$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa File: 2928b3e5-3758-38df-b7af-e739bfc0498e.roa (raw, json) Hash identifier: avUzoqp06q36DJ7GcEOZjJyJo0kiRgO+xgzj1RmUYj0= Subject key identifier: 35:5C:58:39:95:F3:4C:71:53:4A:AD:22:0E:CE:F4:4E:D2:FC:C2:E3 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584CBDB1DE4E92534C3A4CC41440 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 14500 IP address blocks: 68.70.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:de:4e:92:53:4c:3a:4c:c4:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=b428a78a-230f-4f54-a620-b10176a88fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:7d:33:b1:1e:98:d8:f8:4a:5c:32:22:23: bc:8b:61:3e:b7:17:79:12:c6:82:4d:d3:b5:88:33: b3:46:cf:67:91:c6:db:d8:be:bf:09:a3:42:95:3b: d9:7f:a9:09:77:4a:ff:f4:33:d3:ca:ff:42:fb:a7: 41:18:81:08:5b:ab:cd:b0:57:f0:cd:50:ad:c8:66: f9:cc:70:20:e4:81:cb:b3:60:3c:78:12:5b:12:36: 79:f4:23:90:86:0e:5f:28:ce:be:80:b4:10:dc:2e: e6:17:6f:bd:89:d8:51:0b:50:32:00:b6:a8:39:f1: 84:97:83:fb:a4:3c:db:4a:cf:3e:b0:8b:bd:b3:ac: 6d:8d:6a:21:4d:25:0e:b6:cb:a0:6f:fc:7a:9c:8f: d8:89:9e:a2:5e:6b:72:5c:98:52:82:fa:67:46:e9: b7:65:1d:ed:c9:a1:ee:14:6e:2d:96:3a:41:8e:6b: 2d:22:c4:0f:ed:e4:3f:7e:bc:48:d4:9a:b2:5a:2e: 39:76:21:a5:1b:86:f0:f3:1c:05:dc:11:05:37:77: 8b:94:f5:3c:56:8c:a4:15:6e:2e:18:ed:b4:1d:de: 9d:83:9d:ff:67:e9:d6:fd:58:2c:2b:35:06:f0:8e: fa:00:b9:37:bf:c2:5a:38:34:87:b5:46:68:dd:d2: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5C:58:39:95:F3:4C:71:53:4A:AD:22:0E:CE:F4:4E:D2:FC:C2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/2928b3e5-3758-38df-b7af-e739bfc0498e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:aa:ae:76:36:8e:8b:a7:36:32:37:47:f4:9e:71:5e:e7:54: 84:ce:27:f0:2b:cb:91:c5:8a:da:5d:f9:ed:20:21:b2:95:b3: d0:ac:f3:69:4f:45:26:6f:55:0e:af:01:3a:ab:b4:6a:08:b7: 47:ee:bd:11:ce:42:6c:2b:4a:95:b9:7f:cf:7c:88:83:37:61: 50:23:39:37:74:16:1a:fa:d2:48:2b:1b:9c:cb:4b:f4:6c:85: 8f:e5:af:50:d5:c0:69:f5:e9:39:14:65:7c:7f:21:a5:bc:e1: 11:43:d1:0f:9f:4c:0b:42:25:6f:b8:58:95:56:61:b4:08:5b: 14:da:66:9f:c1:08:7c:ec:8b:80:84:da:3e:ae:c8:c1:6f:e7: fc:e3:96:64:99:39:be:15:e7:7b:1a:e9:72:b1:ab:99:27:60: d4:7d:a1:ac:db:61:ba:a5:4b:fc:b5:22:21:32:f2:50:bd:ae: db:60:f6:b0:26:27:eb:b6:0d:e4:3c:6d:76:39:68:8d:4d:48: dd:c0:0b:04:7c:91:27:ad:3e:d2:05:58:d2:eb:9b:bb:89:f1: e7:fd:bd:e0:99:1e:b6:30:08:5c:62:72:24:e3:b1:9d:55:ee: 0d:f5:10:41:ba:5d:56:ab:b6:42:97:69:98:f9:29:6c:1f:33: 5f:c1:7c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sd5OklNMOkzEFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk YjQyOGE3OGEtMjMwZi00ZjU0LWE2MjAtYjEwMTc2YTg4ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom19M7EemNj4SlwyIiO8i2E+txd5EsaCTdO1 iDOzRs9nkcbb2L6/CaNClTvZf6kJd0r/9DPTyv9C+6dBGIEIW6vNsFfwzVCtyGb5 zHAg5IHLs2A8eBJbEjZ59COQhg5fKM6+gLQQ3C7mF2+9idhRC1AyALaoOfGEl4P7 pDzbSs8+sIu9s6xtjWohTSUOtsugb/x6nI/YiZ6iXmtyXJhSgvpnRum3ZR3tyaHu FG4tljpBjmstIsQP7eQ/frxI1JqyWi45diGlG4bw8xwF3BEFN3eLlPU8VoykFW4u GO20Hd6dg53/Z+nW/VgsKzUG8I76ALk3v8JaODSHtUZo3dJMhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVcWDmV80xxU0qtIg7O9E7S/MLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjkyOGIzZTUtMzc1OC0z OGRmLWI3YWYtZTczOWJmYzA0OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOqrnY2jounNjI3R/SecV7nVITOJ/Ary5HFitpd+e0gIbKVs9Cs82lP RSZvVQ6vATqrtGoIt0fuvRHOQmwrSpW5f898iIM3YVAjOTd0Fhr60kgrG5zLS/Rs hY/lr1DVwGn16TkUZXx/IaW84RFD0Q+fTAtCJW+4WJVWYbQIWxTaZp/BCHzsi4CE 2j6uyMFv5/zjlmSZOb4V53sa6XKxq5knYNR9oazbYbqlS/y1IiEy8lC9rttg9rAm J+u2DeQ8bXY5aI1NSN3ACwR8kSetPtIFWNLrm7uJ8ef9veCZHrYwCFxiciTjsZ1V 7g31EEG6XVartkKXaZj5KWwfM1/BfOQ= -----END CERTIFICATE-----Generated at Mon Mar 2 17:05:37 2026 by rpki-client