$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa File: 3b366366-9247-34f6-b683-bc009512f354.roa (raw, json) Hash identifier: EaMRKrVPkOt9ySNwRut6t4FOZfF0nNNktu99vWOUKNs= Subject key identifier: BA:00:09:1D:E3:4D:E9:0E:5C:C2:9A:CB:27:94:62:6D:A8:F7:57:F1 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584D9E5002DF938432C06B6AF070 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 14500 IP address blocks: 68.70.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:02:df:93:84:32:c0:6b:6a:f0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=3dc42818-4ca3-4c7b-ba19-fd95eaf3a0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:70:4e:00:b7:46:51:8f:6d:97:e4:35:d7: 6f:ab:fe:8b:5a:bc:3b:b7:e1:67:e1:7b:a7:fc:f8: 35:d9:f6:35:89:2f:6e:b0:f4:e1:32:3b:39:69:2e: 85:a7:e1:4e:af:94:74:de:c8:09:d5:27:db:e9:10: d8:37:0e:94:2c:99:c2:52:96:a0:a9:e0:ae:9b:0a: e4:26:3c:e6:81:d2:dc:21:a1:87:a4:09:44:f6:98: df:a5:77:ee:5e:33:65:bf:e0:fa:b6:d5:3b:dc:80: 89:66:9c:30:89:88:19:da:79:54:a7:7e:8e:5a:89: e6:29:ba:f4:e3:d8:4d:e1:52:ee:08:1c:b3:17:80: 41:55:4a:e7:af:76:77:f3:94:ce:13:93:da:6b:92: 8f:e2:22:49:b1:fc:d2:56:d8:84:38:21:eb:3c:f4: 1d:ef:b1:34:d4:21:96:f2:ea:3e:58:1b:96:31:ca: b1:a2:54:5d:7b:ee:8d:cf:e4:90:09:d3:e3:6b:0f: 50:13:e6:52:e9:4b:9b:1b:60:ae:77:cc:5b:ed:a6: 2b:7b:45:8f:43:d3:5a:3b:65:26:f6:1b:15:f5:a2: 1a:90:a5:8b:bd:ab:64:10:46:91:c6:ee:74:43:0b: 6d:5a:ee:9f:10:82:98:3b:f9:0b:90:d3:d1:c6:a7: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:00:09:1D:E3:4D:E9:0E:5C:C2:9A:CB:27:94:62:6D:A8:F7:57:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d1:d5:9b:5d:1f:97:f5:74:1c:ea:19:77:94:22:99:b2:eb: f5:f7:c3:a4:86:e0:38:1e:88:8d:62:9e:00:3a:96:62:73:26: 3b:9d:1d:88:3b:49:c4:40:2d:22:87:f4:b7:82:cc:99:ab:42: 58:6c:70:c4:7c:b9:5a:e0:c5:b5:3f:af:84:97:69:3e:86:76: 38:05:46:a6:1b:dd:0d:7f:78:db:a0:b5:8e:a1:06:e7:47:e5: 59:12:ff:d3:22:40:4e:bb:29:9a:b8:76:4c:f1:53:f2:73:e5: d7:9e:aa:54:32:66:f7:51:d9:f7:20:a8:82:21:b2:f1:0f:00: fe:e8:80:c3:f2:60:4e:f0:56:68:85:45:13:37:39:c6:32:72: e9:2e:a9:b6:86:aa:a6:11:8b:16:52:90:eb:b2:e8:c7:5a:a9: 1f:e9:de:73:86:74:c9:28:ac:37:7a:79:ef:ad:af:50:d2:5f: 38:78:7d:7e:89:53:26:59:7a:26:4d:5f:ff:be:13:5e:c6:d2: 0b:6e:5a:65:d0:13:4b:f3:85:eb:4c:c7:81:1c:2e:31:d3:ae: 19:33:6c:13:18:bb:fc:21:d3:92:35:a9:1d:69:f7:5c:02:16: cf:67:bd:2c:cd:6d:d2:b8:10:46:3e:29:23:0d:0b:b1:e2:0d: 6f:c1:65:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUALfk4QywGtq8HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk M2RjNDI4MTgtNGNhMy00YzdiLWJhMTktZmQ5NWVhZjNhMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmhwTgC3RlGPbZfkNddvq/6LWrw7t+Fn4Xun /Pg12fY1iS9usPThMjs5aS6Fp+FOr5R03sgJ1Sfb6RDYNw6ULJnCUpagqeCumwrk JjzmgdLcIaGHpAlE9pjfpXfuXjNlv+D6ttU73ICJZpwwiYgZ2nlUp36OWonmKbr0 49hN4VLuCByzF4BBVUrnr3Z385TOE5Paa5KP4iJJsfzSVtiEOCHrPPQd77E01CGW 8uo+WBuWMcqxolRde+6Nz+SQCdPjaw9QE+ZS6UubG2Cud8xb7aYre0WPQ9NaO2Um 9hsV9aIakKWLvatkEEaRxu50QwttWu6fEIKYO/kLkNPRxqdbBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoACR3jTekOXMKayyeUYm2o91fxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvM2IzNjYzNjYtOTI0Ny0z NGY2LWI2ODMtYmMwMDk1MTJmMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLR1ZtdH5f1dBzqGXeUIpmy6/X3w6SG4DgeiI1ingA6lmJzJjudHYg7 ScRALSKH9LeCzJmrQlhscMR8uVrgxbU/r4SXaT6GdjgFRqYb3Q1/eNugtY6hBudH 5VkS/9MiQE67KZq4dkzxU/Jz5deeqlQyZvdR2fcgqIIhsvEPAP7ogMPyYE7wVmiF RRM3OcYycukuqbaGqqYRixZSkOuy6MdaqR/p3nOGdMkorDd6ee+tr1DSXzh4fX6J UyZZeiZNX/++E17G0gtuWmXQE0vzhetMx4EcLjHTrhkzbBMYu/wh05I1qR1p91wC Fs9nvSzNbdK4EEY+KSMNC7HiDW/BZVY= -----END CERTIFICATE-----Generated at Wed May 13 14:21:22 2026 by rpki-client