$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa File: 54986207-7a58-36f6-8e77-f8161fa1649c.roa (raw, json) Hash identifier: QkGU7su0cvrreYJt6OQ8cBxiqDvZRkQQ8HdahF3v9/w= Subject key identifier: 9A:F2:77:1F:4D:3C:5E:24:4D:EE:C8:81:43:7F:BD:FC:45:0E:98:C6 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584D9E500300B00FBB57BDE30400 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 14500 IP address blocks: 173.244.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:03:00:b0:0f:bb:57:bd:e3:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=7e0f89db-ce56-4e3e-97c7-1bf8376ed299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:fb:61:51:76:01:5c:63:24:1a:47:8a:6d: 70:54:b3:ef:e2:ad:6a:20:70:d1:86:b7:5b:27:5a: 60:35:7c:a5:d9:7a:79:45:4d:ca:64:0c:55:46:ec: 6a:d2:f6:8f:03:d0:9f:13:9d:24:f0:a5:fa:48:38: 99:c4:04:76:8b:d3:62:0c:e7:ac:03:cc:69:5c:90: d7:70:c0:9d:84:4f:cc:a7:10:82:16:eb:05:f0:49: 23:c0:d7:3a:93:67:1d:2f:42:ac:92:a6:95:07:67: 2e:cd:56:51:e1:14:fa:2d:78:ed:ff:c6:9d:27:78: 63:18:34:d9:c0:8b:a7:d8:f6:10:98:e4:b9:20:3d: c8:d6:3d:30:4a:98:4a:c2:5b:47:5d:c8:5f:27:f6: 81:8f:be:dc:69:23:70:94:89:d3:10:f4:da:42:03: c2:26:a4:44:e1:73:6e:5c:f1:a9:85:58:29:f3:9b: 55:8d:e5:86:a8:e8:31:75:2d:56:7a:b9:9c:9e:83: de:dc:d4:4a:d6:82:5a:b4:40:36:81:22:96:84:71: 96:12:00:5b:a7:b8:f9:1f:59:e3:4b:00:f3:10:29: 1a:4d:b5:bb:46:9c:91:22:3a:80:10:ba:60:6c:f2: 6a:44:13:fb:df:25:aa:7d:46:37:a7:69:59:f8:d6: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F2:77:1F:4D:3C:5E:24:4D:EE:C8:81:43:7F:BD:FC:45:0E:98:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:c5:27:d1:a5:d5:9a:5f:06:0a:b3:a7:18:8a:87:41:8b:89: 4e:b9:e9:b8:5f:37:25:f1:34:17:71:e2:bd:99:12:15:01:0c: a2:c3:3d:a3:50:c2:7a:27:fc:ca:52:1d:e3:5d:df:8a:a9:35: 30:9e:72:37:10:83:4c:ec:3d:9b:09:f3:5d:c3:8a:c5:bb:bb: af:66:e6:1c:ed:d5:37:c7:c4:c0:e3:84:51:c7:85:7d:76:bc: 9b:c4:6c:c2:e2:30:82:60:24:0d:67:c1:18:c0:a4:a5:29:c0: eb:d7:1a:25:e3:7f:51:07:2c:2f:d9:33:77:ff:77:19:f4:76: ae:bd:2d:dd:9c:08:18:d7:75:fc:1f:6c:5a:1d:16:8c:20:2f: a9:68:83:e3:75:4d:51:2f:d3:d6:6c:f4:cb:f2:39:73:32:5f: 70:d1:61:d3:08:cf:8f:11:37:3b:c2:7b:8b:4a:19:15:41:06: 54:b7:bc:0a:59:5b:3d:17:98:f4:3b:5c:f0:cd:59:45:50:18: ac:63:bd:d5:0b:80:66:c2:29:1b:40:3d:85:70:dc:01:fb:4c: 5c:d4:53:4b:ca:37:c8:d1:fe:1f:2d:98:55:ba:c7:db:b0:e3: a7:66:5e:1f:01:94:8a:2a:aa:ed:31:aa:f2:fa:37:2f:7e:3e: 6a:89:b8:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAMAsA+7V73jBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk N2UwZjg5ZGItY2U1Ni00ZTNlLTk3YzctMWJmODM3NmVkMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4P7YVF2AVxjJBpHim1wVLPv4q1qIHDRhrdb J1pgNXyl2Xp5RU3KZAxVRuxq0vaPA9CfE50k8KX6SDiZxAR2i9NiDOesA8xpXJDX cMCdhE/MpxCCFusF8EkjwNc6k2cdL0KskqaVB2cuzVZR4RT6LXjt/8adJ3hjGDTZ wIun2PYQmOS5ID3I1j0wSphKwltHXchfJ/aBj77caSNwlInTEPTaQgPCJqRE4XNu XPGphVgp85tVjeWGqOgxdS1WermcnoPe3NRK1oJatEA2gSKWhHGWEgBbp7j5H1nj SwDzECkaTbW7RpyRIjqAELpgbPJqRBP73yWqfUY3p2lZ+NaodwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrydx9NPF4kTe7IgUN/vfxFDpjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNTQ5ODYyMDctN2E1OC0z NmY2LThlNzctZjgxNjFmYTE2NDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDFJ9Gl1ZpfBgqzpxiKh0GLiU656bhfNyXxNBdx4r2ZEhUBDKLDPaNQ wnon/MpSHeNd34qpNTCecjcQg0zsPZsJ813DisW7u69m5hzt1TfHxMDjhFHHhX12 vJvEbMLiMIJgJA1nwRjApKUpwOvXGiXjf1EHLC/ZM3f/dxn0dq69Ld2cCBjXdfwf bFodFowgL6log+N1TVEv09Zs9MvyOXMyX3DRYdMIz48RNzvCe4tKGRVBBlS3vApZ Wz0XmPQ7XPDNWUVQGKxjvdULgGbCKRtAPYVw3AH7TFzUU0vKN8jR/h8tmFW6x9uw 46dmXh8BlIoqqu0xqvL6Ny9+PmqJuJA= -----END CERTIFICATE-----Generated at Wed May 13 15:08:39 2026 by rpki-client