$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa File: 2928b3e5-3758-38df-b7af-e739bfc0498e.roa (raw, json) Hash identifier: d4xbPUdAqqZ1SsNPQ6h59zd5ehqPq2muKTv2vZZd64E= Subject key identifier: D8:18:BB:3C:69:0B:40:9D:F0:F2:F6:87:A9:12:DB:E2:EA:83:0A:83 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584D9E5002CC118FC1FC515E19E0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 14500 IP address blocks: 68.70.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:02:cc:11:8f:c1:fc:51:5e:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=ee688f50-88e8-47f7-ad8f-46c0fdb9dd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:72:55:99:b7:b6:62:e3:eb:61:d9:54:8a:31: d6:62:b4:e8:87:61:c6:0c:21:51:10:fb:5f:15:54: b1:2a:a0:ad:44:66:61:96:2f:b5:76:19:ef:3c:db: 59:c8:a8:ef:2a:4b:47:0e:68:91:a3:de:f6:91:b2: 8b:86:ca:11:01:59:d2:3d:8b:98:a8:1a:b0:37:10: 13:6d:76:48:f7:3b:64:10:3d:f2:77:1c:45:9d:d9: cc:be:87:ee:66:09:d4:45:7e:91:3f:69:9d:3d:d7: 78:52:83:4e:88:2d:39:b9:83:17:4b:0c:32:c9:aa: b2:d9:93:36:fb:85:c4:ea:44:b1:93:e2:6b:53:4a: c5:ee:5c:6d:5c:a1:92:91:67:61:dd:0b:64:80:07: fb:6e:6c:79:70:94:f0:9a:5b:ff:ba:0d:a5:cd:78: 98:8e:83:80:45:c3:e6:eb:f0:28:9b:af:61:4f:47: b2:16:5b:a7:6e:7e:00:2c:ae:0c:b3:af:f0:20:b4: a9:94:39:a4:5b:a8:c8:d3:50:21:ad:90:9d:04:50: d8:79:30:02:b1:a7:7a:77:2a:7d:60:5e:4b:d9:33: b1:24:d0:dc:1a:d4:99:56:76:97:7c:30:de:8e:f1: f7:17:25:cf:eb:b3:c8:65:19:e3:f6:31:21:79:6e: 0d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:18:BB:3C:69:0B:40:9D:F0:F2:F6:87:A9:12:DB:E2:EA:83:0A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0d:86:83:f4:b7:fd:f4:4b:b8:30:97:f8:5c:f7:3f:6e:a2: 55:db:c9:2f:00:67:55:93:6f:30:30:e6:f9:5f:63:6e:d2:89: d2:73:83:2e:1e:e9:47:be:46:63:c6:ac:65:b8:83:b7:03:a7: 51:ec:03:d6:9f:b3:33:cc:43:61:0c:b2:bd:e4:5e:63:e7:0d: 39:34:91:15:2e:fb:fb:52:d1:a9:c2:00:61:0e:a3:af:8b:46: f2:f2:02:53:dc:74:7e:a2:ae:a2:0b:7b:e0:13:26:11:62:cf: 37:d1:b0:41:4c:de:c9:a4:c5:d1:b9:84:88:f2:69:98:43:18: 75:57:59:20:b6:c9:2b:71:5e:32:fb:7c:6f:38:2c:83:ae:af: 5b:f8:2f:5b:5b:88:4b:b8:b4:5e:47:69:3f:ac:38:4e:53:50: 36:ec:54:f5:70:ea:71:3c:c1:ad:51:c7:e7:ae:09:1d:77:88: d4:58:16:27:aa:f1:34:b5:c9:12:eb:cd:57:40:16:c3:61:6c: 30:21:73:a9:02:64:cc:aa:20:6c:cc:2e:35:6b:1c:47:15:ad: 41:fe:31:d4:f3:7e:54:f7:96:cc:41:88:e4:a5:e9:ca:74:7b: 62:e2:fb:61:90:b0:5c:65:97:0f:36:ec:07:2f:1f:0c:32:71: 88:88:70:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUALMEY/B/FFeGeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZWU2ODhmNTAtODhlOC00N2Y3LWFkOGYtNDZjMGZkYjlkZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHJVmbe2YuPrYdlUijHWYrToh2HGDCFREPtf FVSxKqCtRGZhli+1dhnvPNtZyKjvKktHDmiRo972kbKLhsoRAVnSPYuYqBqwNxAT bXZI9ztkED3ydxxFndnMvofuZgnURX6RP2mdPdd4UoNOiC05uYMXSwwyyaqy2ZM2 +4XE6kSxk+JrU0rF7lxtXKGSkWdh3QtkgAf7bmx5cJTwmlv/ug2lzXiYjoOARcPm 6/Aom69hT0eyFlunbn4ALK4Ms6/wILSplDmkW6jI01AhrZCdBFDYeTACsad6dyp9 YF5L2TOxJNDcGtSZVnaXfDDejvH3FyXP67PIZRnj9jEheW4N9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgYuzxpC0Cd8PL2h6kS2+LqgwqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjkyOGIzZTUtMzc1OC0z OGRmLWI3YWYtZTczOWJmYzA0OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsNhoP0t/30S7gwl/hc9z9uolXbyS8AZ1WTbzAw5vlfY27SidJzgy4e 6Ue+RmPGrGW4g7cDp1HsA9afszPMQ2EMsr3kXmPnDTk0kRUu+/tS0anCAGEOo6+L RvLyAlPcdH6irqILe+ATJhFizzfRsEFM3smkxdG5hIjyaZhDGHVXWSC2yStxXjL7 fG84LIOur1v4L1tbiEu4tF5HaT+sOE5TUDbsVPVw6nE8wa1Rx+euCR13iNRYFieq 8TS1yRLrzVdAFsNhbDAhc6kCZMyqIGzMLjVrHEcVrUH+MdTzflT3lsxBiOSl6cp0 e2Li+2GQsFxllw827AcvHwwycYiIcJo= -----END CERTIFICATE-----Generated at Wed May 13 13:11:54 2026 by rpki-client