$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/0b76bcd1-87c9-3e4f-8d62-960cf44707bc.roa File: 0b76bcd1-87c9-3e4f-8d62-960cf44707bc.roa (raw, json) Hash identifier: kY7PHbedRp2RrGRJgsiueAPp0K9inQitcz/CKtaK4gI= Subject key identifier: 27:4D:32:49:B0:94:C7:45:6C:CB:2B:A3:2F:5D:F8:D9:A7:8E:63:AD Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584AFC1BEEC58A4E09C97CE989E0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/0b76bcd1-87c9-3e4f-8d62-960cf44707bc.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14500 IP address blocks: 173.244.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ee:c5:8a:4e:09:c9:7c:e9:89:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=96ca9698-144e-4c7d-b7d9-876fb9db60fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:05:6d:c0:cc:f9:26:66:87:a0:3f:e3:78: 8f:3b:8e:99:a4:83:99:83:d9:7d:91:30:d6:fc:3d: bf:9c:89:f3:8a:b5:af:c4:c1:20:21:f8:e5:72:b3: ce:88:71:b8:d1:1d:1c:b1:f5:e0:64:07:9a:71:6a: f9:80:27:58:b8:5f:32:f9:ce:e3:2a:fc:f8:42:b5: 35:d4:b1:9b:56:18:ce:c1:01:d4:2f:16:5d:5f:ed: 7b:a2:79:d4:92:18:fd:b9:67:87:ab:af:d6:1a:9d: 84:df:9f:7b:59:4a:1c:a9:40:2d:73:4e:7e:d4:56: b7:d0:6b:ab:58:80:a4:1c:a7:a1:bb:9c:bf:36:d4: 9f:8c:5a:17:1e:0b:8a:cd:46:64:30:31:51:37:27: 0c:9c:27:ff:cf:68:31:0c:bf:a4:28:9b:16:27:28: 7b:fd:34:3d:42:1c:58:bb:d0:73:5f:f6:7f:9f:d1: c1:45:95:fb:5a:be:77:94:f0:fc:41:bc:db:ea:0e: 38:7f:fb:b5:8e:4d:73:b5:f6:ed:39:ca:b4:39:a8: 8e:fa:08:e8:80:94:cd:69:fb:e7:28:97:41:f3:d5: 28:df:58:10:00:c1:7a:7b:8c:e6:ff:2f:d8:7d:44: 0f:d9:70:4e:b6:53:f6:81:ae:33:9b:73:3b:23:02: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4D:32:49:B0:94:C7:45:6C:CB:2B:A3:2F:5D:F8:D9:A7:8E:63:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/0b76bcd1-87c9-3e4f-8d62-960cf44707bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e6:49:24:bf:2b:3e:af:10:7e:4b:93:46:68:c7:80:ed:bd: ac:4b:2d:75:22:b6:fb:cd:6d:6d:d8:c9:78:06:a6:35:ef:37: 13:d5:c4:cd:83:c3:bd:b2:e7:ca:d9:ea:75:dc:2d:f0:79:e0: b3:fb:22:c5:f8:d4:b8:03:ff:af:97:e7:e3:dc:d5:67:6b:ef: 1e:31:00:01:38:9d:5c:ab:4a:f1:2b:34:00:3b:03:37:f4:09: 29:49:c9:9b:23:9b:d0:dd:ca:94:87:28:02:5b:75:59:a0:c5: 0b:cc:b7:90:d5:da:ab:04:7c:3f:70:87:53:7c:ea:2f:96:e9: d2:8e:1d:fe:c6:e0:d4:d1:e5:c9:db:17:60:1b:1a:bb:5d:e3: 52:e2:f5:1f:1a:c0:bf:37:46:3c:22:2a:cd:bb:4c:89:33:1e: 8f:b7:5d:e8:77:30:75:be:61:be:5f:8a:8f:27:13:e1:2e:b8: 43:3b:0f:e0:bc:fd:ac:bd:15:40:88:52:64:bd:57:3e:2c:c0: 1e:2c:70:17:08:a2:1e:7c:9b:41:81:b6:41:94:f7:4e:80:ad: 3e:08:59:ed:4c:af:cf:4f:d3:81:b7:f9:32:62:82:a6:28:5d: a0:56:43:90:1b:19:cc:35:45:52:65:78:96:89:7c:9b:47:db: e9:e3:58:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+7Fik4JyXzpieAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OTZjYTk2OTgtMTQ0ZS00YzdkLWI3ZDktODc2ZmI5ZGI2MGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNAFbcDM+SZmh6A/43iPO46ZpIOZg9l9kTDW /D2/nInzirWvxMEgIfjlcrPOiHG40R0csfXgZAeacWr5gCdYuF8y+c7jKvz4QrU1 1LGbVhjOwQHULxZdX+17onnUkhj9uWeHq6/WGp2E3597WUocqUAtc05+1Fa30Gur WICkHKehu5y/NtSfjFoXHguKzUZkMDFRNycMnCf/z2gxDL+kKJsWJyh7/TQ9QhxY u9BzX/Z/n9HBRZX7Wr53lPD8Qbzb6g44f/u1jk1ztfbtOcq0OaiO+gjogJTNafvn KJdB89Uo31gQAMF6e4zm/y/YfUQP2XBOtlP2ga4zm3M7IwKeMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdNMkmwlMdFbMsroy9d+NmnjmOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMGI3NmJjZDEtODdjOS0z ZTRmLThkNjItOTYwY2Y0NDcwN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjmSSS/Kz6vEH5Lk0Zox4DtvaxLLXUitvvNbW3YyXgGpjXvNxPVxM2D w72y58rZ6nXcLfB54LP7IsX41LgD/6+X5+Pc1Wdr7x4xAAE4nVyrSvErNAA7Azf0 CSlJyZsjm9DdypSHKAJbdVmgxQvMt5DV2qsEfD9wh1N86i+W6dKOHf7G4NTR5cnb F2AbGrtd41Li9R8awL83RjwiKs27TIkzHo+3Xeh3MHW+Yb5fio8nE+EuuEM7D+C8 /ay9FUCIUmS9Vz4swB4scBcIoh58m0GBtkGU906ArT4IWe1Mr89P04G3+TJigqYo XaBWQ5AbGcw1RVJleJaJfJtH2+njWIQ= -----END CERTIFICATE-----Generated at Wed Nov 5 19:18:45 2025 by rpki-client