$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa File: 2026f06e-1431-31e6-8460-5ff177b4b260.roa (raw, json) Hash identifier: WrVyU8Zd+ROQPTOYN9L6nfB9q/PN+2wcXlAhlZmr0V4= Subject key identifier: 24:6D:BA:21:FC:F0:F6:8E:71:60:6C:F5:F3:5A:5F:EF:A7:94:97:53 Certificate issuer: /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Certificate serial: 010D0C9F43285849D165078C38C47EC530260800 Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 16509 IP address blocks: 68.70.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:07:8c:38:c4:7e:c5:30:26:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=bc99a8b4-ef5a-4710-b86f-7098c988a74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:0f:dd:bd:84:3d:4d:2a:c0:61:25:3a:51: 90:8f:d3:a1:f5:5c:76:97:92:bc:de:03:07:18:88: 7b:2d:77:3a:00:88:f1:3f:65:eb:1b:fd:82:da:c4: 03:9b:3b:ba:f3:83:be:d9:7f:df:49:a9:9c:f2:16: 7c:c5:83:69:00:ab:26:1f:1e:bb:67:17:59:88:1e: 16:bf:1f:88:e7:00:a9:3b:58:0d:75:90:a8:ec:c6: b6:c6:c3:9c:35:19:82:3f:35:e5:8c:1e:16:77:8b: 65:52:ee:fa:81:f9:f7:c0:50:94:4d:03:8a:6c:ed: ac:3f:93:43:7d:6e:d2:1e:87:31:e8:28:f4:d8:9c: 12:a6:08:29:6e:2c:c3:83:4e:84:35:53:33:92:88: 1b:be:4f:ad:cc:f7:79:f8:3e:ef:2e:86:33:a6:0e: 3c:b9:30:e6:83:c0:33:06:9d:2a:ba:53:b6:5c:0d: ef:bb:e2:01:1d:90:25:1a:09:69:ae:72:dc:75:69: 78:73:89:39:d1:08:c0:3d:03:08:df:29:b7:26:59: 3c:f9:d1:60:3f:65:e3:1d:ae:b6:c9:10:6e:6a:1f: 85:4c:46:ec:64:73:c7:85:b4:c4:35:17:e0:d4:09: b0:5a:25:e5:55:6e:62:aa:aa:dc:72:ac:ad:dc:37: 68:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6D:BA:21:FC:F0:F6:8E:71:60:6C:F5:F3:5A:5F:EF:A7:94:97:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl X509v3 Authority Key Identifier: keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer sbgp-ipAddrBlock: critical IPv4: 68.70.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a1:70:b0:cc:af:fe:d7:9e:ba:cd:db:49:74:c9:09:dc:71: 2f:39:4d:68:02:3e:87:8f:d0:59:92:e6:b4:b1:1d:95:41:ad: 58:8a:c3:a9:26:40:57:0c:af:f2:b5:53:26:ca:20:e7:22:82: 60:ae:e2:fb:fc:2f:ff:ae:33:90:05:58:d9:b0:00:24:93:ff: 1b:a8:a7:12:01:1e:72:86:ba:12:50:2a:35:62:a5:1b:43:bb: 5b:98:ed:58:3a:c4:6f:6a:cd:60:8a:29:17:37:35:76:4a:91: a4:dc:10:c5:ae:07:1f:c7:31:e6:82:b7:6f:a5:ae:4e:04:fd: 95:e9:47:4a:47:41:3b:8a:49:8a:7d:ef:2f:00:37:37:8b:a2: 53:48:d8:6f:0c:e2:15:0c:fd:ee:5f:fd:39:7d:13:d0:38:bb: e4:c2:bd:cb:c2:f4:c4:a3:49:a0:75:57:21:64:de:13:26:0c: 99:cb:a2:73:46:0b:ee:b1:5b:8f:63:a5:8b:87:3d:88:6a:9e: 3d:1d:20:ed:44:f9:f4:66:17:af:53:f4:47:bd:a2:2d:43:82: e9:87:bb:8e:63:28:a8:5b:4b:e8:24:8e:4b:62:62:0e:27:5d: 72:1a:b7:ec:d2:8c:dc:08:8f:47:be:32:cd:0c:1d:cf:ec:d1: 66:68:98:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQeMOMR+xTAmCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmM2ZiMzQtOWQ2MS00NDc2LTgxMTAtOGNhMjg3NmU3 OTI4MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk YmM5OWE4YjQtZWY1YS00NzEwLWI4NmYtNzA5OGM5ODhhNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo68P3b2EPU0qwGElOlGQj9Oh9Vx2l5K83gMH GIh7LXc6AIjxP2XrG/2C2sQDmzu684O+2X/fSamc8hZ8xYNpAKsmHx67ZxdZiB4W vx+I5wCpO1gNdZCo7Ma2xsOcNRmCPzXljB4Wd4tlUu76gfn3wFCUTQOKbO2sP5ND fW7SHocx6Cj02JwSpggpbizDg06ENVMzkogbvk+tzPd5+D7vLoYzpg48uTDmg8Az Bp0qulO2XA3vu+IBHZAlGglprnLcdWl4c4k50QjAPQMI3ym3Jlk8+dFgP2XjHa62 yRBuah+FTEbsZHPHhbTENRfg1AmwWiXlVW5iqqrccqyt3DdoeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRtuiH88PaOcWBs9fNaX++nlJdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYz ZmIzNC05ZDYxLTQ0NzYtODExMC04Y2EyODc2ZTc5MjgvMjAyNmYwNmUtMTQzMS0z MWU2LTg0NjAtNWZmMTc3YjRiMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDFmM2ZiMzQtOWQ2MS00NDc2LTgx MTAtOGNhMjg3NmU3OTI4L2QxZjNmYjM0LTlkNjEtNDQ3Ni04MTEwLThjYTI4NzZl NzkyOC5jcmwwHwYDVR0jBBgwFoAUHVxtl3sO0IsXB0lOny3PFM65iiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYzZmIzNC05ZDYxLTQ0NzYtODExMC04Y2Ey ODc2ZTc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOhcLDMr/7XnrrN20l0yQnccS85TWgCPoeP0FmS5rSxHZVBrViKw6km QFcMr/K1UybKIOcigmCu4vv8L/+uM5AFWNmwACST/xuopxIBHnKGuhJQKjVipRtD u1uY7Vg6xG9qzWCKKRc3NXZKkaTcEMWuBx/HMeaCt2+lrk4E/ZXpR0pHQTuKSYp9 7y8ANzeLolNI2G8M4hUM/e5f/Tl9E9A4u+TCvcvC9MSjSaB1VyFk3hMmDJnLonNG C+6xW49jpYuHPYhqnj0dIO1E+fRmF69T9Ee9oi1DgumHu45jKKhbS+gkjktiYg4n XXIat+zSjNwIj0e+Ms0MHc/s0WZomF4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:50:53 2025 by rpki-client