$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/af8532ed-33ba-3108-8007-0477140d70e6.roa File: af8532ed-33ba-3108-8007-0477140d70e6.roa (raw, json) Hash identifier: 8JSfnso5lhFjFi0qxa1zAiEGPcoUPUwbgzJ1xVDV3n0= Subject key identifier: E7:97:35:54:09:3D:1D:A5:7F:65:01:A7:11:7C:D0:CE:5F:DB:FA:33 Certificate issuer: /CN=9f4a0908-708d-490b-9f22-60855d3d69b3 Certificate serial: 010D0C9F4328584EA7913EFE513E7FD5ADC56F80 Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/af8532ed-33ba-3108-8007-0477140d70e6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 167.234.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:3e:fe:51:3e:7f:d5:ad:c5:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=03b0f9e7-2084-41bc-9008-c38c7bb1eca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:aa:52:8e:0e:f3:ec:ed:a0:18:cd:a6:41: d2:b7:b8:f9:fd:27:89:74:ee:f3:eb:43:e4:a1:e7: 0b:bf:de:29:c5:a7:d3:30:b8:98:f3:90:c8:8d:07: 72:ae:60:33:d3:59:4d:84:29:91:aa:5e:8d:fb:4e: 00:0d:f1:7d:fa:0c:95:fb:97:37:63:7e:f6:53:25: 43:9b:ab:dd:47:ef:4d:60:ad:31:d5:e9:cc:62:85: 2b:f6:cc:8f:73:44:1f:68:a4:83:3d:55:c7:9e:ef: 8c:46:60:cf:48:df:2e:ca:10:f8:00:47:52:93:d3: 45:aa:3f:6e:19:33:bd:e9:af:41:16:83:81:5d:00: 21:30:5f:7c:c4:fd:e7:97:09:2f:c1:57:fd:0f:80: 8c:d4:8d:0d:f8:a5:ec:c8:0d:cf:66:3a:60:cd:5a: 04:ee:8d:1b:1a:49:f2:0e:51:04:74:b0:41:de:40: f3:ef:c2:03:84:0b:60:3b:4a:91:13:a4:2d:ae:3b: b7:30:f8:2b:54:bb:e7:4f:d4:f1:f9:e1:98:7c:30: f0:06:e8:d9:97:f2:45:71:c4:49:a3:47:41:44:a7: 78:5c:cf:b4:1d:a8:92:5a:f5:21:8b:26:8c:84:89: 35:45:42:b1:c6:c8:84:db:43:72:01:13:90:fc:92: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:97:35:54:09:3D:1D:A5:7F:65:01:A7:11:7C:D0:CE:5F:DB:FA:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/af8532ed-33ba-3108-8007-0477140d70e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl X509v3 Authority Key Identifier: keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer sbgp-ipAddrBlock: critical IPv4: 167.234.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f1:c4:4f:6d:36:ef:f6:86:8d:95:08:be:32:e1:68:9a:4c: 08:cd:6a:3a:cb:c3:1f:32:43:26:38:1b:68:fc:0d:e0:27:73: fc:6c:a8:2b:7d:52:e1:9e:42:2f:ff:7f:9d:bc:f0:cf:71:97: 71:22:8b:8a:47:08:91:b3:b0:f2:02:9f:34:b5:a1:f9:4c:30: 2f:c2:b7:26:e8:12:6f:03:f5:c4:f1:bd:77:54:77:50:d9:cf: 21:8c:98:fa:48:cb:0c:c7:8f:ce:73:5d:6b:1a:ff:8a:85:1c: df:72:70:cf:80:36:27:01:c8:9a:ff:5e:83:ec:31:b0:3b:07: 0d:28:22:4e:ec:c2:d8:fa:e3:24:7f:bf:46:3d:5c:9f:f1:50: 71:fb:df:44:ca:0a:20:9d:19:6a:a5:0d:5d:d7:91:44:57:45: a6:85:95:75:e5:82:40:ca:3e:c6:c7:81:84:b7:c3:35:87:b9: 67:03:98:c4:e6:46:c5:58:3b:3d:69:ca:fe:18:5e:f2:b2:da: 38:bf:54:ec:f5:e2:f8:58:76:d9:47:83:92:93:e8:0b:50:2b: 7b:12:12:cb:42:d4:32:42:16:d3:6f:a3:a7:72:cc:f3:b8:08: 26:62:94:f7:51:b8:b4:0e:e0:91:dc:ad:36:08:ca:f4:f6:d8: 38:75:10:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkT7+UT5/1a3Fb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY0YTA5MDgtNzA4ZC00OTBiLTlmMjItNjA4NTVkM2Q2 OWIzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDNiMGY5ZTctMjA4NC00MWJjLTkwMDgtYzM4YzdiYjFlY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1GqUo4O8+ztoBjNpkHSt7j5/SeJdO7z60Pk oecLv94pxafTMLiY85DIjQdyrmAz01lNhCmRql6N+04ADfF9+gyV+5c3Y372UyVD m6vdR+9NYK0x1enMYoUr9syPc0QfaKSDPVXHnu+MRmDPSN8uyhD4AEdSk9NFqj9u GTO96a9BFoOBXQAhMF98xP3nlwkvwVf9D4CM1I0N+KXsyA3PZjpgzVoE7o0bGkny DlEEdLBB3kDz78IDhAtgO0qRE6Qtrju3MPgrVLvnT9Tx+eGYfDDwBujZl/JFccRJ o0dBRKd4XM+0HaiSWvUhiyaMhIk1RUKxxsiE20NyAROQ/JIElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeXNVQJPR2lf2UBpxF80M5f2/ozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZjRh MDkwOC03MDhkLTQ5MGItOWYyMi02MDg1NWQzZDY5YjMvYWY4NTMyZWQtMzNiYS0z MTA4LTgwMDctMDQ3NzE0MGQ3MGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWY0YTA5MDgtNzA4ZC00OTBiLTlm MjItNjA4NTVkM2Q2OWIzLzlmNGEwOTA4LTcwOGQtNDkwYi05ZjIyLTYwODU1ZDNk NjliMy5jcmwwHwYDVR0jBBgwFoAUS6GvAvZX8ayMKkFOL4WEcFDagaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZjRhMDkwOC03MDhkLTQ5MGItOWYyMi02MDg1 NWQzZDY5YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp+pCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbxxE9tNu/2ho2VCL4y4WiaTAjNajrLwx8yQyY4G2j8DeAnc/xsqCt9 UuGeQi//f5288M9xl3Eii4pHCJGzsPICnzS1oflMMC/CtyboEm8D9cTxvXdUd1DZ zyGMmPpIywzHj85zXWsa/4qFHN9ycM+ANicByJr/XoPsMbA7Bw0oIk7swtj64yR/ v0Y9XJ/xUHH730TKCiCdGWqlDV3XkURXRaaFlXXlgkDKPsbHgYS3wzWHuWcDmMTm RsVYOz1pyv4YXvKy2ji/VOz14vhYdtlHg5KT6AtQK3sSEstC1DJCFtNvo6dyzPO4 CCZilPdRuLQO4JHcrTYIyvT22Dh1EHc= -----END CERTIFICATE-----Generated at Wed Jul 29 09:44:44 2026 by rpki-client