp-ipAddrBlock: critical IPv4: 68.70.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b2:64:e6:a0:a4:89:2d:e9:aa:3b:85:b2:f9:2a:60:64:6a: ea:5b:a2:0f:9e:99:a1:05:61:89:68:1b:6c:28:f4:b4:02:10: 41:2c:b6:6e:9b:c2:84:9e:ef:1d:e2:6d:88:ac:4e:4e:f8:7d: 00:34:4e:d5:96:37:4d:ef:9c:fa:ea:b8:a8:7c:4c:c0:e8:e2: 21:9f:51:8e:15:e9:1f:01:77:30:bc:47:46:73:49:18:f9:eb: 10:c7:a5:66:2a:e6:28:9b:9d:07:91:77:f6:c5:54:2b:13:4f: a4:9c:b4:4a:6c:c4:3a:87:9e:fe:e9:3d:09:8d:d2:a8:b3:59: 7e:0d:c2:cd:fc:71:98:03:3e:f7:e4:3f:2e:7f:20:39:12:d1: 4e:e6:5b:38:6e:a7:78:43:e4:80:c7:e6:92:3c:cb:d5:6e:a5: fb:77:5b:9c:4a:36:19:bc:61:5b:03:45:e7:65:14:2c:4b:07: 7c:47:ad:b0:82:01:7d:27:0c:ed:d8:ef:ce:0d:1d:38:71:50: e8:93:98:d6:3e:71:6e:d6:b9:28:df:42:f6:11:fe:8a:9f:11: a3:0b:82:9c:da:51:bc:fa:be:03:15:9c:d8:17:86:f7:e9:16: ae:63:9c:03:c3:41:87:a1:cf:58:c6:dd:77:4f:45:3b:fa:b9: 3f:b6:05:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzxGZORHzQg5UMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmM2ZiMzQtOWQ2MS00NDc2LTgxMTAtOGNhMjg3NmU3 OTI4MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk MTBmOTQ3M2UtMjY5Yi00ZDU0LWJkODItMzM3ZGJmZGQ0MGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHIAnZnQGlYlYSQAfi2r5FOkkPu1RkpbXAXn HRiexiQCMyVNCeeUb14xQL4G+t990zQl0BGbqqzQWQSsGRR72+TDft7zPn5UHh0V 7IDxcL03knyauHtK7cCX3uMlinOBGOv/YOSpw4D+enpfT5YsxtD2WLUeC14lvGJ6 CQA4UwvLKhQkKfwBhiJZ6WO6QzkjOxdFmIkTJV7OewxfLZb8P1xOrQtwb8XFN0kf h6/LIGBqR87cBhPqBBO7gKIgA0ZWt2hhccrYsOwwulH6VpzL9eLOak463H+0kfVT 5AWbUlGtiX5+aOxEBe1qZ+bR3UYfdVTBz5S3VCcJAQZO7Gp98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhjEk68oPkFBlR285OpCJgnjd51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYz ZmIzNC05ZDYxLTQ0NzYtODExMC04Y2EyODc2ZTc5MjgvOGFiOTg3NjMtNTdkOC0z NDA2LWE2ZWEtZjc4ZmFlNGVkNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDFmM2ZiMzQtOWQ2MS00NDc2LTgx MTAtOGNhMjg3NmU3OTI4L2QxZjNmYjM0LTlkNjEtNDQ3Ni04MTEwLThjYTI4NzZl NzkyOC5jcmwwHwYDVR0jBBgwFoAUHVxtl3sO0IsXB0lOny3PFM65iiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYzZmIzNC05ZDYxLTQ0NzYtODExMC04Y2Ey ODc2ZTc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGyZOagpIkt6ao7hbL5KmBkaupbog+emaEFYYloG2wo9LQCEEEstm6b woSe7x3ibYisTk74fQA0TtWWN03vnPrquKh8TMDo4iGfUY4V6R8BdzC8R0ZzSRj5 6xDHpWYq5iibnQeRd/bFVCsTT6SctEpsxDqHnv7pPQmN0qizWX4Nws38cZgDPvfk Py5/IDkS0U7mWzhup3hD5IDH5pI8y9Vupft3W5xKNhm8YVsDRedlFCxLB3xHrbCC AX0nDO3Y784NHThxUOiTmNY+cW7WuSjfQvYR/oqfEaMLgpzaUbz6vgMVnNgXhvfp Fq5jnAPDQYehz1jG3XdPRTv6uT+2BUU= -----END CERTIFICATE-----Generated at Mon Jul 6 18:22:47 2026 by rpki-client