$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/068688c1-0def-318a-acc5-4f64a4b57119.roa File: 068688c1-0def-318a-acc5-4f64a4b57119.roa (raw, json) Hash identifier: qLy9bpnefACgrj0/dFk+OMPp1/hDCw1mWCPzU34r1hs= Subject key identifier: 7C:EB:BE:9D:67:DE:F0:52:D1:D3:B2:E3:02:DF:29:50:B4:FC:75:37 Certificate issuer: /CN=35b4b3a4-a195-4325-8f07-9376a8ef2903 Certificate serial: 010D0C9F4328584F4974084C46CD1A73F38BE740 Authority key identifier: B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/068688c1-0def-318a-acc5-4f64a4b57119.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32923 IP address blocks: 66.94.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:08:4c:46:cd:1a:73:f3:8b:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b4b3a4-a195-4325-8f07-9376a8ef2903 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f7d2d9f6-8b6f-4e34-82ce-d9885372e5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:58:11:d2:ac:73:e5:28:e4:a1:66:96:30: 4a:e7:ee:fb:0a:b8:ab:49:7e:81:91:01:aa:25:56: 5b:a7:d3:55:98:23:a8:48:8d:69:16:ed:b3:e3:05: 5d:dc:8b:22:5a:68:fc:9c:ba:94:28:20:70:8d:30: f7:d0:c9:d9:8f:39:36:b0:c5:7b:71:a0:a5:76:48: 7f:93:5f:56:87:a1:fe:d3:7c:74:c8:15:17:92:c2: cc:42:e7:e5:09:62:50:8d:f0:cc:e3:4a:5f:ec:f3: 3b:10:82:d5:d6:7c:0b:2e:11:0a:ab:ed:39:fe:47: 13:a1:2c:02:9c:91:69:c0:88:9c:1d:ee:a7:28:d3: 15:ff:b2:7e:99:99:12:08:d2:54:86:63:fa:10:c0: 9b:a8:2a:52:d8:90:82:12:dd:f4:4d:40:8e:f9:0d: 18:ed:30:b2:c6:29:74:10:f0:2d:96:80:d3:da:ac: 48:91:04:25:4a:23:9f:14:6c:1d:bb:d1:d3:25:8e: 72:7d:c9:0c:37:ea:b2:67:7a:e2:c5:d7:cd:ad:64: a3:f5:71:f9:47:99:88:82:3f:94:67:ed:d2:8f:95: ce:ed:1c:70:db:bf:c5:63:13:94:a9:04:c6:71:ac: d2:d5:22:60:cc:d4:d6:f0:64:e8:af:29:6a:d3:7e: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EB:BE:9D:67:DE:F0:52:D1:D3:B2:E3:02:DF:29:50:B4:FC:75:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/068688c1-0def-318a-acc5-4f64a4b57119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl X509v3 Authority Key Identifier: keyid:B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer sbgp-ipAddrBlock: critical IPv4: 66.94.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b6:53:78:a6:03:bd:3c:5d:de:f9:b1:79:18:c6:55:b6:f1: 50:a6:d3:cb:bf:3d:40:88:c8:2d:c1:c4:38:85:97:5c:ef:ec: 46:e1:ec:25:0c:59:fd:2f:13:4a:60:11:41:e8:03:f5:e8:f3: 21:73:97:91:a1:51:05:f5:be:f3:88:d5:27:e0:79:b3:8b:0f: 2e:ba:3c:aa:05:e1:01:b1:a2:3a:36:ea:5d:e1:7e:29:f8:da: d8:16:8c:b7:c7:36:9f:62:1b:e5:5d:e7:18:32:32:b3:69:b7: b7:6a:29:f1:80:c9:a4:db:2e:92:85:b7:49:22:ca:67:7e:8e: 3d:a6:87:11:e3:9c:46:a0:a2:9b:a0:75:5a:11:60:f3:8d:7a: 0d:de:d1:6e:8b:2b:60:d5:8d:d9:3d:82:97:c7:e9:78:da:77: 59:65:c8:76:81:5d:fc:0b:3c:17:44:be:f9:72:23:4d:40:a7: 34:6b:52:9b:bc:62:44:11:1a:20:1d:61:8a:ef:6c:e1:6c:bd: ff:17:18:38:22:13:3b:78:6f:a9:9c:71:a4:0d:4c:9e:e7:c5: 23:43:16:91:83:33:81:71:42:32:c2:7d:16:bd:17:ee:d0:cb: 1c:3e:66:17:7e:3e:52:53:de:ee:fe:c3:cf:70:b0:22:3a:27: 0b:20:34:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAhMRs0ac/OL50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViNGIzYTQtYTE5NS00MzI1LThmMDctOTM3NmE4ZWYy OTAzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjdkMmQ5ZjYtOGI2Zi00ZTM0LTgyY2UtZDk4ODUzNzJlNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZZYEdKsc+Uo5KFmljBK5+77CrirSX6BkQGq JVZbp9NVmCOoSI1pFu2z4wVd3IsiWmj8nLqUKCBwjTD30MnZjzk2sMV7caCldkh/ k19Wh6H+03x0yBUXksLMQuflCWJQjfDM40pf7PM7EILV1nwLLhEKq+05/kcToSwC nJFpwIicHe6nKNMV/7J+mZkSCNJUhmP6EMCbqCpS2JCCEt30TUCO+Q0Y7TCyxil0 EPAtloDT2qxIkQQlSiOfFGwdu9HTJY5yfckMN+qyZ3rixdfNrWSj9XH5R5mIgj+U Z+3Sj5XO7Rxw27/FYxOUqQTGcazS1SJgzNTW8GTorylq03737wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzrvp1n3vBS0dOy4wLfKVC0/HU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0 YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2YThlZjI5MDMvMDY4Njg4YzEtMGRlZi0z MThhLWFjYzUtNGY2NGE0YjU3MTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzViNGIzYTQtYTE5NS00MzI1LThm MDctOTM3NmE4ZWYyOTAzLzM1YjRiM2E0LWExOTUtNDMyNS04ZjA3LTkzNzZhOGVm MjkwMy5jcmwwHwYDVR0jBBgwFoAUuan0c5Rg+PnDmag9AVdSgl973GYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2 YThlZjI5MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQl4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq2U3imA708Xd75sXkYxlW28VCm08u/PUCIyC3BxDiFl1zv7Ebh7CUM Wf0vE0pgEUHoA/Xo8yFzl5GhUQX1vvOI1SfgebOLDy66PKoF4QGxojo26l3hfin4 2tgWjLfHNp9iG+Vd5xgyMrNpt7dqKfGAyaTbLpKFt0kiymd+jj2mhxHjnEagopug dVoRYPONeg3e0W6LK2DVjdk9gpfH6Xjad1llyHaBXfwLPBdEvvlyI01ApzRrUpu8 YkQRGiAdYYrvbOFsvf8XGDgiEzt4b6mccaQNTJ7nxSNDFpGDM4FxQjLCfRa9F+7Q yxw+Zhd+PlJT3u7+w89wsCI6JwsgNMI= -----END CERTIFICATE-----Generated at Sun Oct 11 23:56:19 2026 by rpki-client