$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa File: 76f66401-c4fb-3b48-82d7-7873180a2d1b.roa (raw, json) Hash identifier: cNaqQbneiz19WnPf6zXUsK8X30ChR3oPq0o835I+PU0= Subject key identifier: 82:2D:38:9B:6E:9E:C9:99:0F:5B:CA:2D:E8:F0:40:93:D5:58:33:C7 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584D9E500351723985ECF4439800 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 14500 IP address blocks: 192.151.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:03:51:72:39:85:ec:f4:43:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=27151ebb-b9d5-4482-b1c5-b11e5606704d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:c2:31:9c:de:8d:fd:0a:a6:b7:ff:58:3a: cd:f4:ce:77:bd:d2:29:66:87:fd:a7:a2:80:e4:6e: 58:9c:cc:d6:48:65:ad:2c:4e:7e:01:af:44:2e:88: a5:02:8b:b5:13:0f:66:5b:67:29:f6:d0:6b:4c:51: c9:6e:e4:b9:a2:01:f8:ed:12:a0:3e:1f:a0:01:b6: e3:a5:6f:d1:39:0b:95:2e:86:e0:1d:38:c2:e6:26: 16:72:5b:87:34:0d:a2:e3:5f:a8:cf:be:19:b3:c1: 7c:0a:17:6b:77:47:cc:13:1a:d5:57:48:90:b0:a8: 59:49:ad:1a:eb:55:95:98:26:9c:24:00:49:3a:72: 31:42:e5:90:73:e3:00:e6:06:0d:79:c0:86:10:64: 6e:96:9e:62:a2:4e:15:1b:d9:6d:cb:55:52:19:44: fd:6d:77:76:f9:04:f4:b3:f4:8d:c1:43:4a:81:51: 4c:b6:cf:93:ef:40:a5:1d:b2:53:37:6f:b2:81:67: 3a:66:18:06:2a:03:17:60:50:ec:8a:9b:bb:fb:db: cd:48:39:43:d0:99:b6:d2:63:72:4f:28:3a:f9:55: 2c:2d:fe:b3:ae:4b:67:2b:bf:02:12:54:24:ad:4e: 9b:e7:0c:47:f5:f2:34:e8:9c:12:3b:35:3b:b4:9c: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2D:38:9B:6E:9E:C9:99:0F:5B:CA:2D:E8:F0:40:93:D5:58:33:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/76f66401-c4fb-3b48-82d7-7873180a2d1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 192.151.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:3f:ca:24:b9:03:86:ac:7b:00:48:6e:76:65:49:e8:47:c2: b6:82:91:a6:46:82:6f:5b:4b:87:6e:72:e0:bc:ea:ea:31:0f: 85:ad:9c:2a:cc:4e:89:da:dd:15:8f:da:3a:9a:6b:9d:1e:b5: 53:09:ad:14:ed:8f:65:c4:54:67:89:c2:01:f3:c9:02:2a:bc: 94:8a:c2:a5:2f:c6:e4:a4:36:e1:0f:ad:30:39:f4:73:4b:6f: 0c:0e:1f:53:4e:1c:48:c4:87:f6:92:42:2c:66:fa:ac:31:d1: 59:42:e6:5c:47:e0:0e:cb:ca:1d:b5:4a:ff:ab:14:d0:cb:8a: b2:ed:ac:72:a1:69:ac:5a:2c:c3:02:4b:ac:16:f4:93:57:cb: a9:38:35:00:12:69:68:89:2c:ff:12:d4:d7:dd:61:c3:87:3d: e5:e7:e0:a0:20:0c:ce:2e:ff:d7:6b:34:62:69:fd:76:20:a1: 48:70:63:f2:7a:d3:73:bd:d5:3b:e0:27:94:b2:95:81:41:76: 10:0d:4b:cb:b3:5c:f2:51:c9:5d:ec:af:d5:30:71:e1:8f:ce: 5e:35:52:23:5a:63:01:54:7f:a8:c5:51:ed:cf:e9:31:42:8c: db:54:4e:63:62:43:b3:f6:d3:15:be:da:69:6b:7a:19:4a:35: 5a:cd:e6:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUANRcjmF7PRDmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MjcxNTFlYmItYjlkNS00NDgyLWIxYzUtYjExZTU2MDY3MDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUvCMZzejf0Kprf/WDrN9M53vdIpZof9p6KA 5G5YnMzWSGWtLE5+Aa9ELoilAou1Ew9mW2cp9tBrTFHJbuS5ogH47RKgPh+gAbbj pW/ROQuVLobgHTjC5iYWcluHNA2i41+oz74Zs8F8Chdrd0fMExrVV0iQsKhZSa0a 61WVmCacJABJOnIxQuWQc+MA5gYNecCGEGRulp5iok4VG9lty1VSGUT9bXd2+QT0 s/SNwUNKgVFMts+T70ClHbJTN2+ygWc6ZhgGKgMXYFDsipu7+9vNSDlD0Jm20mNy Tyg6+VUsLf6zrktnK78CElQkrU6b5wxH9fI06JwSOzU7tJwrdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIItOJtunsmZD1vKLejwQJPVWDPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNzZmNjY0MDEtYzRmYi0z YjQ4LTgyZDctNzg3MzE4MGEyZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4/yiS5A4asewBIbnZlSehHwraCkaZGgm9bS4ducuC86uoxD4WtnCrM Tona3RWP2jqaa50etVMJrRTtj2XEVGeJwgHzyQIqvJSKwqUvxuSkNuEPrTA59HNL bwwOH1NOHEjEh/aSQixm+qwx0VlC5lxH4A7Lyh21Sv+rFNDLirLtrHKhaaxaLMMC S6wW9JNXy6k4NQASaWiJLP8S1NfdYcOHPeXn4KAgDM4u/9drNGJp/XYgoUhwY/J6 03O91TvgJ5SylYFBdhANS8uzXPJRyV3sr9UwceGPzl41UiNaYwFUf6jFUe3P6TFC jNtUTmNiQ7P20xW+2mlrehlKNVrN5gg= -----END CERTIFICATE-----Generated at Wed May 13 13:13:34 2026 by rpki-client