$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa File: af9473bf-b67e-357e-95a9-91892269d8f7.roa (raw, json) Hash identifier: jNyXgaRLQQWdbDbjEBfIiOK6F40kLjMixAXWhYsfwXE= Subject key identifier: B4:06:EE:48:07:89:99:14:E1:74:7E:E6:DA:16:B2:B6:93:DA:A7:E7 Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F4328584D40CA48E8ACE6C757AA9E1040 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 208.79.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:48:e8:ac:e6:c7:57:aa:9e:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=bd4b95d1-3a94-499c-bb30-8036d691b76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:60:d3:2a:33:36:f5:e3:1e:02:91:ee:15: c5:6e:dc:6f:00:65:85:1a:e0:98:d4:4d:c7:b2:28: 52:bc:b9:4b:34:61:e2:8b:89:4b:1a:84:fa:61:d1: 1f:52:f2:df:86:a9:2c:ef:c0:2d:0b:63:c9:2e:db: 92:5d:ce:4a:30:05:a8:75:69:d4:19:47:5b:bc:96: 43:f6:77:cd:31:89:f7:f2:e4:75:b2:f4:0b:dd:ae: 98:32:01:e0:97:39:be:92:39:5e:4b:33:6d:41:61: 5a:1e:ea:ba:5c:c8:9c:6b:de:06:6f:42:9e:4f:5f: 63:19:5e:ff:bb:33:fc:98:01:7d:14:be:b9:8f:e1: 58:75:d6:08:fc:1c:f9:79:01:6b:be:2a:6d:73:01: 90:87:5a:53:80:94:37:32:b7:7d:1b:d9:e4:89:fb: f2:97:f3:e6:32:b4:d3:0c:2b:cb:7e:1d:e9:43:55: 9a:2c:24:2a:0a:c8:bc:81:30:76:f4:da:2f:29:76: 6d:0c:6a:41:01:ae:16:a9:5b:59:3b:7b:a4:b3:32: d9:8c:2e:94:a6:97:52:a7:40:ab:ea:e9:be:11:60: ee:ab:cf:f3:85:94:59:c2:27:59:35:f2:36:53:ce: 45:f0:7e:cf:af:69:8c:39:06:a6:87:86:4f:86:8d: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:06:EE:48:07:89:99:14:E1:74:7E:E6:DA:16:B2:B6:93:DA:A7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:20:1c:d4:13:a1:87:75:a5:09:c5:71:8a:ee:31:17:00:ce: 50:c5:c8:0e:95:36:43:27:f3:0b:02:9a:be:58:14:c6:8a:96: e1:5b:33:23:61:23:0d:09:78:e9:02:42:c5:c7:04:2e:00:68: fe:0c:25:09:14:33:d7:db:6d:f7:0e:ed:b5:33:46:9e:76:dc: 19:80:b3:86:15:d4:43:c8:cf:94:f8:d8:53:a6:8a:b5:97:2c: 1e:dc:62:5e:10:74:7f:f2:de:8a:7a:da:c7:bf:91:fd:d9:34: 70:57:76:df:17:9c:a4:18:69:41:9d:b0:e1:83:25:fb:b3:b1: 1b:da:e0:d1:5c:16:18:71:17:26:4a:4d:97:1e:0a:89:1a:fc: c9:52:74:46:95:37:a9:a1:cc:c7:bd:3b:a6:eb:c6:04:ef:bc: 23:c4:73:0c:78:e3:a9:e5:6f:08:f6:e9:b6:07:81:eb:d0:35: b9:53:05:82:9f:83:26:2e:cd:b6:1c:f4:84:48:02:0f:e8:23: 4e:1b:6d:89:cb:ef:45:04:91:9b:f9:5d:d6:a8:b2:a3:5d:02: 10:17:84:23:4a:7c:cc:f9:5b:20:88:45:e1:cf:8a:f1:d1:af: 68:f2:a0:8a:a8:d5:f3:cb:a3:e5:71:7b:27:b6:49:98:91:94: 8b:58:47:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykjorObHV6qeEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YmQ0Yjk1ZDEtM2E5NC00OTljLWJiMzAtODAzNmQ2OTFiNzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK1g0yozNvXjHgKR7hXFbtxvAGWFGuCY1E3H sihSvLlLNGHii4lLGoT6YdEfUvLfhqks78AtC2PJLtuSXc5KMAWodWnUGUdbvJZD 9nfNMYn38uR1svQL3a6YMgHglzm+kjleSzNtQWFaHuq6XMica94Gb0KeT19jGV7/ uzP8mAF9FL65j+FYddYI/Bz5eQFrviptcwGQh1pTgJQ3Mrd9G9nkifvyl/PmMrTT DCvLfh3pQ1WaLCQqCsi8gTB29NovKXZtDGpBAa4WqVtZO3ukszLZjC6UppdSp0Cr 6um+EWDuq8/zhZRZwidZNfI2U85F8H7Pr2mMOQamh4ZPho1/HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQG7kgHiZkU4XR+5toWsraT2qfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvYWY5NDczYmYtYjY3ZS0z NTdlLTk1YTktOTE4OTIyNjlkOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIgHNQToYd1pQnFcYruMRcAzlDFyA6VNkMn8wsCmr5YFMaKluFbMyNh Iw0JeOkCQsXHBC4AaP4MJQkUM9fbbfcO7bUzRp523BmAs4YV1EPIz5T42FOmirWX LB7cYl4QdH/y3op62se/kf3ZNHBXdt8XnKQYaUGdsOGDJfuzsRva4NFcFhhxFyZK TZceCoka/MlSdEaVN6mhzMe9O6brxgTvvCPEcwx446nlbwj26bYHgevQNblTBYKf gyYuzbYc9IRIAg/oI04bbYnL70UEkZv5XdaosqNdAhAXhCNKfMz5WyCIReHPivHR r2jyoIqo1fPLo+Vxeye2SZiRlItYR4c= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:17 2026 by rpki-client