$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa File: 2928b3e5-3758-38df-b7af-e739bfc0498e.roa (raw, json) Hash identifier: Q2Z76Kw6sfl/bYjNkLJklakPFpA6Ah5eQPMuLJ8q9gE= Subject key identifier: F3:EE:15:F1:88:68:AA:64:45:C3:31:F9:64:EC:13:31:5D:23:C2:61 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584E7E94E28C59EBAA807FC5B900 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 14500 IP address blocks: 68.70.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e2:8c:59:eb:aa:80:7f:c5:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=505a40c0-785d-45c4-bda0-519fa3d6a90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:5d:28:da:6d:76:d0:a8:f5:a0:ff:bc:e4: aa:42:ef:19:39:6a:a9:29:37:92:82:0e:14:25:15: 30:2c:e2:9c:4a:e9:1d:b7:da:03:37:4f:e0:c0:d1: ce:5a:7d:8b:5d:9b:a6:f7:20:cd:51:eb:24:f2:75: 0d:0c:8a:51:3c:ad:dc:5e:12:67:76:a1:80:91:ef: f1:de:79:7f:2b:d6:08:94:09:aa:6c:2f:11:95:3e: 8d:72:c6:98:0e:c9:63:25:56:fc:0a:00:7e:50:49: 14:19:fc:f0:e1:0c:e6:d0:dd:5d:00:92:c2:f3:90: ff:b8:0e:50:6a:f2:f4:26:f9:05:90:b5:9d:8a:2c: d1:9f:12:6e:cf:9d:ee:d3:53:d9:68:1b:64:96:20: 0d:ce:26:eb:ee:22:8c:8b:69:83:a4:26:e7:35:61: a1:13:1e:e3:25:85:f9:a1:55:b9:d7:ce:91:61:f8: a9:ba:ce:f9:3b:01:c8:ae:a9:4f:cd:bf:61:e2:48: a5:b8:0f:a7:3b:bd:a6:71:9b:6a:55:56:5e:af:23: e2:1e:25:42:8c:41:df:65:7b:de:87:cd:73:5d:e6: cb:b9:a8:a8:6b:f2:7e:f9:5e:2a:40:67:cf:15:97: b8:f3:48:1a:b4:d4:12:02:80:77:e4:55:1f:09:da: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EE:15:F1:88:68:AA:64:45:C3:31:F9:64:EC:13:31:5D:23:C2:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:68:7c:ee:19:2f:7e:d5:14:d1:e7:2c:1e:e3:79:a9:3c:d7: dd:51:87:6f:ac:8e:12:b6:40:62:b2:7d:03:45:02:97:f9:61: 83:f0:29:92:3e:26:b2:5c:15:b4:f1:7b:54:b8:04:e4:33:94: 7c:25:4e:9c:6f:d7:50:bd:09:b4:33:e5:31:a0:cc:99:ee:ac: db:78:5d:a1:db:1e:a9:75:9c:49:11:52:ef:ff:29:c9:b4:4a: ca:16:33:c8:c7:d7:70:c5:93:4a:7c:38:72:7b:f0:d2:b6:1e: 33:33:e4:4f:a5:09:b4:97:cd:d6:7f:eb:5a:37:2d:73:25:78: 5b:d6:6f:99:19:f8:80:5e:da:f6:b6:d2:7e:e1:42:1b:bf:f9: 63:b5:53:b8:a7:27:0f:37:18:7e:41:51:86:1c:80:90:d5:62: 9a:e8:99:c8:86:6b:b2:e4:cc:8b:27:33:60:4b:55:ce:5a:37: ba:04:e5:c9:8c:d2:89:d2:45:65:88:3b:ea:a5:b9:51:f9:05: 00:61:d1:95:69:7c:24:3a:1a:05:4a:96:f7:f0:65:66:2d:3b: b4:dd:c8:03:9e:2e:49:19:d5:ae:98:c8:21:2e:a5:0e:73:02: 51:b8:ff:07:38:6b:c2:1b:b8:7c:c8:74:cc:94:4f:51:bb:3f: c9:64:7c:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOKMWeuqgH/FuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NTA1YTQwYzAtNzg1ZC00NWM0LWJkYTAtNTE5ZmEzZDZhOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUBdKNptdtCo9aD/vOSqQu8ZOWqpKTeSgg4U JRUwLOKcSukdt9oDN0/gwNHOWn2LXZum9yDNUesk8nUNDIpRPK3cXhJndqGAke/x 3nl/K9YIlAmqbC8RlT6NcsaYDsljJVb8CgB+UEkUGfzw4Qzm0N1dAJLC85D/uA5Q avL0JvkFkLWdiizRnxJuz53u01PZaBtkliANzibr7iKMi2mDpCbnNWGhEx7jJYX5 oVW5186RYfipus75OwHIrqlPzb9h4kiluA+nO72mcZtqVVZeryPiHiVCjEHfZXve h81zXebLuaioa/J++V4qQGfPFZe480gatNQSAoB35FUfCdqztQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPuFfGIaKpkRcMx+WTsEzFdI8JhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjkyOGIzZTUtMzc1OC0z OGRmLWI3YWYtZTczOWJmYzA0OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRofO4ZL37VFNHnLB7jeak8191Rh2+sjhK2QGKyfQNFApf5YYPwKZI+ JrJcFbTxe1S4BOQzlHwlTpxv11C9CbQz5TGgzJnurNt4XaHbHql1nEkRUu//Kcm0 SsoWM8jH13DFk0p8OHJ78NK2HjMz5E+lCbSXzdZ/61o3LXMleFvWb5kZ+IBe2va2 0n7hQhu/+WO1U7inJw83GH5BUYYcgJDVYpromciGa7LkzIsnM2BLVc5aN7oE5cmM 0onSRWWIO+qluVH5BQBh0ZVpfCQ6GgVKlvfwZWYtO7TdyAOeLkkZ1a6YyCEupQ5z AlG4/wc4a8IbuHzIdMyUT1G7P8lkfNg= -----END CERTIFICATE-----Generated at Fri Jul 24 03:19:22 2026 by rpki-client