$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa File: 272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa (raw, json) Hash identifier: 9qaT59H8HJfK7dgFkf1UOp3/1NXH8kDw/WOE0shBHC4= Subject key identifier: DE:5F:D5:27:31:3C:01:7C:1D:F3:F3:E5:A2:07:2E:2B:00:53:AD:5F Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584CBDB1DE714308D32B6F54B600 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 14500 IP address blocks: 68.70.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:de:71:43:08:d3:2b:6f:54:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=1bbd95d9-f0d8-4d52-84d3-98eacab32353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:82:4d:4f:42:52:10:91:0b:6a:b2:eb:40:35: 86:16:7d:2f:22:b9:b0:63:45:6a:dc:97:f7:2b:65: ce:1f:01:f5:9b:79:71:45:21:49:4a:e9:b8:fe:ef: be:a0:b7:79:85:68:3e:e6:9e:f4:26:98:d1:9e:10: 2a:13:a0:12:2e:4f:7a:d9:a3:2e:40:80:3e:9d:4e: cb:d4:7b:0b:37:8a:ce:ec:c3:17:26:3d:25:0e:51: 78:ac:ed:14:f2:7a:bb:cb:42:6d:ee:6c:7c:09:99: 85:01:d5:b6:90:06:d9:80:87:b4:1f:18:d8:a6:bb: 6c:c3:2e:b0:c4:0e:f1:98:71:1a:c0:6e:cd:40:57: b5:b3:f7:27:af:f5:22:e9:07:76:1d:44:62:19:11: 71:1b:4b:4d:ca:45:7c:3c:1a:0e:bb:37:5a:48:e7: 78:eb:10:9e:bc:25:ba:b4:e3:2e:66:5f:6b:16:76: e9:cb:09:3c:b9:58:e9:2d:f0:72:29:3c:89:e0:ed: 35:97:87:5d:6f:dc:21:89:94:25:b5:44:ac:54:d5: 59:7e:41:14:ae:19:88:99:3b:a1:0f:bd:c4:b2:d4: 5c:1c:df:d4:ce:50:6a:d0:13:03:e2:8a:a4:6e:6a: ba:5f:af:c4:7e:23:79:78:12:75:fd:22:e6:87:48: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5F:D5:27:31:3C:01:7C:1D:F3:F3:E5:A2:07:2E:2B:00:53:AD:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3f:a3:53:06:8d:7a:7a:bd:b4:9a:8d:f3:9f:86:a2:3f:8a: 3d:d2:f0:27:32:1e:19:04:21:d7:c9:3f:58:0f:6c:a6:28:fd: 2f:d0:60:9d:76:5d:e6:cc:ad:c8:cc:c7:db:9c:ad:30:cf:13: 9f:2b:09:a0:31:43:1f:08:c9:73:a2:c2:b2:4f:a2:11:5f:39: 98:57:74:31:b4:83:5d:b2:cc:84:32:57:3f:45:47:1b:3e:5c: ac:ed:70:bc:1d:76:78:f6:7b:fe:07:75:93:78:a8:fd:f7:05: a8:88:18:49:b4:6b:f0:8e:c0:7b:52:61:7a:cd:3c:e3:4d:8e: 81:1b:33:b2:a7:a7:6d:e0:c2:2c:db:58:24:aa:27:9a:9e:0f: 46:da:75:6a:e7:f1:c2:8b:d6:fe:8d:87:49:57:2f:4a:f6:f0: 2b:cb:a1:ad:c1:c9:00:51:86:90:c0:60:bf:cd:78:da:be:10: d6:c6:82:07:89:3c:85:76:ab:36:4b:58:ce:af:8b:1f:79:12: 9d:54:cb:fb:96:71:8d:43:3c:ca:0e:b9:e3:73:e2:b4:27:b7: 22:f6:50:8a:9d:7e:96:02:35:56:cc:4f:36:d6:ee:66:d7:a0: 42:aa:4c:3e:c9:3c:31:31:ef:87:fb:f5:5b:71:b1:9d:a6:70: 5b:89:95:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sd5xQwjTK29UtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk MWJiZDk1ZDktZjBkOC00ZDUyLTg0ZDMtOThlYWNhYjMyMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4JNT0JSEJELarLrQDWGFn0vIrmwY0Vq3Jf3 K2XOHwH1m3lxRSFJSum4/u++oLd5hWg+5p70JpjRnhAqE6ASLk962aMuQIA+nU7L 1HsLN4rO7MMXJj0lDlF4rO0U8nq7y0Jt7mx8CZmFAdW2kAbZgIe0HxjYprtswy6w xA7xmHEawG7NQFe1s/cnr/Ui6Qd2HURiGRFxG0tNykV8PBoOuzdaSOd46xCevCW6 tOMuZl9rFnbpywk8uVjpLfByKTyJ4O01l4ddb9whiZQltUSsVNVZfkEUrhmImTuh D73EstRcHN/UzlBq0BMD4oqkbmq6X6/EfiN5eBJ1/SLmh0iWpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5f1ScxPAF8HfPz5aIHLisAU61fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjcyZTNkNzItZjQyYi0z OTRkLWEyYWMtNDhhYzNlMDUwYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw/o1MGjXp6vbSajfOfhqI/ij3S8CcyHhkEIdfJP1gPbKYo/S/QYJ12 XebMrcjMx9ucrTDPE58rCaAxQx8IyXOiwrJPohFfOZhXdDG0g12yzIQyVz9FRxs+ XKztcLwddnj2e/4HdZN4qP33BaiIGEm0a/COwHtSYXrNPONNjoEbM7Knp23gwizb WCSqJ5qeD0badWrn8cKL1v6Nh0lXL0r28CvLoa3ByQBRhpDAYL/NeNq+ENbGggeJ PIV2qzZLWM6vix95Ep1Uy/uWcY1DPMoOueNz4rQntyL2UIqdfpYCNVbMTzbW7mbX oEKqTD7JPDEx74f79VtxsZ2mcFuJlRQ= -----END CERTIFICATE-----Generated at Mon Mar 2 17:13:57 2026 by rpki-client