$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa File: 2928b3e5-3758-38df-b7af-e739bfc0498e.roa (raw, json) Hash identifier: bGiSIfeU/3TGeaYeyy5cEDVpPsVQQe+cPuA7x3yHKmw= Subject key identifier: E1:3F:E9:F1:EA:06:2C:12:71:7A:71:62:3C:10:41:7E:51:86:58:C0 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584F20F7A88208BB3C7CBC7DE660 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 14500 IP address blocks: 68.70.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a8:82:08:bb:3c:7c:bc:7d:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=86748495-731d-4280-9612-86136c30b0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:39:4b:cb:8b:52:5d:c2:ba:ee:b7:06:69:28: e8:55:79:6b:40:b1:0b:d6:99:1b:ea:a4:b8:4d:64: a8:7e:6e:46:2e:b6:3f:1d:49:ea:63:cd:c5:b5:6d: 34:4f:8d:2e:29:ed:85:2c:60:83:9f:b6:8c:c1:1b: 47:9d:67:c2:d7:d4:a1:8d:b9:a2:9e:05:ab:72:a2: 02:58:a4:14:5b:2e:f0:0a:2c:10:58:b6:0e:6e:b3: fa:1e:14:a8:bc:1f:28:c9:a2:fc:11:24:73:c0:be: ad:37:55:22:09:3c:d3:16:d4:35:7d:c1:cf:36:e3: 7b:cd:58:39:67:fd:6a:1a:74:fa:67:f8:08:29:f1: fb:39:b8:6e:ed:0a:74:bd:ab:a6:71:14:2a:ac:ba: ba:c3:e6:b5:9f:4b:5e:64:24:a0:cc:ba:d5:db:8b: 5e:4f:d9:95:99:22:5d:43:7a:45:0d:3c:ed:ed:11: 0f:ae:38:8e:56:ec:1b:34:94:ac:51:86:1e:8b:6b: 5e:61:19:33:56:22:f1:34:10:3f:67:f7:8a:6c:d1: 11:99:42:53:f0:a3:d5:1e:ac:2f:ca:a3:bb:5d:18: 5b:f0:5d:7c:85:89:d6:b0:99:08:7e:5b:f5:8f:10: 31:07:91:7d:cd:a4:62:4d:07:20:3f:9b:49:29:0d: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3F:E9:F1:EA:06:2C:12:71:7A:71:62:3C:10:41:7E:51:86:58:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b4:a9:03:45:01:25:e3:1e:db:4a:7f:b4:1a:4f:d1:54:60: 68:e9:37:d7:85:33:45:6f:01:3d:41:b0:b7:0c:c5:7a:7e:98: 92:d7:eb:55:73:80:95:b1:37:62:71:17:ec:ff:89:f5:54:4b: 73:de:c9:82:6d:ee:73:ca:1a:e7:51:bd:57:c1:ea:65:c2:f9: 14:fa:85:a6:fc:32:d7:c7:4c:99:73:13:6f:27:dc:22:09:53: 2b:c6:ff:9e:73:d7:a9:9b:1b:7e:5a:a0:e5:af:c7:9b:ed:bf: d8:55:fd:3f:69:cf:2c:61:7e:33:7e:88:ae:c9:a1:16:f8:35: 26:3f:e7:2c:63:1d:6e:a7:55:c5:f8:92:f0:77:62:1c:aa:77: 74:53:65:bf:7e:19:4d:64:56:b7:59:7e:c8:c0:25:9e:87:f6: bb:ab:cc:5f:78:15:d3:4e:05:50:69:d3:36:45:0c:e0:fb:62: ca:e7:40:33:54:85:ac:87:85:01:e3:fd:c4:64:ad:bc:4e:f7: 4c:d3:78:a4:9d:6b:fa:f1:eb:f5:42:19:bb:6d:7f:c8:d0:ea: d6:2d:07:54:3b:98:81:d6:1c:18:32:05:6f:e4:06:a0:1f:8c: e5:68:cb:00:6d:0a:94:42:0c:9f:da:12:84:75:f4:3a:51:72: 21:e7:ba:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96iCCLs8fLx95mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODY3NDg0OTUtNzMxZC00MjgwLTk2MTItODYxMzZjMzBiMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDlLy4tSXcK67rcGaSjoVXlrQLEL1pkb6qS4 TWSofm5GLrY/HUnqY83FtW00T40uKe2FLGCDn7aMwRtHnWfC19ShjbmingWrcqIC WKQUWy7wCiwQWLYObrP6HhSovB8oyaL8ESRzwL6tN1UiCTzTFtQ1fcHPNuN7zVg5 Z/1qGnT6Z/gIKfH7Obhu7Qp0vaumcRQqrLq6w+a1n0teZCSgzLrV24teT9mVmSJd Q3pFDTzt7REPrjiOVuwbNJSsUYYei2teYRkzViLxNBA/Z/eKbNERmUJT8KPVHqwv yqO7XRhb8F18hYnWsJkIflv1jxAxB5F9zaRiTQcgP5tJKQ0znQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE/6fHqBiwScXpxYjwQQX5RhljAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjkyOGIzZTUtMzc1OC0z OGRmLWI3YWYtZTczOWJmYzA0OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy0qQNFASXjHttKf7QaT9FUYGjpN9eFM0VvAT1BsLcMxXp+mJLX61Vz gJWxN2JxF+z/ifVUS3PeyYJt7nPKGudRvVfB6mXC+RT6hab8MtfHTJlzE28n3CIJ UyvG/55z16mbG35aoOWvx5vtv9hV/T9pzyxhfjN+iK7JoRb4NSY/5yxjHW6nVcX4 kvB3Yhyqd3RTZb9+GU1kVrdZfsjAJZ6H9rurzF94FdNOBVBp0zZFDOD7YsrnQDNU hayHhQHj/cRkrbxO90zTeKSda/rx6/VCGbttf8jQ6tYtB1Q7mIHWHBgyBW/kBqAf jOVoywBtCpRCDJ/aEoR19DpRciHnul4= -----END CERTIFICATE-----Generated at Sat Oct 10 12:17:21 2026 by rpki-client