$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa File: 3b366366-9247-34f6-b683-bc009512f354.roa (raw, json) Hash identifier: DyMoLuW0x7HsHRI0xMuqiAvQBmu4BNizukkwyBKN+KM= Subject key identifier: D0:C3:B4:3B:73:AE:A2:43:9E:E0:8E:32:13:5E:11:8A:11:77:CD:16 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584F20F7A88F0E1C3D0D9EA331C0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 14500 IP address blocks: 68.70.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a8:8f:0e:1c:3d:0d:9e:a3:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=395e5b99-a63b-436e-a7ad-0f51fa8c0921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:7e:91:15:a2:18:58:a8:1a:d6:28:56:9c: c5:bd:ac:07:dc:4f:78:2b:ee:99:82:e1:fa:83:39: 7c:49:cf:95:a4:e7:a9:db:3d:c1:e4:15:bc:d3:0d: 8d:41:88:70:44:70:a2:df:35:1e:4e:fc:d4:2c:12: 5e:2a:a4:39:81:e7:18:3d:8b:e0:a8:86:2a:af:48: 2f:f5:b2:ba:c1:78:c5:0a:57:53:d7:e5:a8:5b:2d: 82:d7:7d:6b:e9:21:34:a3:1a:14:ba:c1:7f:b1:c5: 43:2f:8e:7e:f6:2d:94:72:74:4b:2c:8a:20:66:e5: 69:4a:cb:23:df:76:8c:56:f6:d8:2b:fe:d2:0e:f6: 36:99:95:b0:49:c2:a2:5a:83:9c:78:59:a6:db:3d: cd:7f:e9:ca:61:5a:79:30:ba:d4:ae:34:17:1b:ca: a7:b9:47:c8:af:d0:fb:c0:45:0b:58:5a:56:7f:0c: 8a:d9:69:73:65:fc:72:cb:d5:9b:24:e9:d7:1f:84: 04:76:ab:93:a0:68:d6:31:92:cc:f4:a7:22:25:9e: 28:22:03:c9:5f:ca:ee:b8:40:45:68:2d:ed:fa:2c: 74:4c:8c:ab:6b:97:2a:ed:e3:39:0c:58:e7:78:fc: 9d:59:59:76:08:e1:05:b4:4e:d7:5b:b1:20:61:49: 3d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C3:B4:3B:73:AE:A2:43:9E:E0:8E:32:13:5E:11:8A:11:77:CD:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:3e:d2:e6:81:cf:31:00:19:c1:6f:16:7c:45:c6:61:52:f2: f9:e1:6d:0c:c8:38:f3:5f:50:73:3b:fc:d9:fc:70:f6:0c:58: d3:22:97:ef:7f:9a:fc:32:98:d5:5c:41:ec:74:49:93:e8:d6: 3a:b4:44:1a:20:a2:9c:68:64:fa:18:1c:76:6f:47:eb:79:d2: 38:3e:b9:b2:90:60:52:a2:e3:b3:cc:47:c2:d2:43:d2:05:7c: fe:af:05:94:56:f3:bc:9d:a1:44:3c:c7:1a:d9:bb:a1:14:6d: bd:e3:4a:01:4b:fe:fd:db:59:69:7e:c3:e1:83:9a:31:a7:79: 8d:ff:18:1e:6d:63:72:59:9b:55:ad:bb:10:d0:d6:59:97:e7: 62:f3:37:f6:35:1d:70:a3:4b:a7:bc:ae:a9:ed:8d:a4:d5:89: d9:bf:0f:d1:99:b2:92:fe:a7:28:01:c1:02:60:c5:e7:f7:b0: dd:f3:d4:24:62:c2:3f:fa:cc:10:60:3c:e3:2b:71:78:b0:56: c6:1a:03:3f:7f:1b:1b:42:49:94:23:c7:f8:09:45:70:b2:a7: e1:d8:cc:27:04:78:80:78:18:c0:3a:8b:21:40:23:ff:15:5a: 7d:1e:10:dc:e2:83:7a:0e:ae:80:06:3e:a3:71:78:00:ec:0a: d0:1d:c6:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96iPDhw9DZ6jMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk Mzk1ZTViOTktYTYzYi00MzZlLWE3YWQtMGY1MWZhOGMwOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrF+kRWiGFioGtYoVpzFvawH3E94K+6ZguH6 gzl8Sc+VpOep2z3B5BW80w2NQYhwRHCi3zUeTvzULBJeKqQ5gecYPYvgqIYqr0gv 9bK6wXjFCldT1+WoWy2C131r6SE0oxoUusF/scVDL45+9i2UcnRLLIogZuVpSssj 33aMVvbYK/7SDvY2mZWwScKiWoOceFmm2z3Nf+nKYVp5MLrUrjQXG8qnuUfIr9D7 wEULWFpWfwyK2WlzZfxyy9WbJOnXH4QEdquToGjWMZLM9KciJZ4oIgPJX8ruuEBF aC3t+ix0TIyra5cq7eM5DFjnePydWVl2COEFtE7XW7EgYUk9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDDtDtzrqJDnuCOMhNeEYoRd80WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvM2IzNjYzNjYtOTI0Ny0z NGY2LWI2ODMtYmMwMDk1MTJmMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0+0uaBzzEAGcFvFnxFxmFS8vnhbQzIOPNfUHM7/Nn8cPYMWNMil+9/ mvwymNVcQex0SZPo1jq0RBogopxoZPoYHHZvR+t50jg+ubKQYFKi47PMR8LSQ9IF fP6vBZRW87ydoUQ8xxrZu6EUbb3jSgFL/v3bWWl+w+GDmjGneY3/GB5tY3JZm1Wt uxDQ1lmX52LzN/Y1HXCjS6e8rqntjaTVidm/D9GZspL+pygBwQJgxef3sN3z1CRi wj/6zBBgPOMrcXiwVsYaAz9/GxtCSZQjx/gJRXCyp+HYzCcEeIB4GMA6iyFAI/8V Wn0eENzig3oOroAGPqNxeADsCtAdxgQ= -----END CERTIFICATE-----Generated at Sat Oct 10 15:42:37 2026 by rpki-client