$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa File: 3b366366-9247-34f6-b683-bc009512f354.roa (raw, json) Hash identifier: R5zoPbCmwB53yHd2HRVlDtloqi+LDxFpZumPLiPr74M= Subject key identifier: C1:E3:0D:DC:21:D8:A4:24:E8:C7:11:7B:68:30:C0:F2:72:E1:82:22 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584E7E94E299595DD277FA0B8C00 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 14500 IP address blocks: 68.70.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e2:99:59:5d:d2:77:fa:0b:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=dd644ddd-b348-4c8d-adfb-6a062bb1a093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:51:84:ab:41:4f:ad:b5:0f:53:91:e7:87:3d: 29:c9:68:74:bc:0f:fd:e4:a0:f5:b1:b4:c3:7b:45: 20:90:92:4a:f4:6f:76:35:4d:ee:57:55:5b:54:86: de:b2:c7:10:c1:91:21:9f:d2:d7:53:dc:e1:e3:ce: d1:c4:4c:b3:6a:69:16:ee:f9:82:6d:64:f8:b6:53: 05:c8:ed:d9:0b:50:1b:14:7b:95:c4:bc:61:ff:49: 63:30:a6:3c:e9:c6:25:52:0d:3e:0f:58:f5:51:89: 58:e6:c3:06:c1:f6:11:b8:da:d8:5f:19:5f:94:f2: 1e:4a:b9:c4:0d:cf:21:36:31:b1:df:5d:22:7c:f8: c5:55:1d:e3:9b:fc:a0:56:aa:37:c3:2a:c0:b4:f1: d4:fb:25:2b:1c:0d:7d:22:c5:fb:94:11:8a:8b:a9: 0b:40:7a:88:b5:ad:54:8e:68:93:8e:6f:4e:32:04: 56:2f:9d:2d:9e:4f:52:48:d4:11:3f:93:34:c2:79: f9:1c:19:25:29:b9:2c:21:0f:24:54:e5:62:e4:53: 1d:61:34:48:78:d2:6b:ed:04:68:8e:f6:6c:20:0b: 5a:ad:a3:59:f0:be:bc:15:61:e6:fc:65:dd:7d:d9: 6d:25:fd:ca:05:84:39:52:32:75:fd:17:c8:61:71: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E3:0D:DC:21:D8:A4:24:E8:C7:11:7B:68:30:C0:F2:72:E1:82:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/3b366366-9247-34f6-b683-bc009512f354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:bc:d3:8c:dd:47:22:74:ab:07:27:60:05:96:49:4b:c0:5b: 56:13:7f:6a:c2:0c:76:4e:19:4b:12:6f:41:79:e5:30:a9:4f: c2:df:90:f0:80:01:f2:5c:69:bd:0d:fa:54:f0:cd:d0:eb:27: 75:f2:3f:9d:fa:58:37:34:71:2f:55:76:89:b0:d4:b3:80:7a: 5e:31:eb:1c:b8:91:ac:fe:a3:ae:76:10:25:9d:74:e7:fd:bc: e1:ca:d5:19:7d:6a:7f:d3:93:06:af:40:65:b2:3b:3a:ff:d1: 54:47:01:bc:1d:a7:b4:7e:03:ed:83:34:c6:96:c9:dc:c4:d2: af:88:a9:44:1e:35:93:09:c1:1e:b6:a5:bb:05:bc:83:cb:3a: 0c:37:c7:c6:fe:22:f6:b6:0c:38:64:9b:2b:aa:0d:f6:99:f9: 53:be:99:61:9d:60:f3:10:f7:80:6a:cf:b1:b3:41:15:a4:33: af:7d:1d:13:2a:13:22:48:6e:e8:54:6b:f7:31:ad:c1:f0:1d: 7c:52:dd:ab:b3:4a:8d:37:ab:f3:d0:94:07:d3:98:43:9e:ba: 79:18:95:1b:7b:bf:e9:7d:32:57:1c:72:56:63:f6:39:b6:2a: eb:ca:cd:82:5e:dd:c6:0b:79:61:8d:22:ce:b2:21:44:aa:02: 69:29:64:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOKZWV3Sd/oLjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZGQ2NDRkZGQtYjM0OC00YzhkLWFkZmItNmEwNjJiYjFhMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1GEq0FPrbUPU5Hnhz0pyWh0vA/95KD1sbTD e0UgkJJK9G92NU3uV1VbVIbesscQwZEhn9LXU9zh487RxEyzamkW7vmCbWT4tlMF yO3ZC1AbFHuVxLxh/0ljMKY86cYlUg0+D1j1UYlY5sMGwfYRuNrYXxlflPIeSrnE Dc8hNjGx310ifPjFVR3jm/ygVqo3wyrAtPHU+yUrHA19IsX7lBGKi6kLQHqIta1U jmiTjm9OMgRWL50tnk9SSNQRP5M0wnn5HBklKbksIQ8kVOVi5FMdYTRIeNJr7QRo jvZsIAtaraNZ8L68FWHm/GXdfdltJf3KBYQ5UjJ1/RfIYXGQ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHjDdwh2KQk6McRe2gwwPJy4YIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvM2IzNjYzNjYtOTI0Ny0z NGY2LWI2ODMtYmMwMDk1MTJmMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALa804zdRyJ0qwcnYAWWSUvAW1YTf2rCDHZOGUsSb0F55TCpT8LfkPCA AfJcab0N+lTwzdDrJ3XyP536WDc0cS9Vdomw1LOAel4x6xy4kaz+o652ECWddOf9 vOHK1Rl9an/TkwavQGWyOzr/0VRHAbwdp7R+A+2DNMaWydzE0q+IqUQeNZMJwR62 pbsFvIPLOgw3x8b+Iva2DDhkmyuqDfaZ+VO+mWGdYPMQ94Bqz7GzQRWkM699HRMq EyJIbuhUa/cxrcHwHXxS3auzSo03q/PQlAfTmEOeunkYlRt7v+l9MlccclZj9jm2 KuvKzYJe3cYLeWGNIs6yIUSqAmkpZFc= -----END CERTIFICATE-----Generated at Fri Jul 24 12:29:02 2026 by rpki-client