$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/00b8bd76-9778-3e13-90d1-44c43d4c3610.roa File: 00b8bd76-9778-3e13-90d1-44c43d4c3610.roa (raw, json) Hash identifier: /ckaFnbtD6FLUQI8/bhRQkdSLi4UTEKn/ClpliatGbE= Subject key identifier: 8E:7A:42:7E:D7:CC:1E:B9:FD:F4:9F:0D:D2:0E:F0:AB:49:D2:A3:68 Certificate issuer: /CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75 Certificate serial: 010D0C9F4328584F4277F74DAF2F2107C955A400 Authority key identifier: 41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/00b8bd76-9778-3e13-90d1-44c43d4c3610.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 30323 IP address blocks: 23.174.96.0/24 maxlen: 24 173.195.97.0/24 maxlen: 24 2620:66:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f7:4d:af:2f:21:07:c9:55:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=7cbd9847-efbd-4b6f-8ead-6cc02c4bf7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:15:3a:b9:7e:ed:d5:30:88:c1:78:b4:94: 2c:52:8b:1e:1b:0e:5b:ad:ec:31:83:e3:8d:f2:91: 3a:cc:a3:4d:e4:d0:d7:f9:08:5c:e8:df:a7:f4:37: 53:b5:1e:f5:57:6b:fd:91:85:36:f1:9b:2f:33:a6: e8:39:e9:94:0a:0d:a3:21:46:69:fe:ec:d0:c9:f9: cb:61:a3:ac:5d:2e:5f:0b:e5:ae:3b:a6:b8:bc:f4: 62:06:ae:0d:9e:58:08:44:d8:fa:1f:c7:8b:0d:2a: 4f:90:f6:9f:70:8c:5f:31:8c:0f:c3:07:a7:cb:c0: c0:f8:c1:cd:75:f0:76:2a:50:62:e2:c4:65:8a:26: 56:42:75:7f:4f:68:d3:59:06:98:a5:9d:58:81:3d: 27:de:19:9f:8c:0d:59:51:33:f9:9b:d7:c4:ed:4e: ce:f5:97:b1:4b:e6:07:f9:3b:de:b8:1e:52:5e:a7: 9d:5e:e8:00:01:c6:af:c1:4d:8e:20:a4:45:43:46: 36:b7:61:54:88:59:5a:4d:33:a7:ac:3d:af:78:3f: 97:d8:ae:86:08:6e:36:fa:59:1c:94:41:42:1a:71: a4:55:e6:74:96:d0:e5:8b:b7:0f:1f:e0:dd:b1:e3: cb:e2:c4:d9:ad:4a:be:3b:e9:37:8d:7e:89:f9:00: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7A:42:7E:D7:CC:1E:B9:FD:F4:9F:0D:D2:0E:F0:AB:49:D2:A3:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/00b8bd76-9778-3e13-90d1-44c43d4c3610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.crl X509v3 Authority Key Identifier: keyid:41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer sbgp-ipAddrBlock: critical IPv4: 23.174.96.0/24 173.195.97.0/24 IPv6: 2620:66:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:d9:43:89:3c:0e:53:22:9f:4a:75:23:24:69:7c:7d:3e:3d: 6b:25:e4:02:4b:d8:0d:bb:46:b9:60:e0:c8:20:90:8a:ff:ad: 4c:e8:74:82:cd:31:8d:4b:54:b3:d5:b2:88:60:76:58:a2:c0: 6a:a8:c3:50:04:d6:eb:c5:c4:60:cd:fc:0f:11:42:14:5b:6b: 49:1a:01:0e:98:5d:e6:c7:8e:d6:99:c8:43:e9:56:b4:eb:61: 43:64:91:d0:d9:d3:69:da:2e:0f:b6:8a:c0:60:84:d2:c7:73: f8:24:7b:ce:5a:64:77:a7:dd:c4:05:e7:b1:e9:c4:1d:66:5a: 31:b1:d4:05:24:c8:7b:02:da:90:4d:5c:ed:a3:7c:ac:e0:28: b2:f3:13:c2:ff:b1:22:8d:b5:2c:83:90:cf:54:c4:df:4d:ec: 4a:e5:6c:ed:d0:ef:89:45:d7:df:25:b9:b5:f2:b6:1d:23:80: e7:1a:ec:8c:49:d2:a0:91:10:af:4d:37:48:fb:c7:64:6f:99: d1:de:13:3f:ac:ae:85:0d:58:58:00:9e:43:f4:4b:bd:d6:a9: da:03:d8:b6:22:85:a2:19:3c:7c:bc:a4:7c:25:2f:e5:3e:16: 17:2c:fb:97:be:19:71:bf:b7:28:b4:ad:aa:58:9d:d0:de:4b: f8:ef:8b:f5 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE9Cd/dNry8hB8lVpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYyZjY5NjEtMDkxZi00YmIyLTkwZDEtZGNkZDk2OWYx Yzc1MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk N2NiZDk4NDctZWZiZC00YjZmLThlYWQtNmNjMDJjNGJmN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEsVOrl+7dUwiMF4tJQsUoseGw5brewxg+ON 8pE6zKNN5NDX+Qhc6N+n9DdTtR71V2v9kYU28ZsvM6boOemUCg2jIUZp/uzQyfnL YaOsXS5fC+WuO6a4vPRiBq4NnlgIRNj6H8eLDSpPkPafcIxfMYwPwweny8DA+MHN dfB2KlBi4sRliiZWQnV/T2jTWQaYpZ1YgT0n3hmfjA1ZUTP5m9fE7U7O9ZexS+YH +TveuB5SXqedXugAAcavwU2OIKRFQ0Y2t2FUiFlaTTOnrD2veD+X2K6GCG42+lkc lEFCGnGkVeZ0ltDli7cPH+DdsePL4sTZrUq+O+k3jX6J+QCCVQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFI56Qn7XzB65/fSfDdIO8KtJ0qNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZjJm Njk2MS0wOTFmLTRiYjItOTBkMS1kY2RkOTY5ZjFjNzUvMDBiOGJkNzYtOTc3OC0z ZTEzLTkwZDEtNDRjNDNkNGMzNjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWYyZjY5NjEtMDkxZi00YmIyLTkw ZDEtZGNkZDk2OWYxYzc1L2FmMmY2OTYxLTA5MWYtNGJiMi05MGQxLWRjZGQ5Njlm MWM3NS5jcmwwHwYDVR0jBBgwFoAUQdUiRGVyuzxnZ2XnKD6/fTQXGCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZjJmNjk2MS0wOTFmLTRiYjItOTBkMS1kY2Rk OTY5ZjFjNzUuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAF65gAwQA rcNhMA8EAgACMAkDBwAmIABmoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAyNlDiTwOUyKfSnUjJGl8fT49 ayXkAkvYDbtGuWDgyCCQiv+tTOh0gs0xjUtUs9WyiGB2WKLAaqjDUATW68XEYM38 DxFCFFtrSRoBDphd5seO1pnIQ+lWtOthQ2SR0NnTadouD7aKwGCE0sdz+CR7zlpk d6fdxAXnsenEHWZaMbHUBSTIewLakE1c7aN8rOAosvMTwv+xIo21LIOQz1TE303s SuVs7dDviUXX3yW5tfK2HSOA5xrsjEnSoJEQr003SPvHZG+Z0d4TP6yuhQ1YWACe Q/RLvdap2gPYtiKFohk8fLykfCUv5T4WFyz7l74Zcb+3KLStqlid0N5L+O+L9Q== -----END CERTIFICATE-----Generated at Fri Oct 9 21:28:59 2026 by rpki-client