$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa File: 6004ad98-6f8b-32da-a595-914020a7855c.roa (raw, json) Hash identifier: MkZXW8aKwENR8CW92YJOXtNVvMrj9vwfNKo5c3duLrM= Subject key identifier: C5:A1:AD:50:A1:5D:E4:02:CD:08:57:BF:37:B4:3E:78:F2:74:E9:D7 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584F20F7A8CF0CBB000FEFA82480 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 14500 IP address blocks: 173.244.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a8:cf:0c:bb:00:0f:ef:a8:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=2257b76f-bb34-4044-ac3e-cf2af5887741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:77:a2:e0:88:80:4e:3c:e4:ba:53:30:15:39: f8:27:b0:09:c6:fd:3c:4d:c1:9f:cf:45:c0:e5:f8: db:36:af:21:9d:85:83:99:d6:0c:a4:69:23:57:8f: 07:ac:3b:5b:46:4d:e6:39:19:b6:21:39:f9:76:5a: 46:d6:7a:64:d5:38:2b:ee:e8:10:17:ef:73:d0:c4: b8:6c:97:d7:e3:f6:bb:93:8b:a4:5f:01:f4:1c:5b: c9:65:e0:b7:c5:0a:0e:49:7a:2e:f0:40:ee:cd:2c: bb:00:b1:14:c4:af:4d:72:cb:ab:36:29:a7:21:b1: 3b:bb:4a:0e:7e:9f:c4:79:d9:5e:cb:18:04:d0:c6: d0:16:30:e0:eb:82:de:81:26:ff:53:26:4e:11:26: 2e:86:d4:30:ad:c6:30:cc:aa:fd:33:52:9e:cf:a0: 21:4f:1b:85:e0:35:5a:ab:90:26:9e:4a:8d:27:36: 48:dd:72:00:11:33:57:b0:6a:1e:3c:66:ed:d6:0f: a3:f1:85:b0:4f:36:59:0c:5c:ac:7e:39:ee:17:d3: f1:ff:f2:2d:29:4f:64:68:5b:45:02:11:31:ac:d4: 1c:33:01:06:a0:fd:bc:a5:5a:be:44:13:6c:9f:27: 23:83:10:23:2d:2f:41:be:7b:32:b4:ab:4b:d9:39: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A1:AD:50:A1:5D:E4:02:CD:08:57:BF:37:B4:3E:78:F2:74:E9:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3e:7a:21:0c:d5:47:6e:d9:bf:5c:dc:e0:b1:01:e6:98:12: bc:a0:ab:48:2a:68:22:3a:70:7f:72:fb:8a:c1:af:59:f0:59: 0f:d2:db:92:19:3e:24:0b:e5:dd:de:b5:f9:47:dd:1f:93:05: 04:4c:4b:8d:48:c6:d7:dc:bc:20:45:f2:21:bc:fa:4d:4d:7e: b9:84:a0:28:c8:06:d0:ff:51:89:43:de:23:01:67:e4:a6:bc: d2:e1:b3:f3:cb:7c:c2:53:20:0a:f5:6b:3d:49:78:25:98:0e: ad:e0:29:b8:56:98:d4:31:d2:43:8f:d5:ec:30:2d:91:dd:98: bc:d2:11:f5:96:b8:05:07:4f:e1:c5:85:28:d7:b8:92:e3:df: 21:8d:13:76:8a:eb:0b:38:e1:be:11:db:c1:c8:1e:7c:5a:47: c7:f5:65:da:44:8d:04:57:8e:79:7c:ca:ae:7a:d1:dd:b7:99: 2b:6b:8d:d4:3a:45:08:87:ad:0b:ae:80:8e:06:01:3a:e6:f0: b2:29:a0:20:84:6b:3c:d1:77:fe:d9:07:a0:d7:c8:9a:d1:9b: fe:19:d6:7e:95:c7:e8:2c:f9:fb:be:5c:a8:d7:33:6d:7b:e8: 48:6b:8d:ce:a7:e3:df:8b:c3:ed:41:6e:22:e2:f3:8f:3a:fd: 1b:80:98:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96jPDLsAD++oJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjI1N2I3NmYtYmIzNC00MDQ0LWFjM2UtY2YyYWY1ODg3NzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHei4IiATjzkulMwFTn4J7AJxv08TcGfz0XA 5fjbNq8hnYWDmdYMpGkjV48HrDtbRk3mORm2ITn5dlpG1npk1Tgr7ugQF+9z0MS4 bJfX4/a7k4ukXwH0HFvJZeC3xQoOSXou8EDuzSy7ALEUxK9NcsurNimnIbE7u0oO fp/EedleyxgE0MbQFjDg64LegSb/UyZOESYuhtQwrcYwzKr9M1Kez6AhTxuF4DVa q5AmnkqNJzZI3XIAETNXsGoePGbt1g+j8YWwTzZZDFysfjnuF9Px//ItKU9kaFtF AhExrNQcMwEGoP28pVq+RBNsnycjgxAjLS9BvnsytKtL2TkwtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWhrVChXeQCzQhXvze0PnjydOnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNjAwNGFkOTgtNmY4Yi0z MmRhLWE1OTUtOTE0MDIwYTc4NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrfRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU+eiEM1Udu2b9c3OCxAeaYErygq0gqaCI6cH9y+4rBr1nwWQ/S25IZ PiQL5d3etflH3R+TBQRMS41IxtfcvCBF8iG8+k1NfrmEoCjIBtD/UYlD3iMBZ+Sm vNLhs/PLfMJTIAr1az1JeCWYDq3gKbhWmNQx0kOP1ewwLZHdmLzSEfWWuAUHT+HF hSjXuJLj3yGNE3aK6ws44b4R28HIHnxaR8f1ZdpEjQRXjnl8yq560d23mStrjdQ6 RQiHrQuugI4GATrm8LIpoCCEazzRd/7ZB6DXyJrRm/4Z1n6Vx+gs+fu+XKjXM217 6Ehrjc6n49+Lw+1BbiLi8486/RuAmE8= -----END CERTIFICATE-----Generated at Sat Oct 10 19:33:38 2026 by rpki-client