$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa File: 802e4f3e-477d-3343-b4df-4044a49cb54d.roa (raw, json) Hash identifier: 9lcpgkF4rJD7uRJRaIttXWnBxQsSXX6lwzQ6GCoWcxk= Subject key identifier: FD:1B:5F:05:28:A4:A2:11:B8:A2:FA:BD:16:0A:47:8E:FE:4F:56:A6 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584E7E94E27ECAFAA46E7A0A8880 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 14500 IP address blocks: 68.70.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:e2:7e:ca:fa:a4:6e:7a:0a:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=9267dacc-cd37-4a74-8573-313fba2ee3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:4d:8e:b3:5e:e7:81:a7:58:ff:c3:22:8d: d7:af:58:4c:3c:13:cb:36:50:5c:54:7f:18:36:ed: 29:a6:0c:0f:56:1e:83:45:a9:e3:39:92:bb:55:c3: 91:29:42:17:08:bd:f6:54:43:79:31:c5:5f:36:e2: b1:fa:42:44:0e:b3:ad:70:81:38:ae:af:86:fc:9e: 26:2e:7d:d6:40:6a:ca:20:08:ac:b2:1a:8e:84:a9: d9:29:3d:45:c9:4a:d9:f5:4b:b7:8b:72:b2:87:07: f4:95:ac:2a:49:1c:8c:cb:46:3c:26:4d:ce:e1:31: 94:f6:d9:83:26:aa:e5:c0:e1:5a:c3:30:5e:26:e3: 30:eb:c2:f1:ce:2a:77:dd:ef:96:8f:4d:d6:47:cd: 00:e6:d3:1c:73:ba:8d:de:b4:28:66:82:9d:c9:80: 60:00:24:65:dc:4f:ca:a4:38:68:c0:07:04:a9:7d: 1d:dd:52:3e:21:9c:90:20:e0:79:65:0f:ea:5a:11: 4f:ff:a2:b0:52:75:90:c8:b1:bc:f3:f2:70:50:77: 27:33:47:54:30:04:8d:01:f4:69:0d:a2:b0:ad:1a: 26:56:53:6f:4b:c4:6b:b5:f7:54:b7:81:f9:44:ed: 39:bc:39:64:c9:62:2d:b2:7e:23:4f:0e:69:73:c9: b0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1B:5F:05:28:A4:A2:11:B8:A2:FA:BD:16:0A:47:8E:FE:4F:56:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5f:b0:e8:3f:d3:b7:ae:82:3e:ac:00:83:c7:3b:bd:a7:77: 9e:9e:75:5c:c6:01:d6:00:00:ee:4c:ac:c1:02:79:aa:ce:ec: 2d:ce:98:b9:63:13:b7:e2:8d:21:2e:b3:35:97:bd:a0:94:e5: 55:cd:e6:2c:cd:8c:a8:5a:cd:3c:6b:be:61:a3:cb:2c:61:65: ae:38:0d:3d:ac:d6:32:b9:4c:a1:f9:26:02:6a:c2:35:ae:21: 14:05:38:4f:3c:99:0b:a4:bb:80:93:ff:ba:20:11:0c:2e:b6: 13:b9:fb:fb:84:17:0c:f7:7e:8c:84:5c:1a:4f:8d:b0:b9:0e: 2d:37:79:1c:2f:5b:4c:5e:6b:01:28:14:01:79:81:97:95:8d: 2c:35:c0:44:ea:5a:aa:1f:8e:9b:76:67:a6:ce:76:04:19:e4: b6:44:9a:df:84:19:e6:6a:c3:8e:2d:60:a2:9f:3d:30:6d:7c: 34:28:57:5c:e8:ce:12:25:9a:8c:f5:1e:e2:29:b2:b6:9e:40: 20:98:70:83:83:04:0c:86:1e:01:ab:94:f8:39:63:1d:ef:1d: 94:55:f6:f5:d4:cd:d7:b9:2d:18:b2:e3:0c:52:9a:3c:d1:93: e0:07:1d:02:f1:70:91:18:c6:93:c7:8a:c8:1f:72:36:2e:b6: 94:2b:57:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOJ+yvqkbnoKiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OTI2N2RhY2MtY2QzNy00YTc0LTg1NzMtMzEzZmJhMmVlM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+VNjrNe54GnWP/DIo3Xr1hMPBPLNlBcVH8Y Nu0ppgwPVh6DRanjOZK7VcORKUIXCL32VEN5McVfNuKx+kJEDrOtcIE4rq+G/J4m Ln3WQGrKIAisshqOhKnZKT1FyUrZ9Uu3i3Kyhwf0lawqSRyMy0Y8Jk3O4TGU9tmD JqrlwOFawzBeJuMw68Lxzip33e+Wj03WR80A5tMcc7qN3rQoZoKdyYBgACRl3E/K pDhowAcEqX0d3VI+IZyQIOB5ZQ/qWhFP/6KwUnWQyLG88/JwUHcnM0dUMASNAfRp DaKwrRomVlNvS8RrtfdUt4H5RO05vDlkyWItsn4jTw5pc8mwXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0bXwUopKIRuKL6vRYKR47+T1amMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvODAyZTRmM2UtNDc3ZC0z MzQzLWI0ZGYtNDA0NGE0OWNiNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRfsOg/07eugj6sAIPHO72nd56edVzGAdYAAO5MrMECearO7C3OmLlj E7fijSEuszWXvaCU5VXN5izNjKhazTxrvmGjyyxhZa44DT2s1jK5TKH5JgJqwjWu IRQFOE88mQuku4CT/7ogEQwuthO5+/uEFwz3foyEXBpPjbC5Di03eRwvW0xeawEo FAF5gZeVjSw1wETqWqofjpt2Z6bOdgQZ5LZEmt+EGeZqw44tYKKfPTBtfDQoV1zo zhIlmoz1HuIpsraeQCCYcIODBAyGHgGrlPg5Yx3vHZRV9vXUzde5LRiy4wxSmjzR k+AHHQLxcJEYxpPHisgfcjYutpQrVxY= -----END CERTIFICATE-----Generated at Fri Jul 24 02:10:17 2026 by rpki-client