$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa File: 54986207-7a58-36f6-8e77-f8161fa1649c.roa (raw, json) Hash identifier: khycw2Y/c4AslIfDfcVlLkp+f6J5y1nG9VJo9URKj1s= Subject key identifier: 64:FA:9C:87:8D:18:7B:41:BD:D3:A4:C0:D2:91:92:46:B1:E5:29:F7 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584CBDB1DE8187A3A8A31C23A3C0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 14500 IP address blocks: 173.244.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:de:81:87:a3:a8:a3:1c:23:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=941d0724-54aa-4485-bd59-244726fff496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:72:9c:df:d3:14:72:e7:96:5d:08:e6:3a:46: d7:25:69:73:ef:01:f6:be:c8:f7:56:fd:bd:51:fd: 0f:fb:0d:9f:f8:96:a9:d1:70:04:02:60:cf:74:0b: dc:1d:3c:de:74:66:56:db:96:50:08:4b:25:95:ff: e3:b5:84:de:60:b1:31:4a:bd:bb:56:b5:33:d8:89: 9b:26:6f:05:17:a0:7e:0e:2b:c4:b7:4a:6f:38:56: 65:8d:f9:8e:cb:91:4c:ee:4d:48:16:02:46:9b:cc: 42:bc:97:9e:57:14:8b:16:13:8d:b8:b5:31:67:c0: 33:39:53:f9:43:27:7b:46:63:ba:59:dc:58:18:8e: 51:d2:8b:2a:ac:f2:41:2e:23:74:c8:92:85:29:07: 20:b5:61:49:46:f2:b1:7c:65:19:bd:47:67:c3:23: 27:37:3b:94:6a:c5:9a:10:d6:e1:3c:bc:e6:1f:dc: 87:d7:ab:56:96:22:38:14:7d:e6:f3:36:62:d0:b4: 79:a8:4b:a1:fa:5f:f2:fb:87:6c:2a:5e:16:98:0b: 3e:ee:19:f9:b2:e5:1f:e4:68:17:1a:aa:4f:49:08: 56:26:0b:fd:8a:55:5c:3b:64:69:96:89:5a:54:41: 20:c1:8f:74:de:29:f6:36:db:6e:6d:56:64:ad:11: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FA:9C:87:8D:18:7B:41:BD:D3:A4:C0:D2:91:92:46:B1:E5:29:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:40:e0:f7:df:6d:4f:9e:f6:28:18:6e:9c:0b:a1:b2:b3:6a: 3b:3d:3a:dd:c9:06:77:81:57:8f:53:27:0a:97:b9:bd:cb:30: 53:70:6a:61:9b:a3:fe:ec:a9:ce:f9:6f:51:0b:57:73:46:a4: a2:b8:de:9f:e0:4a:87:08:e7:bf:9d:80:e1:44:4e:af:8e:d1: 7d:80:68:da:06:6e:0d:5a:09:3a:99:9d:07:33:e6:71:2b:70: 37:cd:06:76:8f:ed:dd:8c:9e:f6:fd:41:44:20:37:a6:91:05: 54:a3:11:e8:d3:a0:ce:a1:64:d3:e6:e3:dc:cc:14:6a:ca:38: 4a:6f:44:a0:45:75:a9:94:c5:40:c4:98:53:46:43:a5:1b:5b: 72:d5:d4:fa:ff:cc:c4:3a:79:6a:b4:ed:9f:e3:71:df:85:a6: 07:ae:50:60:3c:55:3c:50:e9:28:fc:28:61:58:c6:0e:01:e6: 51:12:1b:3f:3f:51:d8:52:42:87:b6:b3:78:2c:5b:81:85:f9: d5:f9:65:fd:62:08:ed:ab:9f:c6:c4:98:b9:ab:28:9f:b4:29: 9e:1f:03:ed:de:40:87:69:1d:bb:e5:c9:d9:59:28:51:49:b1: d3:f6:06:ab:0a:3a:e9:c8:e6:96:0d:56:c9:f4:b1:63:0e:65: 82:82:0c:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sd6Bh6Oooxwjo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk OTQxZDA3MjQtNTRhYS00NDg1LWJkNTktMjQ0NzI2ZmZmNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnKc39MUcueWXQjmOkbXJWlz7wH2vsj3Vv29 Uf0P+w2f+Jap0XAEAmDPdAvcHTzedGZW25ZQCEsllf/jtYTeYLExSr27VrUz2Imb Jm8FF6B+DivEt0pvOFZljfmOy5FM7k1IFgJGm8xCvJeeVxSLFhONuLUxZ8AzOVP5 Qyd7RmO6WdxYGI5R0osqrPJBLiN0yJKFKQcgtWFJRvKxfGUZvUdnwyMnNzuUasWa ENbhPLzmH9yH16tWliI4FH3m8zZi0LR5qEuh+l/y+4dsKl4WmAs+7hn5suUf5GgX GqpPSQhWJgv9ilVcO2RplolaVEEgwY903in2NttubVZkrRHM/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT6nIeNGHtBvdOkwNKRkkax5Sn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNTQ5ODYyMDctN2E1OC0z NmY2LThlNzctZjgxNjFmYTE2NDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1A4PffbU+e9igYbpwLobKzajs9Ot3JBneBV49TJwqXub3LMFNwamGb o/7sqc75b1ELV3NGpKK43p/gSocI57+dgOFETq+O0X2AaNoGbg1aCTqZnQcz5nEr cDfNBnaP7d2Mnvb9QUQgN6aRBVSjEejToM6hZNPm49zMFGrKOEpvRKBFdamUxUDE mFNGQ6UbW3LV1Pr/zMQ6eWq07Z/jcd+FpgeuUGA8VTxQ6Sj8KGFYxg4B5lESGz8/ UdhSQoe2s3gsW4GF+dX5Zf1iCO2rn8bEmLmrKJ+0KZ4fA+3eQIdpHbvlydlZKFFJ sdP2BqsKOunI5pYNVsn0sWMOZYKCDHA= -----END CERTIFICATE-----Generated at Mon Mar 2 17:14:43 2026 by rpki-client