$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa File: 802e4f3e-477d-3343-b4df-4044a49cb54d.roa (raw, json) Hash identifier: ab3iMraCVqFoj9VEkoe5JhpFYWsQChJ5sxpulNc2Gcc= Subject key identifier: B7:D5:3B:A0:1A:98:B0:F9:D1:B9:C4:72:AE:1D:EF:A8:E1:98:2A:05 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584D9E5002B6656DDD315DC6C4C0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 14500 IP address blocks: 68.70.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:02:b6:65:6d:dd:31:5d:c6:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=88a08934-75a3-4c3b-8381-6662f55e803d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:cb:bf:b5:82:c3:94:b4:7a:7d:29:7f:01:33: 0e:37:85:21:41:e1:28:41:8a:c5:de:3e:69:cf:72: f4:a7:af:e1:e1:c9:cf:5c:a2:18:94:2d:f0:a2:c4: c4:9e:27:77:b9:4f:8b:fc:04:ab:9f:27:cc:36:2e: 71:4c:a6:a0:bd:be:92:ea:e4:bb:3b:aa:95:be:65: 9e:31:b6:44:09:92:19:62:2a:1f:59:1e:aa:7a:67: 81:27:70:15:cc:9b:8f:cd:70:f5:85:86:92:02:07: 63:0b:54:d7:d8:76:8e:62:12:fd:bc:3a:6d:15:0d: 74:cc:3f:9a:ce:ac:8d:4f:7a:8c:5d:72:8c:e8:af: d5:51:ff:b9:9f:e5:9e:7b:43:ae:c9:99:2e:59:a1: 48:29:a9:a1:e2:22:0c:3c:b9:6a:e9:94:fb:4e:b7: f3:5c:9b:43:b7:e7:76:c2:22:97:c2:d3:2d:0c:49: b5:92:15:9c:62:ba:52:63:87:41:da:0c:f2:dc:49: c1:75:b2:19:9d:6c:5a:7d:bf:b5:b5:31:86:c4:8b: ce:81:49:5e:cb:98:9e:31:ce:e8:fb:69:5f:2a:8f: 60:b7:3a:57:1f:e7:5f:50:d0:e0:c9:0c:35:cd:27: ae:cf:be:17:b7:26:44:d1:46:23:5a:f3:47:2b:c8: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D5:3B:A0:1A:98:B0:F9:D1:B9:C4:72:AE:1D:EF:A8:E1:98:2A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e3:e8:9d:4a:c6:52:ce:11:0f:15:b1:5e:fa:54:b3:d2:ea: 66:09:f9:99:22:26:22:66:0a:00:63:2a:8c:82:72:30:65:45: fe:3d:0e:5c:f4:29:da:0a:4a:04:ad:c9:ca:d1:d2:1e:dd:8a: 62:a7:51:fb:17:7f:90:e7:a7:94:f1:1d:42:62:a7:ac:f4:06: 27:32:98:f7:7d:92:b8:14:61:55:ba:92:04:24:f1:e2:22:55: 03:33:13:37:bd:08:be:f8:d8:86:79:f7:3c:be:f5:37:fb:4c: 5e:04:6c:78:1a:a2:67:6c:03:6e:0d:6d:34:60:fe:da:eb:b3: 3d:1d:38:c5:ed:a1:92:75:91:de:e6:0c:72:17:a3:33:42:58: 0d:02:cc:8d:67:88:44:87:b5:69:bd:df:d6:9f:d4:20:55:5f: d2:d0:4d:16:12:51:21:cf:2b:fe:52:a8:5c:77:e7:bb:d5:30: bd:9c:eb:14:b9:73:22:a0:e3:c5:fa:ae:bf:51:11:c1:47:35: 6e:c6:aa:75:76:23:98:d2:fb:e4:72:29:56:55:d0:b2:8a:9f: 15:fe:c2:29:fe:39:4e:be:25:01:7e:3f:27:cb:c7:45:c4:d0: 02:06:17:03:70:a7:84:f7:65:65:ef:aa:65:1c:48:c8:15:19: 32:01:a1:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAK2ZW3dMV3GxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ODhhMDg5MzQtNzVhMy00YzNiLTgzODEtNjY2MmY1NWU4MDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+su/tYLDlLR6fSl/ATMON4UhQeEoQYrF3j5p z3L0p6/h4cnPXKIYlC3wosTEnid3uU+L/ASrnyfMNi5xTKagvb6S6uS7O6qVvmWe MbZECZIZYiofWR6qemeBJ3AVzJuPzXD1hYaSAgdjC1TX2HaOYhL9vDptFQ10zD+a zqyNT3qMXXKM6K/VUf+5n+Wee0OuyZkuWaFIKamh4iIMPLlq6ZT7TrfzXJtDt+d2 wiKXwtMtDEm1khWcYrpSY4dB2gzy3EnBdbIZnWxafb+1tTGGxIvOgUley5ieMc7o +2lfKo9gtzpXH+dfUNDgyQw1zSeuz74XtyZE0UYjWvNHK8gnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfVO6AamLD50bnEcq4d76jhmCoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvODAyZTRmM2UtNDc3ZC0z MzQzLWI0ZGYtNDA0NGE0OWNiNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHj6J1KxlLOEQ8VsV76VLPS6mYJ+ZkiJiJmCgBjKoyCcjBlRf49Dlz0 KdoKSgStycrR0h7dimKnUfsXf5Dnp5TxHUJip6z0BicymPd9krgUYVW6kgQk8eIi VQMzEze9CL742IZ59zy+9Tf7TF4EbHgaomdsA24NbTRg/trrsz0dOMXtoZJ1kd7m DHIXozNCWA0CzI1niESHtWm939af1CBVX9LQTRYSUSHPK/5SqFx357vVML2c6xS5 cyKg48X6rr9REcFHNW7GqnV2I5jS++RyKVZV0LKKnxX+win+OU6+JQF+PyfLx0XE 0AIGFwNwp4T3ZWXvqmUcSMgVGTIBoaI= -----END CERTIFICATE-----Generated at Wed May 13 13:13:40 2026 by rpki-client