$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa File: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (raw, json) Hash identifier: dMRl2Y6pNZbT4vouoJ67EU+JG8FvHKwcgDkqsFZkors= Subject key identifier: CD:76:DB:7D:50:20:71:45:96:5E:5B:C7:26:65:39:8C:1A:BE:CE:34 Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F4328584F4976CFDD6A81D3670E23B6E0 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32242 IP address blocks: 172.102.2.0/24 maxlen: 24 172.102.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:cf:dd:6a:81:d3:67:0e:23:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5da3ed52-bbd6-44f9-adec-130d1afccfa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:e4:34:44:c9:48:93:83:3a:af:d9:cd:a0: 67:97:9d:47:84:73:07:69:ab:a6:ec:13:7f:dd:a7: cd:aa:0e:25:b1:42:9c:fa:23:f9:a5:34:2c:0d:03: 02:fe:2c:d7:39:b5:0c:9d:d2:93:91:4c:2a:ea:26: 6b:8f:08:82:74:fe:43:4a:58:b8:ab:ab:8e:d5:2d: fe:35:78:a6:1c:cf:50:80:92:4a:9d:b4:22:ff:93: 07:ba:42:ba:8f:93:ee:bf:7c:1b:e2:b0:29:2c:f2: a4:50:d4:39:43:d9:94:1e:03:40:c1:72:9d:e9:f8: d5:81:37:18:5b:80:ca:a5:44:fe:49:cb:a5:55:a3: 8b:2f:ca:74:6c:c9:0c:96:13:85:9f:05:8b:6b:e1: ea:b8:76:2c:0f:ea:a4:59:68:6c:28:2d:2b:bb:06: b0:08:df:e6:02:cf:de:7d:b9:c4:c1:0c:d9:da:f2: a6:7b:f9:ff:66:1f:01:e3:6e:5b:be:b1:55:9e:9c: 69:43:81:55:df:20:8c:e8:df:35:e3:9d:8b:69:46: 3d:60:5e:1b:db:f2:53:7a:be:84:cb:e8:92:80:71: 1e:45:c4:4f:f3:6a:d0:96:d4:f1:49:a8:f5:b4:c4: 3e:49:f8:2c:ad:66:0f:90:72:c7:15:a4:1d:b1:1e: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:76:DB:7D:50:20:71:45:96:5E:5B:C7:26:65:39:8C:1A:BE:CE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv4: 172.102.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ae:2c:52:a1:8b:a8:18:bc:02:56:d0:62:17:6c:97:11:38: 2a:8a:98:95:09:aa:a9:14:8c:87:35:68:d9:78:c5:b3:72:cd: af:1d:e8:84:bb:4a:80:bb:6f:cd:c2:09:04:30:17:20:fa:84: 40:24:03:2d:f0:88:11:3a:5c:a6:58:4e:5a:9f:db:eb:89:16: e8:1b:fb:f5:5d:27:c6:af:64:89:46:cb:48:5d:72:91:19:8c: f1:8e:78:5d:34:bd:70:9f:e5:b6:e0:51:a9:bf:dd:a8:2b:1a: 59:d9:5f:30:35:51:a3:fc:ff:4f:4f:58:f7:ae:9a:d6:87:15: 8b:fb:be:08:eb:1b:f7:c8:72:c7:85:bb:3c:48:f5:ab:ef:95: ed:b5:a1:d6:f4:56:df:d4:15:1d:a1:89:0b:6e:99:93:e0:d0: 74:58:b4:a6:70:b7:23:cc:2d:95:c7:1d:b2:91:34:0d:13:ec: 1a:62:64:42:db:50:1c:38:95:34:39:a9:5f:fd:cb:19:36:8d: 57:8f:be:20:33:ea:ca:72:90:c6:6f:d9:8f:59:de:38:8c:4a: 44:d9:87:fe:10:1a:39:d8:16:86:35:a9:79:1e:a2:c4:7a:71: df:6e:68:11:47:0d:02:c0:e1:f2:6e:3b:79:ce:8a:0e:d1:9b: bb:23:52:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jds/daoHTZw4jtuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWRhM2VkNTItYmJkNi00NGY5LWFkZWMtMTMwZDFhZmNjZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32TkNETJSJODOq/ZzaBnl51HhHMHaaum7BN/ 3afNqg4lsUKc+iP5pTQsDQMC/izXObUMndKTkUwq6iZrjwiCdP5DSli4q6uO1S3+ NXimHM9QgJJKnbQi/5MHukK6j5Puv3wb4rApLPKkUNQ5Q9mUHgNAwXKd6fjVgTcY W4DKpUT+SculVaOLL8p0bMkMlhOFnwWLa+HquHYsD+qkWWhsKC0ruwawCN/mAs/e fbnEwQzZ2vKme/n/Zh8B425bvrFVnpxpQ4FV3yCM6N81452LaUY9YF4b2/JTer6E y+iSgHEeRcRP82rQltTxSaj1tMQ+SfgsrWYPkHLHFaQdsR6I9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM12231QIHFFll5bxyZlOYwavs40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvNzBlYjJkMDktYmY1MS0z NzkzLThhZjMtODMxMjE3YjhhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuuLFKhi6gYvAJW0GIXbJcROCqKmJUJqqkUjIc1aNl4xbNyza8d6IS7 SoC7b83CCQQwFyD6hEAkAy3wiBE6XKZYTlqf2+uJFugb+/VdJ8avZIlGy0hdcpEZ jPGOeF00vXCf5bbgUam/3agrGlnZXzA1UaP8/09PWPeumtaHFYv7vgjrG/fIcseF uzxI9avvle21odb0Vt/UFR2hiQtumZPg0HRYtKZwtyPMLZXHHbKRNA0T7BpiZELb UBw4lTQ5qV/9yxk2jVePviAz6spykMZv2Y9Z3jiMSkTZh/4QGjnYFoY1qXkeosR6 cd9uaBFHDQLA4fJuO3nOig7Rm7sjUpg= -----END CERTIFICATE-----Generated at Sat Sep 26 22:17:44 2026 by rpki-client