$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/1696dcff-7a9e-38ed-986a-9f1aa229677b.roa File: 1696dcff-7a9e-38ed-986a-9f1aa229677b.roa (raw, json) Hash identifier: lCX6V7zUpec98qGCejtp1nDxmP3hMxZjsmm3ayDo2aU= Subject key identifier: 02:F0:05:4D:7E:EB:C9:C5:02:20:CD:C6:A2:59:74:7B:E8:EB:E1:DE Certificate issuer: /CN=afc860c0-ce45-47c2-a938-201b0950b4c9 Certificate serial: 010D0C9F4328584F4262FD63CA55D542710E8680 Authority key identifier: 8A:03:F0:6D:D3:E0:5E:2C:19:9C:4A:BA:BD:40:EA:89:21:D5:C5:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/1696dcff-7a9e-38ed-986a-9f1aa229677b.roa Signing time: Tue 22 Sep 2026 12:18:15 +0000 ROA not before: Tue 22 Sep 2026 12:18:15 +0000 ROA not after: Mon 21 Dec 2026 13:18:15 +0000 asID: 400335 IP address blocks: 64.89.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/afc860c0-ce45-47c2-a938-201b0950b4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/afc860c0-ce45-47c2-a938-201b0950b4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:62:fd:63:ca:55:d5:42:71:0e:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc860c0-ce45-47c2-a938-201b0950b4c9 Validity Not Before: Sep 22 12:18:15 2026 GMT Not After : Dec 21 13:18:15 2026 GMT Subject: CN=f9d60929-849c-44d2-a61f-c05923689d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4e:d6:2c:8f:66:a2:ba:36:a0:a1:24:d2:a1: e4:f1:38:36:b8:35:c6:2f:b3:93:2b:3d:f4:44:b2: 85:42:e1:51:5d:cc:25:78:fc:d4:74:8d:b0:9e:98: 20:c0:60:a9:2b:a6:29:53:f9:9d:8f:8b:df:15:b7: 39:25:ed:21:1a:52:4f:0b:97:2a:4e:31:f4:0d:e1: de:0f:d8:ed:d9:a3:5d:e8:00:22:7f:2c:68:fc:38: aa:7e:e7:6e:a4:43:d1:0f:04:45:0e:62:65:ff:1d: 03:3e:a6:1e:37:d5:eb:85:b0:3d:b5:d3:19:f1:76: 26:91:e6:36:db:41:a1:7a:94:ba:f7:4c:b5:36:f5: 15:a0:c9:59:cf:ec:2c:5a:3b:de:04:d5:cc:c0:00: af:41:3f:f8:93:a9:84:e4:0f:ac:c5:2d:fb:5a:15: 12:13:10:2f:f4:0e:d7:fe:22:93:3a:dc:87:e6:a9: ea:79:e9:cf:e9:97:3e:bc:28:a2:aa:4f:d1:dc:bf: cb:f0:bd:ac:e6:95:27:8d:f5:b7:7f:f5:b5:7a:53: d0:7f:90:db:6a:83:25:5b:0a:e4:14:7d:8b:a4:74: 68:01:a0:a8:41:c5:94:32:19:9f:37:61:8e:27:d6: 98:dc:38:e4:bc:d1:a7:4f:17:5e:84:cb:f2:3a:bf: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F0:05:4D:7E:EB:C9:C5:02:20:CD:C6:A2:59:74:7B:E8:EB:E1:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/1696dcff-7a9e-38ed-986a-9f1aa229677b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9/afc860c0-ce45-47c2-a938-201b0950b4c9.crl X509v3 Authority Key Identifier: keyid:8A:03:F0:6D:D3:E0:5E:2C:19:9C:4A:BA:BD:40:EA:89:21:D5:C5:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/afc860c0-ce45-47c2-a938-201b0950b4c9.cer sbgp-ipAddrBlock: critical IPv4: 64.89.