$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/fa314c8f-36bb-307a-a125-27ed88cc0172.roa File: fa314c8f-36bb-307a-a125-27ed88cc0172.roa (raw, json) Hash identifier: cxO5fVPAvg+VcrB8HWZRn1n3ZP+OQaSxDDSXwYu/I2U= Subject key identifier: B2:68:AD:DF:78:52:3F:8F:3F:99:B2:80:30:DA:95:8E:4E:94:0A:CE Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584F35949A3534C21A85358356B4 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/fa314c8f-36bb-307a-a125-27ed88cc0172.roa Signing time: Thu 17 Sep 2026 22:12:42 +0000 ROA not before: Thu 17 Sep 2026 22:12:42 +0000 ROA not after: Wed 16 Dec 2026 23:12:42 +0000 asID: 32526 IP address blocks: 204.128.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:94:9a:35:34:c2:1a:85:35:83:56:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Sep 17 22:12:42 2026 GMT Not After : Dec 16 23:12:42 2026 GMT Subject: CN=14d1dadc-cac6-40c6-abfc-4185877fd531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:db:6a:c9:0b:d1:a6:4e:cf:71:da:24:22: 2d:04:fa:6c:e7:ed:1f:5c:3d:c5:c4:3a:a0:98:4e: 4a:f4:17:7b:68:83:20:18:8a:5e:ce:d2:d8:65:fb: 9c:bb:ce:d8:6e:60:42:b4:d7:26:60:23:5e:2e:f5: 46:06:ba:2f:a2:31:1c:f6:b0:cd:d0:a9:84:1a:0d: 52:ff:c1:ea:89:bf:a1:8d:09:31:b2:05:d4:c0:d3: f4:ed:7c:eb:33:33:ac:ee:05:e5:15:98:0b:23:63: 52:cb:7b:66:af:25:fd:09:5f:7a:25:9d:f6:7b:17: 20:22:e4:f0:e5:a4:5c:4b:66:5c:24:7b:88:75:ed: 4d:be:7e:94:d7:d4:fa:a7:ab:17:c0:10:38:d8:d1: 7b:21:74:59:35:e8:76:06:c2:d3:3a:2f:36:bb:7f: 3d:7f:99:ef:47:b5:a6:74:4a:fa:e4:c5:13:ba:92: e0:25:4c:22:b7:05:7a:f5:4c:97:f5:f1:9a:70:29: 77:06:58:d3:14:2b:9a:f9:66:2b:f6:f9:d9:af:ea: 38:a5:4a:c5:58:5c:c0:0d:e0:88:5b:f4:bc:55:cc: 76:8e:a8:36:e6:a4:0e:3a:3a:9b:51:51:be:73:bf: fc:06:e2:97:de:fc:8d:c7:f5:69:f8:0f:d7:de:e0: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:68:AD:DF:78:52:3F:8F:3F:99:B2:80:30:DA:95:8E:4E:94:0A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/fa314c8f-36bb-307a-a125-27ed88cc0172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: 204.128.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f3:60:97:65:50:ae:bf:db:2e:70:74:6d:6c:15:49:09:ff: 43:ab:68:3a:eb:8d:96:25:21:10:43:71:6b:04:29:e8:95:e2: b7:a3:61:66:72:35:4a:9a:42:f8:77:a0:b0:4c:57:5f:c9:15: 31:70:f0:9d:0a:ff:37:55:22:2a:81:cd:1d:8a:8b:20:1e:c9: 86:bb:ac:fa:27:93:d9:24:be:3d:3d:1c:5d:29:b4:10:f9:27: 23:68:1c:4b:5f:cb:46:d2:3e:83:3f:df:51:80:39:cf:c6:79: 6c:c1:c2:98:e7:7c:6c:6b:16:31:66:25:3f:45:2e:06:68:b3: 5c:cb:3f:4a:27:60:ed:c8:e8:dc:50:2b:2d:63:7e:30:3f:ec: b8:a8:35:49:8a:0a:ac:e3:b2:8f:3b:99:96:e9:f5:cc:33:d9: d8:0b:f8:51:5e:1a:ca:7d:72:9f:72:9d:b9:ec:f5:ef:33:24: b8:39:c4:9d:66:b0:d2:9b:3d:5f:b1:b0:4a:e8:16:46:46:24: 8c:9b:e4:e4:80:3b:c2:ee:1c:0a:8e:c9:e0:cc:bd:33:9b:f4: ba:ea:57:98:66:35:a6:a7:6e:7d:e5:20:af:60:f2:77:bf:8d: 87:e4:0a:97:1f:4e:57:03:96:12:b0:49:cf:ca:20:38:e4:f2: 51:13:5d:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE81lJo1NMIahTWDVrQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI2MDkxNzIyMTI0MloXDTI2MTIxNjIzMTI0MlowLzEtMCsGA1UEAxMk MTRkMWRhZGMtY2FjNi00MGM2LWFiZmMtNDE4NTg3N2ZkNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2nbaskL0aZOz3HaJCItBPps5+0fXD3FxDqg mE5K9Bd7aIMgGIpeztLYZfucu87YbmBCtNcmYCNeLvVGBrovojEc9rDN0KmEGg1S /8Hqib+hjQkxsgXUwNP07XzrMzOs7gXlFZgLI2NSy3tmryX9CV96JZ32excgIuTw 5aRcS2ZcJHuIde1Nvn6U19T6p6sXwBA42NF7IXRZNeh2BsLTOi82u389f5nvR7Wm dEr65MUTupLgJUwitwV69UyX9fGacCl3BljTFCua+WYr9vnZr+o4pUrFWFzADeCI W/S8Vcx2jqg25qQOOjqbUVG+c7/8BuKX3vyNx/Vp+A/X3uBgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJord94Uj+PP5mygDDalY5OlArOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvZmEzMTRjOGYtMzZiYi0z MDdhLWExMjUtMjdlZDg4Y2MwMTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzICqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3zYJdlUK6/2y5wdG1sFUkJ/0OraDrrjZYlIRBDcWsEKeiV4rejYWZy NUqaQvh3oLBMV1/JFTFw8J0K/zdVIiqBzR2KiyAeyYa7rPonk9kkvj09HF0ptBD5 JyNoHEtfy0bSPoM/31GAOc/GeWzBwpjnfGxrFjFmJT9FLgZos1zLP0onYO3I6NxQ Ky1jfjA/7LioNUmKCqzjso87mZbp9cwz2dgL+FFeGsp9cp9ynbns9e8zJLg5xJ1m sNKbPV+xsEroFkZGJIyb5OSAO8LuHAqOyeDMvTOb9LrqV5hmNaanbn3lIK9g8ne/ jYfkCpcfTlcDlhKwSc/KIDjk8lETXXU= -----END CERTIFICATE-----Generated at Mon Sep 21 22:13:09 2026 by rpki-client