$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa File: 6004ad98-6f8b-32da-a595-914020a7855c.roa (raw, json) Hash identifier: tL6X6x2iFqFxTP6YJtgnOmuBcOSYWntZcwoxhjeyXNM= Subject key identifier: D5:EA:FE:29:89:99:7E:FE:4A:02:17:A6:96:8A:11:77:AD:B7:36:82 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584E7E94E2DE2F378D1FCC6A89A0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 14500 IP address blocks: 173.244.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e2:de:2f:37:8d:1f:cc:6a:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=a76bdf11-5d0f-49f2-8cbe-0d96f8267152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:e1:fe:6c:8a:f0:4c:b9:96:55:33:54:96: 85:79:22:96:43:ce:c8:aa:67:ef:7a:a9:da:2e:ef: 65:e1:f7:25:c0:cb:a8:25:b6:c8:41:9b:6c:0f:4c: af:ca:e1:21:ec:61:b6:44:42:24:c5:51:cf:c8:bf: 81:7d:6b:9b:6d:a8:6f:58:08:2c:79:61:a6:11:45: bf:66:1a:51:b1:cc:72:95:dd:80:be:32:1d:6c:b7: 2e:b9:c9:83:0f:9c:9f:54:8e:c2:a0:e7:4a:af:76: 20:6a:84:96:59:51:50:45:da:e5:8e:b3:25:0c:80: 5e:62:05:52:62:c5:c0:e5:3a:50:b7:7b:cc:d8:ee: 4f:60:0a:be:a7:58:7a:33:b0:de:96:e6:af:c0:1a: f7:9f:44:cb:bf:e6:11:7e:0b:1a:68:b3:2e:17:9e: a7:32:b0:41:9b:5c:21:31:b2:e0:36:df:c2:80:5e: 46:ff:86:8f:c0:18:f6:03:48:b9:8d:7b:1d:83:c9: c7:e1:b4:16:9e:43:99:f7:16:6a:4f:91:6a:3e:86: c2:b4:ed:fb:97:53:e2:c2:54:ac:68:af:e9:85:e8: ca:32:30:0d:23:1c:5c:83:59:69:10:4c:45:6a:8d: bb:9f:6f:0a:4b:eb:3f:96:c8:02:04:ee:3c:3c:02: bf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EA:FE:29:89:99:7E:FE:4A:02:17:A6:96:8A:11:77:AD:B7:36:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:77:b1:70:c2:9d:3c:b2:8b:42:f6:a1:e0:eb:a2:73:d4:34: 22:a8:57:1c:27:b6:f4:d1:3b:96:25:ac:a1:44:72:ff:c2:02: 0c:f1:35:d5:80:ea:e0:1d:d8:a4:5e:d1:b9:a9:a0:6b:d3:e8: 17:12:89:9d:e0:52:20:40:48:5a:09:13:62:bb:5b:27:06:80: 4c:28:02:cd:16:0f:b8:86:a1:3d:c0:fc:40:87:4b:e4:2b:92: 65:bf:e6:65:5c:9f:25:44:9b:52:ed:d7:67:2c:27:04:90:b7: 80:36:be:5a:df:f9:5b:04:ff:12:b6:de:ff:e1:d3:2d:45:36: f6:8c:d2:9e:32:c9:0c:51:97:74:fd:40:02:d5:e7:97:2c:c0: 44:9b:ed:66:92:21:b7:84:96:5c:50:9f:dd:b6:7e:62:8a:20: b9:6e:44:22:82:df:d6:57:06:1c:3b:52:c5:ff:cd:bc:5e:76: ba:48:66:ab:c4:fc:10:a2:a3:3b:f2:5c:79:b9:19:d2:f5:74: 25:d2:d0:ca:0a:fe:ba:20:f7:1d:0d:85:81:67:9d:f1:68:46: 8f:b0:ec:85:b1:f2:73:b3:80:35:f3:f4:92:ac:c2:e1:ae:b9: 5a:bd:2e:49:f6:b2:d9:a4:87:12:93:56:c7:57:12:61:09:f0: 22:81:0f:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOLeLzeNH8xqiaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YTc2YmRmMTEtNWQwZi00OWYyLThjYmUtMGQ5NmY4MjY3MTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPDh/myK8Ey5llUzVJaFeSKWQ87Iqmfveqna Lu9l4fclwMuoJbbIQZtsD0yvyuEh7GG2REIkxVHPyL+BfWubbahvWAgseWGmEUW/ ZhpRscxyld2AvjIdbLcuucmDD5yfVI7CoOdKr3YgaoSWWVFQRdrljrMlDIBeYgVS YsXA5TpQt3vM2O5PYAq+p1h6M7DeluavwBr3n0TLv+YRfgsaaLMuF56nMrBBm1wh MbLgNt/CgF5G/4aPwBj2A0i5jXsdg8nH4bQWnkOZ9xZqT5FqPobCtO37l1PiwlSs aK/phejKMjANIxxcg1lpEExFao27n28KS+s/lsgCBO48PAK/XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXq/imJmX7+SgIXppaKEXettzaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNjAwNGFkOTgtNmY4Yi0z MmRhLWE1OTUtOTE0MDIwYTc4NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrfRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx3sXDCnTyyi0L2oeDronPUNCKoVxwntvTRO5YlrKFEcv/CAgzxNdWA 6uAd2KRe0bmpoGvT6BcSiZ3gUiBASFoJE2K7WycGgEwoAs0WD7iGoT3A/ECHS+Qr kmW/5mVcnyVEm1Lt12csJwSQt4A2vlrf+VsE/xK23v/h0y1FNvaM0p4yyQxRl3T9 QALV55cswESb7WaSIbeEllxQn922fmKKILluRCKC39ZXBhw7UsX/zbxedrpIZqvE /BCiozvyXHm5GdL1dCXS0MoK/rog9x0NhYFnnfFoRo+w7IWx8nOzgDXz9JKswuGu uVq9Lkn2stmkhxKTVsdXEmEJ8CKBD/U= -----END CERTIFICATE-----Generated at Fri Jul 24 21:29:44 2026 by rpki-client