$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa File: 6004ad98-6f8b-32da-a595-914020a7855c.roa (raw, json) Hash identifier: nk1sPQ3YxnD4IU7+gxrHSEVc8n3juI7ZkU3kT51iIwc= Subject key identifier: 25:72:7D:AB:0C:3E:54:B9:AF:0C:A2:47:4A:1E:EE:81:AF:05:CD:02 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584CBDB1DECA27D7DD70BA0F2760 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 14500 IP address blocks: 173.244.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:de:ca:27:d7:dd:70:ba:0f:27:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=4f271e8d-3abc-4435-b273-e25ca0a897ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8f:8e:38:27:3a:20:81:54:92:a4:a1:9f:18: 80:28:7b:b7:e6:d3:e6:4f:9d:ab:06:e7:45:f6:9d: 3b:9a:99:d9:0c:fd:6f:94:a2:8a:44:e4:0a:b2:25: 9d:9c:a3:75:fa:23:70:f6:be:f3:bf:dd:25:b4:5b: 5f:ae:6a:8c:20:e1:7e:37:35:7c:b5:2a:28:07:c6: ab:21:69:5e:06:fc:9d:72:bf:dc:d9:da:d4:17:45: b3:4e:ab:38:18:bd:de:17:27:a9:3d:88:2e:ce:68: 75:15:d9:9c:95:d1:cf:9d:cd:16:bf:aa:37:1c:0e: 0b:f2:9e:40:c3:03:5b:c2:03:b3:11:07:0a:5e:85: 48:40:96:36:8b:86:a1:e5:e2:9c:3d:ea:59:b1:be: 3f:9d:65:69:37:0d:38:f1:46:e3:8f:0a:4f:9c:18: 8b:87:60:23:c7:ab:ac:28:ff:d9:ef:db:fb:31:b7: f5:0f:53:42:b5:20:73:03:5f:6e:88:30:05:80:7e: 61:8b:ba:a8:6a:b1:aa:f1:32:3b:0c:a1:53:3c:8f: fa:7b:62:6b:3e:d2:45:03:ab:99:fc:66:45:af:ab: 74:46:0f:d1:a4:41:ce:4d:3b:03:d6:32:17:c2:b2: 38:e5:a8:4e:3f:e2:c5:18:11:8d:2b:8e:d2:29:22: 95:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:72:7D:AB:0C:3E:54:B9:AF:0C:A2:47:4A:1E:EE:81:AF:05:CD:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:50:3a:26:51:64:20:c9:d9:4e:2c:61:b4:b3:6b:c0:bd:81: 07:8b:e2:72:05:62:1f:08:43:ff:81:a6:a6:c1:0d:5a:72:c2: b3:96:4b:32:80:5d:93:50:fb:62:dc:c4:03:74:76:c5:b8:f0: 9a:8f:08:f6:98:79:10:89:87:b3:7f:4f:35:c0:dd:e4:3a:3d: de:3a:64:1e:04:25:85:20:c1:13:af:1d:7c:ba:26:20:4f:e1: 41:89:ae:0c:b8:02:31:5d:c2:98:81:f6:99:16:f2:e4:76:ac: 40:5d:60:3e:fc:53:36:fb:9d:93:ed:1b:e1:a9:ce:dd:f8:1b: a0:29:e4:98:6e:68:53:41:07:b4:b5:3e:9d:a8:f1:d9:b8:8b: 3a:a2:f5:3b:46:f4:84:1b:14:df:70:ac:8d:3d:3e:53:48:98: be:95:2f:9a:5c:1b:89:21:cc:13:eb:ca:99:25:ca:d6:c3:a5: 6e:bf:8a:5a:88:bc:da:9f:7b:8b:4b:13:05:d7:33:ef:ba:e5: e8:e6:1f:b9:87:23:2a:c4:3b:34:87:61:a6:e0:28:6f:71:63: 8a:e7:b9:7f:2a:b4:50:1c:c2:c7:e9:63:00:bd:a0:9a:15:50: 27:51:6a:1e:40:18:a9:0d:25:d0:9a:fd:ff:54:b7:86:0d:58: 6f:37:64:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sd7KJ9fdcLoPJ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk NGYyNzFlOGQtM2FiYy00NDM1LWIyNzMtZTI1Y2EwYTg5N2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y+OOCc6IIFUkqShnxiAKHu35tPmT52rBudF 9p07mpnZDP1vlKKKROQKsiWdnKN1+iNw9r7zv90ltFtfrmqMIOF+NzV8tSooB8ar IWleBvydcr/c2drUF0WzTqs4GL3eFyepPYguzmh1FdmcldHPnc0Wv6o3HA4L8p5A wwNbwgOzEQcKXoVIQJY2i4ah5eKcPepZsb4/nWVpNw048UbjjwpPnBiLh2Ajx6us KP/Z79v7Mbf1D1NCtSBzA19uiDAFgH5hi7qoarGq8TI7DKFTPI/6e2JrPtJFA6uZ /GZFr6t0Rg/RpEHOTTsD1jIXwrI45ahOP+LFGBGNK47SKSKVaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVyfasMPlS5rwyiR0oe7oGvBc0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNjAwNGFkOTgtNmY4Yi0z MmRhLWE1OTUtOTE0MDIwYTc4NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrfRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVQOiZRZCDJ2U4sYbSza8C9gQeL4nIFYh8IQ/+BpqbBDVpywrOWSzKA XZNQ+2LcxAN0dsW48JqPCPaYeRCJh7N/TzXA3eQ6Pd46ZB4EJYUgwROvHXy6JiBP 4UGJrgy4AjFdwpiB9pkW8uR2rEBdYD78Uzb7nZPtG+Gpzt34G6Ap5JhuaFNBB7S1 Pp2o8dm4izqi9TtG9IQbFN9wrI09PlNImL6VL5pcG4khzBPrypklytbDpW6/ilqI vNqfe4tLEwXXM++65ejmH7mHIyrEOzSHYabgKG9xY4rnuX8qtFAcwsfpYwC9oJoV UCdRah5AGKkNJdCa/f9Ut4YNWG83ZD8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:11:12 2026 by rpki-client