$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa File: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (raw, json) Hash identifier: 2lEXj+68fiHbQiylYpHIFIRwEutDsLxxK2D5UtBB8YA= Subject key identifier: 29:4C:57:9B:31:94:AC:25:76:60:B3:FC:FD:47:82:08:C4:D2:13:4E Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F4328584CEFF24A6ACA3979778829DFA0 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 32242 IP address blocks: 172.102.2.0/24 maxlen: 24 172.102.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:4a:6a:ca:39:79:77:88:29:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=62311839-fbff-4fa1-b3b0-ecc003c16fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:d8:70:15:d7:a7:17:42:c0:a2:8e:7f:5f: c4:13:dd:2a:87:a1:6f:ea:4a:f9:de:51:28:b5:70: 7b:6b:d8:7a:ca:47:18:1f:10:44:7c:90:d8:fe:15: 75:22:8d:f6:3e:43:69:86:cd:8f:5c:68:8c:b8:2f: 1b:bc:0a:ee:8a:5f:28:d5:2b:02:df:57:d7:5c:63: 90:5d:2d:38:00:1f:ec:0c:8d:d5:53:a0:b3:48:9c: c4:67:91:ed:e9:1c:ca:3e:90:2d:a7:a1:be:d9:d0: fb:c7:8e:04:1c:a2:5b:e1:d1:c2:74:f3:28:06:2b: 15:ac:3b:47:49:04:75:a4:e2:ab:aa:1b:e9:6b:ad: 62:c7:32:26:ff:b7:c5:06:76:e0:cb:3d:78:2b:a3: 0c:0a:cc:85:17:b7:1d:63:55:2b:40:1b:0e:1a:4c: 2d:20:05:af:58:6e:f7:4a:aa:d5:a7:c6:89:3d:85: 19:1b:0f:27:4c:a2:a2:5b:dc:60:cc:1b:08:50:f4: 5e:9a:b7:5e:41:2f:6e:56:97:3d:38:e0:d9:1e:34: 84:ae:bc:ec:a7:38:ff:dd:40:c7:6e:4d:3d:69:65: 46:40:40:cc:54:e2:63:ed:4b:af:ef:cd:91:c4:26: a9:cf:c7:67:df:fd:3f:c3:b6:f9:36:1d:ae:aa:8f: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4C:57:9B:31:94:AC:25:76:60:B3:FC:FD:47:82:08:C4:D2:13:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv4: 172.102.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:21:68:06:4f:dc:61:0a:cf:52:4b:6d:0f:b0:e4:a6:d2:11: c4:b6:a4:3a:a1:a5:df:3d:a2:ca:4d:90:34:82:a0:8c:38:45: f7:f0:dd:be:61:a4:ea:6d:86:4f:13:57:dd:08:c8:e5:d7:9e: c3:54:a8:e8:a5:93:f7:e5:ee:11:a3:5d:eb:cc:b3:4f:9d:cf: 03:99:73:22:8b:8a:82:d4:95:5e:36:2e:5e:33:89:5e:5c:9b: b2:c7:56:4e:b8:64:e1:a5:00:de:d5:8b:51:08:b0:34:f3:5f: f0:18:57:58:6e:fc:85:fa:d3:1b:65:6b:a6:39:cf:a7:8e:b6: 4d:ba:7c:cf:c5:25:6c:f9:17:07:d3:f4:29:a5:15:5a:b6:10: 7d:87:a6:90:7d:6b:3c:eb:3c:fd:a8:29:e2:4c:da:11:09:af: 0e:4f:1f:e5:97:95:6e:fc:00:ca:de:3b:71:52:5a:b4:96:f6: 96:90:a2:0e:95:2b:6f:01:e6:d7:9f:0a:3a:bf:92:f4:d5:18: 57:9a:0a:c3:72:ec:48:1d:fb:04:76:a0:0d:39:86:d2:19:dd: a3:9b:b2:6f:f6:33:b8:93:21:29:37:37:3b:e8:20:93:43:e0: e9:98:37:11:ea:12:2e:95:98:08:5e:1e:3d:03:fe:08:a3:e2: 47:97:13:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8kpqyjl5d4gp36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk NjIzMTE4MzktZmJmZi00ZmExLWIzYjAtZWNjMDAzYzE2ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoHYcBXXpxdCwKKOf1/EE90qh6Fv6kr53lEo tXB7a9h6ykcYHxBEfJDY/hV1Io32PkNphs2PXGiMuC8bvAruil8o1SsC31fXXGOQ XS04AB/sDI3VU6CzSJzEZ5Ht6RzKPpAtp6G+2dD7x44EHKJb4dHCdPMoBisVrDtH SQR1pOKrqhvpa61ixzIm/7fFBnbgyz14K6MMCsyFF7cdY1UrQBsOGkwtIAWvWG73 SqrVp8aJPYUZGw8nTKKiW9xgzBsIUPRemrdeQS9uVpc9OODZHjSErrzspzj/3UDH bk09aWVGQEDMVOJj7Uuv782RxCapz8dn3/0/w7b5Nh2uqo+qJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClMV5sxlKwldmCz/P1HggjE0hNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvNzBlYjJkMDktYmY1MS0z NzkzLThhZjMtODMxMjE3YjhhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMhaAZP3GEKz1JLbQ+w5KbSEcS2pDqhpd89ospNkDSCoIw4Rffw3b5h pOpthk8TV90IyOXXnsNUqOilk/fl7hGjXevMs0+dzwOZcyKLioLUlV42Ll4ziV5c m7LHVk64ZOGlAN7Vi1EIsDTzX/AYV1hu/IX60xtla6Y5z6eOtk26fM/FJWz5FwfT 9CmlFVq2EH2HppB9azzrPP2oKeJM2hEJrw5PH+WXlW78AMreO3FSWrSW9paQog6V K28B5tefCjq/kvTVGFeaCsNy7Egd+wR2oA05htIZ3aObsm/2M7iTISk3NzvoIJND 4OmYNxHqEi6VmAheHj0D/gij4keXEz4= -----END CERTIFICATE-----Generated at Mon Mar 2 00:52:05 2026 by rpki-client