$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa File: af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa (raw, json) Hash identifier: Jqg82MiXXhcCycw4lsUMkydA5tkCtSDfVcrnwrmRQqE= Subject key identifier: 2B:AB:6B:3E:C1:BA:FE:01:AD:23:72:DB:01:CA:50:AC:10:86:CC:E3 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584F6F22E26CB96124D3760C3F80 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 54032 IP address blocks: 72.233.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e2:6c:b9:61:24:d3:76:0c:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=77b787df-3343-4757-bbf0-ff20c56e41b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:fc:bc:4f:15:4c:0c:b1:71:dc:92:a2:db: a1:b5:5c:0b:d6:48:36:84:1d:fe:bc:80:c3:2f:39: e4:98:7a:34:34:f7:73:30:3a:84:c9:1a:0d:5b:d3: 5f:06:83:e1:0a:b5:6f:20:82:18:af:68:dd:90:3f: 88:ca:92:06:97:f9:fc:71:39:c5:71:9e:b4:8b:ef: 75:23:6d:04:00:9a:9f:8f:aa:f0:a6:c8:fa:a5:d1: 81:8c:84:66:43:7f:57:f8:d7:79:a8:4b:ab:26:2f: 8d:05:a2:ac:61:df:7a:36:65:61:fd:df:7b:82:84: 38:1a:14:f5:b2:80:d9:ee:e6:8b:11:b5:e0:e8:68: 03:f9:9f:86:7e:be:30:37:53:12:9b:22:44:41:64: e4:5f:f2:15:b5:01:79:18:35:b0:6e:8a:52:aa:e1: eb:d9:c8:72:11:04:47:50:55:79:5b:d3:7e:38:8b: ae:7c:3f:81:9d:26:84:11:19:f5:2e:90:38:95:9d: 10:f8:df:84:e6:ca:82:27:af:cb:95:5b:13:9c:b9: 10:57:e7:55:d8:1d:15:83:6e:38:8e:81:c4:f7:9d: 9e:3e:95:c8:a2:b9:8b:29:91:4d:cc:a1:2d:a7:9e: 5f:6d:83:e8:b6:1c:95:b4:f9:17:bf:3b:30:7c:13: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AB:6B:3E:C1:BA:FE:01:AD:23:72:DB:01:CA:50:AC:10:86:CC:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:9b:85:50:24:8b:db:21:fc:b7:49:a7:e4:47:76:3a:45:ca: 0a:6d:00:a4:67:51:27:9f:20:fb:77:9f:09:52:43:bb:8f:1c: d3:1c:25:0e:b4:77:3c:7e:f6:95:9f:78:65:65:7e:6e:51:ae: 11:19:79:c7:e3:5f:84:75:c5:e1:d3:04:61:e9:26:1b:a1:89: 5d:5a:2e:56:cd:f5:f0:ba:f7:4e:94:d3:38:79:2d:37:9f:02: 88:9b:3f:e3:6a:27:ba:76:7f:38:d6:9f:78:35:3d:99:84:16: 6b:fd:60:59:8d:e4:35:b6:fa:bc:8e:6b:3b:06:c0:cb:c4:f0: d1:bd:81:24:2c:64:94:ff:a0:44:e6:43:4b:a1:61:79:5b:7d: 1d:69:da:57:37:4f:4a:30:90:ba:3e:3a:ba:d4:03:91:d8:d5: 0e:ef:59:af:47:28:7e:72:6d:76:34:03:db:1c:85:f9:9e:15: 4b:3b:b4:6c:ed:e6:19:fe:61:83:19:a7:3a:8c:76:00:59:00: a3:ab:76:b1:82:1d:70:10:04:e1:6c:6a:51:fa:de:f4:56:3b: eb:b3:07:0e:75:00:c8:2d:6f:5c:bd:ab:a1:0a:0f:85:d3:2d: c0:66:34:f8:df:59:a9:fe:e1:e6:16:66:d0:4d:65:56:1f:0e: ec:c0:7b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIuJsuWEk03YMP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NzdiNzg3ZGYtMzM0My00NzU3LWJiZjAtZmYyMGM1NmU0MWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKf8vE8VTAyxcdySotuhtVwL1kg2hB3+vIDD LznkmHo0NPdzMDqEyRoNW9NfBoPhCrVvIIIYr2jdkD+IypIGl/n8cTnFcZ60i+91 I20EAJqfj6rwpsj6pdGBjIRmQ39X+Nd5qEurJi+NBaKsYd96NmVh/d97goQ4GhT1 soDZ7uaLEbXg6GgD+Z+Gfr4wN1MSmyJEQWTkX/IVtQF5GDWwbopSquHr2chyEQRH UFV5W9N+OIuufD+BnSaEERn1LpA4lZ0Q+N+E5sqCJ6/LlVsTnLkQV+dV2B0Vg244 joHE952ePpXIormLKZFNzKEtp55fbYPothyVtPkXvzswfBOq+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuraz7Buv4BrSNy2wHKUKwQhszjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvYWY0YTcwZWQtNDk3OC0z N2FjLTliYzYtYTNjN2JlYTI0MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSOmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6bhVAki9sh/LdJp+RHdjpFygptAKRnUSefIPt3nwlSQ7uPHNMcJQ60 dzx+9pWfeGVlfm5RrhEZecfjX4R1xeHTBGHpJhuhiV1aLlbN9fC6906U0zh5LTef AoibP+NqJ7p2fzjWn3g1PZmEFmv9YFmN5DW2+ryOazsGwMvE8NG9gSQsZJT/oETm Q0uhYXlbfR1p2lc3T0owkLo+OrrUA5HY1Q7vWa9HKH5ybXY0A9schfmeFUs7tGzt 5hn+YYMZpzqMdgBZAKOrdrGCHXAQBOFsalH63vRWO+uzBw51AMgtb1y9q6EKD4XT LcBmNPjfWan+4eYWZtBNZVYfDuzAe/s= -----END CERTIFICATE-----Generated at Thu Nov 5 18:48:05 2026 by rpki-client