$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa File: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (raw, json) Hash identifier: 79nBcnN71Or9wk1ErqN6BhkIvuXCKxKGep361DnM3F0= Subject key identifier: AF:B4:6A:82:40:98:7C:F0:9E:DD:02:C8:31:90:C6:2F:57:CF:2A:7D Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F4328584DD0906111298371D7EC104600 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 32242 IP address blocks: 172.102.2.0/24 maxlen: 24 172.102.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:61:11:29:83:71:d7:ec:10:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=9f0150d3-433f-40f2-b4da-8a6e160cae17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:f0:d5:ad:31:55:c1:ba:4d:e1:d7:06:b3: e6:8b:77:5f:20:82:53:e3:36:df:c1:ae:99:64:08: 25:87:0f:dc:a2:76:f8:29:e3:a8:33:52:f2:ae:3e: 1c:94:0d:91:95:30:6b:e4:e3:df:e0:0c:b9:ce:c6: 18:cc:79:cf:8f:42:78:cf:8c:f5:77:da:5b:3c:40: 78:96:76:1a:c5:3d:86:c6:eb:33:72:80:61:17:2e: 37:9e:de:94:a9:e4:fa:e3:35:e9:e1:b9:bc:45:af: 2c:cf:33:cf:38:fe:3a:68:68:72:8e:c2:91:c7:0a: 00:6b:13:db:39:8c:b9:2f:b4:58:e3:ec:75:08:27: 3b:d8:23:84:73:41:9d:c5:91:c8:50:49:7c:b7:3c: a8:f9:f9:fe:e4:b1:0c:00:91:e1:a7:14:47:07:46: 36:cc:a0:ed:a2:60:bc:ac:b4:15:ba:3f:f2:a5:4e: c9:d6:a9:cd:54:7f:0c:c2:4b:f3:8b:83:f7:06:25: c2:54:a5:e2:c1:d6:99:d7:14:dd:3a:a9:75:6a:9b: 57:f6:31:e5:71:57:59:9d:e6:f3:a3:66:91:b5:4a: 3e:0f:d9:0c:68:ff:08:40:89:80:ac:8e:3b:2d:b0: a7:49:97:1c:41:df:40:c8:60:72:cf:09:c9:f2:74: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B4:6A:82:40:98:7C:F0:9E:DD:02:C8:31:90:C6:2F:57:CF:2A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv4: 172.102.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1c:39:fa:b4:80:88:fd:31:31:9b:d9:40:77:db:ef:10:f0: 39:bd:58:1e:cc:01:61:48:4e:05:d9:3a:02:e1:fb:82:c9:dc: 59:df:4c:4b:5a:74:b2:1f:e5:a0:1f:d6:39:f2:d4:87:be:3c: 50:22:d6:9d:3c:11:ad:7c:0b:a4:47:b6:12:25:01:35:e4:5c: 04:81:4d:de:9b:c8:2a:7d:0e:08:44:9d:81:5f:0d:43:ed:85: 5c:27:5d:16:8a:59:e2:6a:7f:1b:81:bf:bc:e2:10:48:50:5b: 27:f4:bf:e1:5b:d9:b0:72:ee:e1:be:e1:a3:a8:1c:63:06:3d: 06:16:bc:e0:15:db:3d:74:93:7b:67:5a:22:15:9f:9a:33:7d: 36:bb:1a:2b:6e:8e:d4:3b:f0:83:66:a1:c3:5e:78:ea:e3:e2: b7:7d:19:09:e2:9a:1d:57:0c:e2:65:f4:75:b2:5f:91:4f:58: 0f:53:42:ad:19:fe:18:63:5c:28:c2:87:90:c8:f1:3c:78:6f: 89:06:f8:95:17:57:47:30:96:45:4b:47:3d:0a:3e:1a:eb:66: 91:83:74:c1:b6:e1:10:71:17:ae:65:ca:67:ec:6b:84:de:45: c3:06:29:b2:06:b7:2f:e8:3b:c1:e1:a4:13:0b:63:29:21:23: d1:68:34:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkGERKYNx1+wQRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk OWYwMTUwZDMtNDMzZi00MGYyLWI0ZGEtOGE2ZTE2MGNhZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNrw1a0xVcG6TeHXBrPmi3dfIIJT4zbfwa6Z ZAglhw/conb4KeOoM1Lyrj4clA2RlTBr5OPf4Ay5zsYYzHnPj0J4z4z1d9pbPEB4 lnYaxT2GxuszcoBhFy43nt6UqeT64zXp4bm8Ra8szzPPOP46aGhyjsKRxwoAaxPb OYy5L7RY4+x1CCc72COEc0GdxZHIUEl8tzyo+fn+5LEMAJHhpxRHB0Y2zKDtomC8 rLQVuj/ypU7J1qnNVH8Mwkvzi4P3BiXCVKXiwdaZ1xTdOql1aptX9jHlcVdZnebz o2aRtUo+D9kMaP8IQImArI47LbCnSZccQd9AyGByzwnJ8nQRGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+0aoJAmHzwnt0CyDGQxi9Xzyp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvNzBlYjJkMDktYmY1MS0z NzkzLThhZjMtODMxMjE3YjhhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUcOfq0gIj9MTGb2UB32+8Q8Dm9WB7MAWFITgXZOgLh+4LJ3FnfTEta dLIf5aAf1jny1Ie+PFAi1p08Ea18C6RHthIlATXkXASBTd6byCp9DghEnYFfDUPt hVwnXRaKWeJqfxuBv7ziEEhQWyf0v+Fb2bBy7uG+4aOoHGMGPQYWvOAV2z10k3tn WiIVn5ozfTa7GitujtQ78INmocNeeOrj4rd9GQnimh1XDOJl9HWyX5FPWA9TQq0Z /hhjXCjCh5DI8Tx4b4kG+JUXV0cwlkVLRz0KPhrrZpGDdMG24RBxF65lymfsa4Te RcMGKbIGty/oO8HhpBMLYykhI9FoNNw= -----END CERTIFICATE-----Generated at Wed May 13 08:18:07 2026 by rpki-client