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:60:7a:80:6d:98:b4:ec:fd:b8:32:b4:0c:39:ab:12:09:4b: 35:e5:3b:7f:87:90:d1:bf:bc:79:af:c3:2e:33:84:56:83:2e: 89:c8:e2:c7:e2:21:2f:24:af:7f:91:5c:8d:d3:d6:eb:35:b3: 4d:0e:94:83:e3:fb:a5:d4:1e:a2:36:00:a2:ba:72:64:f5:4d: b6:07:e6:d4:b8:cb:2e:8b:f4:14:f5:82:cf:29:1d:ba:cb:de: 85:63:71:e0:33:da:dc:ef:a4:de:05:26:e4:b5:8e:b9:e6:a4: 6e:81:bf:a8:77:5a:e1:0d:0c:b7:4c:0c:16:ce:22:90:12:aa: 46:87:69:4b:80:08:25:ba:2e:c8:ed:9f:62:81:8f:63:23:cf: a9:e8:03:90:53:4b:08:d2:38:47:27:04:8a:47:86:3f:3d:12: fa:d8:d8:c2:3d:e2:e4:f4:d7:f0:33:81:6d:94:41:5b:b5:1d: ee:9a:3a:d4:59:b5:f3:a4:4f:80:9c:ed:50:1e:40:e6:14:f0: 68:1f:81:33:c1:af:25:82:bc:3d:7c:9e:dc:92:29:64:5a:fe: a0:09:b8:bb:6a:ea:0c:30:48:5b:ac:b5:fa:96:f8:65:8f:ee: 4d:f9:28:7a:50:26:f2:34:a8:21:f2:ec:fa:95:f5:bb:57:f4: cc:2d:c9:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CYv1jylXVQnEOhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjODYwYzAtY2U0NS00N2MyLWE5MzgtMjAxYjA5NTBi NGM5MB4XDTI2MDkyMjEyMTgxNVoXDTI2MTIyMTEzMTgxNVowLzEtMCsGA1UEAxMk ZjlkNjA5MjktODQ5Yy00NGQyLWE2MWYtYzA1OTIzNjg5ZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6E7WLI9moro2oKEk0qHk8Tg2uDXGL7OTKz30 RLKFQuFRXcwlePzUdI2wnpggwGCpK6YpU/mdj4vfFbc5Je0hGlJPC5cqTjH0DeHe D9jt2aNd6AAifyxo/DiqfudupEPRDwRFDmJl/x0DPqYeN9XrhbA9tdMZ8XYmkeY2 20GhepS690y1NvUVoMlZz+wsWjveBNXMwACvQT/4k6mE5A+sxS37WhUSExAv9A7X /iKTOtyH5qnqeenP6Zc+vCiiqk/R3L/L8L2s5pUnjfW3f/W1elPQf5DbaoMlWwrk FH2LpHRoAaCoQcWUMhmfN2GOJ9aY3DjkvNGnTxdehMvyOr/73QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALwBU1+68nFAiDNxqJZdHvo6+HeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hZmM4 NjBjMC1jZTQ1LTQ3YzItYTkzOC0yMDFiMDk1MGI0YzkvMTY5NmRjZmYtN2E5ZS0z OGVkLTk4NmEtOWYxYWEyMjk2NzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYWZjODYwYzAtY2U0NS00N2MyLWE5 MzgtMjAxYjA5NTBiNGM5L2FmYzg2MGMwLWNlNDUtNDdjMi1hOTM4LTIwMWIwOTUw YjRjOS5jcmwwHwYDVR0jBBgwFoAUigPwbdPgXiwZnEq6vUDqiSHVxXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hZmM4NjBjMC1jZTQ1LTQ3YzItYTkzOC0yMDFi MDk1MGI0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJgeoBtmLTs/bgytAw5qxIJSzXlO3+HkNG/vHmvwy4zhFaDLonI4sfi IS8kr3+RXI3T1us1s00OlIPj+6XUHqI2AKK6cmT1TbYH5tS4yy6L9BT1gs8pHbrL 3oVjceAz2tzvpN4FJuS1jrnmpG6Bv6h3WuENDLdMDBbOIpASqkaHaUuACCW6Lsjt n2KBj2Mjz6noA5BTSwjSOEcnBIpHhj89EvrY2MI94uT01/AzgW2UQVu1He6aOtRZ tfOkT4Cc7VAeQOYU8GgfgTPBryWCvD18ntySKWRa/qAJuLtq6gwwSFustfqW+GWP 7k35KHpQJvI0qCHy7PqV9btX9MwtyRM= -----END CERTIFICATE-----Generated at Sat Sep 26 08:48:06 2026 by rpki-client