$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa File: a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa (raw, json) Hash identifier: uCz01Cr4aVEFKeLvyzN3AjW3dBF3NuHtlo6UQvKEMIk= Subject key identifier: 65:D2:8D:DE:D9:70:70:6E:06:86:14:6A:E6:32:4D:28:62:A5:D2:90 Certificate issuer: /CN=af3da563-8689-4ebd-a553-31a2f310113a Certificate serial: 010D0C9F4328584F5E62E204DAE32490742B6480 Authority key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 399688 IP address blocks: 108.174.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e2:04:da:e3:24:90:74:2b:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3da563-8689-4ebd-a553-31a2f310113a Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=028ee547-304b-444c-9bd0-105f76b28328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:7e:f5:ba:98:22:d3:29:5c:c2:53:37:fa: b6:20:a3:b5:1c:80:41:27:45:6f:23:c7:c9:4d:84: 53:3e:97:fd:c3:9c:55:82:48:af:b7:bb:c2:1d:9f: 4b:04:83:f2:74:0b:fe:74:c8:d5:b8:cb:91:60:2f: 26:ff:26:5d:2d:d7:09:32:d5:f1:8f:90:31:78:2c: fe:69:6d:74:b5:0b:4e:0d:63:7c:5e:00:6c:bc:72: dd:52:64:ec:63:c0:b8:6b:69:0a:c1:45:3a:32:3b: a5:fa:4e:39:d7:34:90:3d:59:d2:ad:1c:f3:7a:6a: 1f:43:67:37:52:36:3d:71:4b:cf:b7:eb:bd:78:c9: a3:20:ca:3d:0f:73:aa:30:aa:4b:72:7c:21:ef:24: 64:6d:e7:bb:27:b7:17:23:f4:83:02:7e:c6:4e:d7: 63:6a:db:9a:37:1d:f2:9d:b3:b6:01:dc:9b:9e:e8: 21:fe:84:5e:51:0f:32:b4:e3:43:9d:86:43:8b:26: 5e:ee:ea:71:ca:ad:83:f6:ee:fc:41:e1:7c:71:3e: 27:40:9a:36:d8:ac:82:82:d0:a9:d7:65:7b:29:86: 0b:5d:f7:e7:63:7f:66:34:d9:a3:39:70:38:b3:70: bf:f8:98:05:00:cd:28:df:81:10:56:97:20:c7:c1: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D2:8D:DE:D9:70:70:6E:06:86:14:6A:E6:32:4D:28:62:A5:D2:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl X509v3 Authority Key Identifier: keyid:A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer sbgp-ipAddrBlock: critical IPv4: 108.174.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d1:68:29:83:29:79:a7:20:65:f1:b2:89:73:48:e9:81:08: 0e:04:7a:25:9e:e5:98:a8:00:4b:31:44:ca:ae:d1:2b:6e:d6: 21:c6:b1:3b:d4:c3:f5:cb:e1:72:89:63:9e:e8:ca:a9:4f:55: fa:8c:12:39:90:e5:6b:3f:43:da:75:85:61:cb:34:6f:af:9e: 2f:22:a0:64:1c:51:53:1c:41:4a:20:ed:6b:78:d7:4c:02:a6: 34:3b:11:87:15:44:8d:5d:43:a3:ea:83:24:1e:0e:ae:b6:88: f5:fd:59:00:b7:9b:c5:a1:e1:40:36:dc:2e:b1:14:6c:f5:f3: f6:c7:1e:4a:8a:ae:61:9b:6e:f1:f5:5b:f2:7d:2c:dd:95:b4: d8:b9:cc:43:ed:e2:66:4f:b3:bd:e9:c4:c3:55:fb:44:0b:ed: 46:30:2c:ad:80:55:56:80:45:6f:b9:85:85:01:71:81:eb:cf: 63:6c:89:33:9a:63:8f:1f:b7:40:c9:46:75:3a:a2:54:b8:3c: 7b:97:d6:94:5c:14:7a:d1:49:ed:57:72:e0:3a:00:95:f9:b3: ae:67:27:1b:24:f9:b5:ee:54:3e:c3:43:64:46:e0:c4:c2:a8: f5:05:35:c7:5d:c6:c7:b9:93:72:a7:f1:ad:52:64:09:55:61: a5:cc:12:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuIE2uMkkHQrZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYzZGE1NjMtODY4OS00ZWJkLWE1NTMtMzFhMmYzMTAx MTNhMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MDI4ZWU1NDctMzA0Yi00NDRjLTliZDAtMTA1Zjc2YjI4MzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4J+9bqYItMpXMJTN/q2IKO1HIBBJ0VvI8fJ TYRTPpf9w5xVgkivt7vCHZ9LBIPydAv+dMjVuMuRYC8m/yZdLdcJMtXxj5AxeCz+ aW10tQtODWN8XgBsvHLdUmTsY8C4a2kKwUU6Mjul+k451zSQPVnSrRzzemofQ2c3 UjY9cUvPt+u9eMmjIMo9D3OqMKpLcnwh7yRkbee7J7cXI/SDAn7GTtdjatuaNx3y nbO2Adybnugh/oReUQ8ytONDnYZDiyZe7upxyq2D9u78QeF8cT4nQJo22KyCgtCp 12V7KYYLXffnY39mNNmjOXA4s3C/+JgFAM0o34EQVpcgx8F3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXSjd7ZcHBuBoYUauYyTShipdKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNk YTU2My04Njg5LTRlYmQtYTU1My0zMWEyZjMxMDExM2EvYTZjMmNlMDAtNjJhMy0z YTY1LThlYTYtZmM3MTRlNzZiZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYzZGE1NjMtODY4OS00ZWJkLWE1 NTMtMzFhMmYzMTAxMTNhL2FmM2RhNTYzLTg2ODktNGViZC1hNTUzLTMxYTJmMzEw MTEzYS5jcmwwHwYDVR0jBBgwFoAUpq/bvLa9B8T8UIC72m3cN+BpkuAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNkYTU2My04Njg5LTRlYmQtYTU1My0zMWEy ZjMxMDExM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDRaCmDKXmnIGXxsolzSOmBCA4EeiWe5ZioAEsxRMqu0Stu1iHGsTvU w/XL4XKJY57oyqlPVfqMEjmQ5Ws/Q9p1hWHLNG+vni8ioGQcUVMcQUog7Wt410wC pjQ7EYcVRI1dQ6PqgyQeDq62iPX9WQC3m8Wh4UA23C6xFGz18/bHHkqKrmGbbvH1 W/J9LN2VtNi5zEPt4mZPs73pxMNV+0QL7UYwLK2AVVaARW+5hYUBcYHrz2NsiTOa Y48ft0DJRnU6olS4PHuX1pRcFHrRSe1XcuA6AJX5s65nJxsk+bXuVD7DQ2RG4MTC qPUFNcddxse5k3Kn8a1SZAlVYaXMEns= -----END CERTIFICATE-----Generated at Mon Oct 5 07:25:54 2026 by rpki-client