$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa File: 272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa (raw, json) Hash identifier: 5hv21MXS/yT6HiFAafxkOuFfGtvoGKi58dqDZY01EhQ= Subject key identifier: CE:05:2E:A9:8B:B2:D8:78:1D:85:94:E1:BD:BE:FB:ED:52:C0:29:DC Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584F20F7A89B8B9E45B795C67680 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 14500 IP address blocks: 68.70.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a8:9b:8b:9e:45:b7:95:c6:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=e7ff49c8-3a2f-4225-8180-b2d00b12bfc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:9f:8d:c1:38:77:69:06:a7:4a:fd:1e:1e: 09:f4:05:06:88:75:e4:66:cc:ba:6b:fe:bf:a4:f5: e6:75:4f:36:5a:aa:ea:36:0e:80:47:26:1c:58:b7: d2:ea:17:4a:71:b7:7a:ec:7d:54:e6:8d:4e:ba:b5: d4:03:5a:56:c7:be:a3:1c:17:07:1c:84:2b:08:e8: f6:e1:48:a0:87:0f:36:91:4d:06:6c:4d:0b:61:38: 97:1c:f2:0b:5d:a5:69:50:ce:6b:9f:09:96:7e:fd: b4:3b:39:b0:78:3e:a9:21:fb:87:48:a6:af:b7:e2: d4:62:05:c7:39:0c:fa:1f:1c:58:0f:63:4a:96:f6: 08:e9:66:9d:0d:7e:6f:8d:93:06:c6:fb:5f:0b:e5: 63:fa:6f:53:64:09:32:4a:33:5b:be:5a:6d:70:68: b3:19:76:2d:08:4b:1c:11:7d:d7:57:91:9b:4c:62: 8d:a2:fb:1c:b5:24:ed:88:bf:bb:46:b2:8d:ab:d7: 2f:d6:2a:0d:bc:cb:eb:f6:f8:f1:3d:b6:0b:fd:60: 32:7f:81:32:22:cd:2b:9d:3c:1d:9f:c3:1c:90:25: c4:3d:5b:c1:3c:1e:6e:33:3f:d7:52:7e:58:b6:42: 48:13:53:fa:62:32:6e:e8:8d:6d:03:56:61:ff:3d: 9a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:05:2E:A9:8B:B2:D8:78:1D:85:94:E1:BD:BE:FB:ED:52:C0:29:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f7:86:38:94:d2:9b:0e:85:80:31:c8:6b:55:61:76:d3:65: 39:ae:0d:1e:e7:b1:60:67:ee:86:52:c7:17:a6:eb:08:53:c9: 7a:57:00:58:ad:e0:3e:b4:3d:58:16:22:ea:95:cc:da:5b:c4: 6f:14:ce:cb:a4:5e:4d:5a:b3:25:35:e9:63:45:5b:7a:c6:af: 5e:6f:6b:11:e6:55:5e:3d:9b:72:59:3d:6b:e4:5a:2a:e3:58: bc:6b:dd:3b:cf:07:17:27:ff:50:8c:df:5e:b1:72:1a:ba:5a: ce:13:82:af:61:2b:4e:94:80:c1:44:aa:b4:04:38:af:b4:7f: ef:00:9e:14:00:ef:9f:28:2d:e8:7c:a5:59:ee:bf:ac:32:78: 2a:4f:40:f7:bb:d5:15:7b:51:a0:97:f2:04:82:9f:d9:1a:4b: 2b:ba:95:6f:bc:3c:17:80:29:72:bc:92:94:f9:1c:e1:0d:1d: 15:c3:a9:70:46:85:22:da:b3:83:bc:56:7f:96:19:85:ba:bd: 94:e7:59:b4:ff:64:b6:c8:18:d1:62:b7:ac:5a:29:d0:f5:1b: a0:df:2f:a1:90:be:4f:33:a3:5d:61:e5:c5:88:0c:b5:6d:0f: 63:32:25:e3:8d:54:c6:c1:2b:b1:79:c3:43:e2:8c:08:c1:4e: 77:b5:c0:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96ibi55Ft5XGdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTdmZjQ5YzgtM2EyZi00MjI1LTgxODAtYjJkMDBiMTJiZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+qfjcE4d2kGp0r9Hh4J9AUGiHXkZsy6a/6/ pPXmdU82WqrqNg6ARyYcWLfS6hdKcbd67H1U5o1OurXUA1pWx76jHBcHHIQrCOj2 4Uighw82kU0GbE0LYTiXHPILXaVpUM5rnwmWfv20OzmweD6pIfuHSKavt+LUYgXH OQz6HxxYD2NKlvYI6WadDX5vjZMGxvtfC+Vj+m9TZAkySjNbvlptcGizGXYtCEsc EX3XV5GbTGKNovsctSTtiL+7RrKNq9cv1ioNvMvr9vjxPbYL/WAyf4EyIs0rnTwd n8MckCXEPVvBPB5uMz/XUn5YtkJIE1P6YjJu6I1tA1Zh/z2aqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4FLqmLsth4HYWU4b2+++1SwCncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjcyZTNkNzItZjQyYi0z OTRkLWEyYWMtNDhhYzNlMDUwYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL3hjiU0psOhYAxyGtVYXbTZTmuDR7nsWBn7oZSxxem6whTyXpXAFit 4D60PVgWIuqVzNpbxG8UzsukXk1asyU16WNFW3rGr15vaxHmVV49m3JZPWvkWirj WLxr3TvPBxcn/1CM316xchq6Ws4Tgq9hK06UgMFEqrQEOK+0f+8AnhQA758oLeh8 pVnuv6wyeCpPQPe71RV7UaCX8gSCn9kaSyu6lW+8PBeAKXK8kpT5HOENHRXDqXBG hSLas4O8Vn+WGYW6vZTnWbT/ZLbIGNFit6xaKdD1G6DfL6GQvk8zo11h5cWIDLVt D2MyJeONVMbBK7F5w0PijAjBTne1wOg= -----END CERTIFICATE-----Generated at Sun Oct 11 11:06:49 2026 by rpki-client