$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/afa2e9cc-336c-3a15-8cf9-bd47a57eec7b.roa File: afa2e9cc-336c-3a15-8cf9-bd47a57eec7b.roa (raw, json) Hash identifier: 7Y4TsYbZ4TcdRBK3zHIyxb22qjIL+Xjevf0VhhtDU2w= Subject key identifier: 37:26:20:37:0B:4C:B9:8D:04:EB:C5:08:89:07:D4:39:A8:6E:97:DB Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CAE5E5DC02C8B90261965AFC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/afa2e9cc-336c-3a15-8cf9-bd47a57eec7b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 834 IP address blocks: 69.17.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:5d:c0:2c:8b:90:26:19:65:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=14e5564d-de73-4cee-ab8e-862b49969bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:49:af:ea:1e:f8:79:45:1a:bb:50:19:fd: db:2c:97:c1:d6:ad:4e:ef:1c:54:cb:dc:95:42:66: c9:c7:e0:5c:73:45:54:cc:e8:95:ed:ca:2d:5d:82: 04:75:a2:c9:df:cb:01:d7:1c:b6:4e:80:8b:66:49: fb:1e:60:bc:12:7d:1d:71:20:39:c9:01:cf:31:40: 0c:66:12:0b:88:2f:2a:c4:ff:de:34:89:89:42:aa: 4b:23:02:81:4a:b4:af:6c:bf:ae:26:7c:72:da:76: 83:60:0a:23:ca:d3:09:83:dc:96:f4:71:c9:9d:f3: 2e:e7:a0:bf:61:f8:03:cb:ee:45:c3:d1:40:b8:19: 8f:e7:de:71:19:85:d3:60:09:f8:e2:9c:8d:83:b7: fb:0a:51:f7:37:d7:ae:5c:15:14:1d:e0:a6:16:94: 0c:1b:ac:51:bc:10:0c:b4:d6:91:57:33:f4:4f:eb: 6b:f5:50:89:95:13:62:7b:42:ee:76:34:09:98:8b: 9b:75:5d:ae:e7:15:bb:3c:73:4d:28:c7:04:d2:8a: 4c:de:87:c0:72:34:5b:6a:e0:b6:9f:f7:33:1b:b3: d1:e8:f5:02:0a:72:45:b7:08:dd:28:ca:70:d1:5f: ab:4f:5f:2c:97:05:b1:a2:8c:a7:d4:1b:e8:39:c1: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:26:20:37:0B:4C:B9:8D:04:EB:C5:08:89:07:D4:39:A8:6E:97:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/afa2e9cc-336c-3a15-8cf9-bd47a57eec7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.17.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:65:c0:91:e7:b5:d9:8d:49:30:05:47:8e:4b:d0:37:51:41: 8a:2d:11:79:7c:81:46:72:bd:44:33:f1:7a:fc:a8:8f:1a:00: 52:ab:1e:60:d5:26:d5:2d:28:4a:1b:2b:ea:00:df:68:5a:cf: 30:ae:78:ea:0e:c6:69:0c:6d:94:08:32:2c:f7:39:9b:c1:b3: c8:81:3b:9a:8f:65:ab:13:25:7b:b8:e1:7c:bd:8f:7f:19:1b: b2:26:aa:5f:ba:d3:a2:67:17:9a:fb:8f:df:e2:a3:aa:50:f1: 62:27:2e:f8:54:c0:52:25:02:8e:b2:a0:46:f5:52:a6:b3:bc: 17:5d:85:9f:6d:6a:ae:bc:d4:d3:35:8c:e0:2a:0b:82:6c:d9: c0:20:1c:e9:f3:96:e9:ab:53:28:3b:65:c5:91:30:af:e6:ea: e5:7d:47:25:aa:ca:92:c8:81:7c:36:bd:bc:e3:d8:9a:97:38: be:c6:d7:37:7f:ad:b7:6a:38:5a:4c:27:08:35:3c:76:f2:1f: 62:d3:8d:28:13:a4:5f:20:d3:5c:bb:d8:d0:11:98:3c:61:a4: ed:80:7f:9f:7a:e3:9f:9c:42:bb:2e:de:a0:28:28:f8:db:b9: 26:2b:4a:c1:5f:78:45:22:c5:2d:c0:4f:e9:15:df:99:cf:93: a6:04:d2:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXl3ALIuQJhllr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTRlNTU2NGQtZGU3My00Y2VlLWFiOGUtODYyYjQ5OTY5YmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ZJr+oe+HlFGrtQGf3bLJfB1q1O7xxUy9yV QmbJx+Bcc0VUzOiV7cotXYIEdaLJ38sB1xy2ToCLZkn7HmC8En0dcSA5yQHPMUAM ZhILiC8qxP/eNImJQqpLIwKBSrSvbL+uJnxy2naDYAojytMJg9yW9HHJnfMu56C/ YfgDy+5Fw9FAuBmP595xGYXTYAn44pyNg7f7ClH3N9euXBUUHeCmFpQMG6xRvBAM tNaRVzP0T+tr9VCJlRNie0LudjQJmIubdV2u5xW7PHNNKMcE0opM3ofAcjRbauC2 n/czG7PR6PUCCnJFtwjdKMpw0V+rT18slwWxooyn1BvoOcGlMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcmIDcLTLmNBOvFCIkH1DmobpfbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWZhMmU5Y2MtMzM2Yy0z YTE1LThjZjktYmQ0N2E1N2VlYzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRREwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVlwJHntdmNSTAFR45L0DdRQYotEXl8gUZyvUQz8Xr8qI8aAFKrHmDV JtUtKEobK+oA32hazzCueOoOxmkMbZQIMiz3OZvBs8iBO5qPZasTJXu44Xy9j38Z G7Imql+606JnF5r7j9/io6pQ8WInLvhUwFIlAo6yoEb1UqazvBddhZ9taq681NM1 jOAqC4Js2cAgHOnzlumrUyg7ZcWRMK/m6uV9RyWqypLIgXw2vbzj2JqXOL7G1zd/ rbdqOFpMJwg1PHbyH2LTjSgTpF8g01y72NARmDxhpO2Af59645+cQrsu3qAoKPjb uSYrSsFfeEUixS3AT+kV35nPk6YE0uM= -----END CERTIFICATE-----Generated at Sun Mar 1 20:58:37 2026 by rpki-client