$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa File: 272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa (raw, json) Hash identifier: P+6xD/Lf9YfmB7jlM2gb6+SdCbOhAH7kC9fmOY1XmOI= Subject key identifier: E4:D0:14:77:61:B3:1A:F8:AF:AD:66:22:45:44:16:FC:5F:6F:19:69 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584E7E94E2A773A2D44C1B5D4100 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 14500 IP address blocks: 68.70.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e2:a7:73:a2:d4:4c:1b:5d:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=5b4d52fc-c55d-4b3e-a052-a18c8cbe8473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e5:9d:36:62:bc:71:99:d5:6d:7f:f4:f5:65: 7f:a9:87:cd:d4:1b:17:00:ef:d5:52:a4:52:45:a8: e2:ea:7f:3a:bb:56:39:cc:f1:f7:cf:bf:01:94:93: 14:46:f1:f3:3c:f6:d1:22:c3:98:f7:4d:53:e4:16: 85:2a:38:bd:b1:0b:a7:a1:06:61:96:f8:19:d6:a1: 0e:90:ea:e7:af:65:c0:14:0c:55:61:a2:cf:0d:5a: 3e:99:4e:d1:fa:17:82:f9:29:26:df:f4:f8:1c:af: 07:bf:89:bb:52:94:84:05:a1:ee:ff:b8:8a:07:a0: 16:f1:4d:7e:82:f5:7e:71:0e:80:c9:98:ed:ed:b0: c8:cc:c5:d5:7b:17:e3:0e:d5:1b:15:29:3f:4f:56: 56:47:b2:6a:7a:10:9b:4f:ac:76:cc:06:06:79:23: 1d:f5:ae:72:3c:be:c4:81:88:d8:9a:a8:0d:dc:1d: 65:8d:db:19:48:d8:04:55:55:4a:36:82:7d:5e:dd: c4:76:ae:0e:2e:f1:66:ab:00:51:50:7b:f1:93:23: bc:79:2e:d8:88:05:7e:85:7e:c0:dc:8f:18:5b:48: 7d:2a:c1:54:91:95:47:45:92:8a:f4:66:3d:9a:e2: 52:66:3c:90:36:9c:26:e5:ca:2f:df:c8:c2:a9:1f: 37:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D0:14:77:61:B3:1A:F8:AF:AD:66:22:45:44:16:FC:5F:6F:19:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:29:14:46:cb:cd:9f:7a:aa:1e:e0:a8:ca:e6:3e:32:2b:d0: 0f:0c:34:ed:e1:b1:f2:01:9d:c8:b2:9b:02:b0:49:51:26:b7: f6:6a:9b:38:4c:e0:37:7d:3f:71:d6:e7:9c:9c:83:b8:86:47: 65:ce:71:b4:56:30:3d:85:ef:26:18:d1:d6:b5:66:00:c3:fc: 8f:9e:8e:b2:8d:af:4e:9c:fe:29:59:be:41:b5:63:f6:ae:29: 95:18:76:ac:6f:69:80:68:b5:67:54:a1:1c:15:0c:9b:78:95: fc:61:e6:12:a3:b6:fe:fb:08:ac:22:a6:1b:c9:15:44:97:b6: f6:ab:e2:e7:99:16:62:d3:09:62:6a:30:42:ba:9b:3c:e6:3e: 56:c3:cf:49:32:cb:d0:f6:65:02:e0:74:e3:8b:9b:35:0d:db: a6:04:6d:21:18:f5:8c:b1:7d:db:63:62:9c:2b:a2:08:ed:3c: f5:5c:3c:03:4f:6f:84:5a:57:ac:4f:da:7d:56:a0:56:95:12: 8f:7e:8e:bf:1a:c1:b7:13:a8:d0:31:73:e6:73:74:6e:fc:b6: a9:93:5e:eb:73:1f:75:a2:91:df:a5:86:fb:e8:83:eb:57:95: 28:50:62:80:fc:69:5e:9f:d4:4f:a5:a5:9f:a5:e7:7e:5e:8c: e8:9e:ff:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOKnc6LUTBtdQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NWI0ZDUyZmMtYzU1ZC00YjNlLWEwNTItYTE4YzhjYmU4NDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+WdNmK8cZnVbX/09WV/qYfN1BsXAO/VUqRS Raji6n86u1Y5zPH3z78BlJMURvHzPPbRIsOY901T5BaFKji9sQunoQZhlvgZ1qEO kOrnr2XAFAxVYaLPDVo+mU7R+heC+Skm3/T4HK8Hv4m7UpSEBaHu/7iKB6AW8U1+ gvV+cQ6AyZjt7bDIzMXVexfjDtUbFSk/T1ZWR7JqehCbT6x2zAYGeSMd9a5yPL7E gYjYmqgN3B1ljdsZSNgEVVVKNoJ9Xt3Edq4OLvFmqwBRUHvxkyO8eS7YiAV+hX7A 3I8YW0h9KsFUkZVHRZKK9GY9muJSZjyQNpwm5cov38jCqR83kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTQFHdhsxr4r61mIkVEFvxfbxlpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjcyZTNkNzItZjQyYi0z OTRkLWEyYWMtNDhhYzNlMDUwYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEpFEbLzZ96qh7gqMrmPjIr0A8MNO3hsfIBnciymwKwSVEmt/ZqmzhM 4Dd9P3HW55ycg7iGR2XOcbRWMD2F7yYY0da1ZgDD/I+ejrKNr06c/ilZvkG1Y/au KZUYdqxvaYBotWdUoRwVDJt4lfxh5hKjtv77CKwiphvJFUSXtvar4ueZFmLTCWJq MEK6mzzmPlbDz0kyy9D2ZQLgdOOLmzUN26YEbSEY9YyxfdtjYpwrogjtPPVcPANP b4RaV6xP2n1WoFaVEo9+jr8awbcTqNAxc+ZzdG78tqmTXutzH3Wikd+lhvvog+tX lShQYoD8aV6f1E+lpZ+l535ejOie/5A= -----END CERTIFICATE-----Generated at Fri Jul 24 15:21:11 2026 by rpki-client