$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa File: 802e4f3e-477d-3343-b4df-4044a49cb54d.roa (raw, json) Hash identifier: Yb+JqvpFsCmTdTDE8BWJW5N1Bvm0EUeOP78w3U9WSmk= Subject key identifier: 44:84:E1:5E:5E:E4:A2:B0:F0:3F:16:FE:46:99:EA:7F:23:EB:83:B0 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584CBDB1DE3B1495E4CA5C604580 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 14500 IP address blocks: 68.70.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:de:3b:14:95:e4:ca:5c:60:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=aa1825b4-a5de-48e4-8f9b-49716102f3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:af:cd:39:6c:eb:4b:85:3b:7c:f5:17:d9: b4:c2:9e:0a:1e:0b:40:f3:f0:07:2c:26:96:79:bc: d2:56:18:51:0d:51:31:4b:1a:48:e7:57:79:bd:71: 1f:91:18:43:b4:eb:83:3e:fd:17:59:e7:de:02:9b: 99:34:b1:e4:bc:db:6d:b1:30:a6:9a:14:14:b9:b0: ee:97:46:ac:80:d4:8b:8a:9a:eb:85:58:e1:4e:d5: 7a:17:44:e8:8a:2f:8b:b6:a9:7d:d0:29:ad:9b:af: 9a:7a:ca:c3:8a:b9:b1:4c:df:ed:1b:01:da:8a:a2: a2:e2:6b:b5:97:63:6f:04:88:c8:81:d2:fb:a2:81: 68:d3:4a:d9:43:a6:6c:d8:b8:26:f7:d7:68:4d:ca: 71:f3:24:05:69:15:cc:38:9c:7a:82:13:8e:a2:6e: 9a:d9:29:3e:08:24:98:79:f2:01:b4:71:ec:96:76: cd:75:98:ad:e1:ba:a5:ae:87:c1:4c:3c:c2:0b:a0: 7c:14:12:eb:0d:18:fd:06:2b:5a:f2:a1:96:a8:4a: 88:3b:b2:df:2d:39:92:dd:b6:9c:08:df:6d:6b:2f: ed:c6:2a:e2:0c:10:80:2a:cc:1c:46:a9:bc:97:36: 61:e4:51:b8:7c:c6:93:01:7f:9e:c8:39:a8:97:bd: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:84:E1:5E:5E:E4:A2:B0:F0:3F:16:FE:46:99:EA:7F:23:EB:83:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/802e4f3e-477d-3343-b4df-4044a49cb54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e8:66:6a:0c:36:e4:18:29:27:97:ed:af:35:da:94:6e:93: 18:74:86:38:bf:ed:9c:f4:b0:08:c2:a5:4d:5a:d9:43:cb:b7: bc:e0:16:57:23:b0:3b:2d:9c:cb:3f:bb:e4:a7:42:93:b3:1f: c6:df:27:ea:cc:b4:b6:21:f6:bb:6a:7f:38:81:84:56:44:93: 09:fa:f9:07:ba:d9:d8:22:22:e8:63:f7:b1:fb:ce:07:60:0c: d2:61:04:ac:a9:c5:ec:86:e2:12:86:dc:5e:13:11:8b:ec:ec: 3b:78:f9:54:b7:47:5e:fe:b9:60:27:bc:06:81:85:15:73:23: bf:9a:a1:5f:61:73:cb:51:b7:04:b4:a1:1f:c7:ed:34:22:f6: da:23:d7:f9:04:cf:ac:33:96:91:04:8c:ae:7c:2a:a1:aa:11: 9d:e6:34:25:48:61:03:90:3e:ff:c5:4f:72:01:85:2e:75:fb: 70:2a:a0:83:11:1f:c0:a7:9f:e2:b2:90:36:3c:e5:1e:cb:18: 20:7d:b8:8c:96:2e:4b:e9:d9:19:32:ce:8e:0a:bb:c2:83:a9: 05:f9:36:50:18:49:61:39:91:68:76:b5:6f:d3:37:05:be:32: 8d:49:e4:c9:00:39:b1:8d:9e:04:96:a1:ec:88:94:3e:f1:61: 74:ad:98:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sd47FJXkylxgRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk YWExODI1YjQtYTVkZS00OGU0LThmOWItNDk3MTYxMDJmM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriWvzTls60uFO3z1F9m0wp4KHgtA8/AHLCaW ebzSVhhRDVExSxpI51d5vXEfkRhDtOuDPv0XWefeApuZNLHkvNttsTCmmhQUubDu l0asgNSLiprrhVjhTtV6F0Toii+Ltql90Cmtm6+aesrDirmxTN/tGwHaiqKi4mu1 l2NvBIjIgdL7ooFo00rZQ6Zs2Lgm99doTcpx8yQFaRXMOJx6ghOOom6a2Sk+CCSY efIBtHHslnbNdZit4bqlrofBTDzCC6B8FBLrDRj9Bita8qGWqEqIO7LfLTmS3bac CN9tay/txiriDBCAKswcRqm8lzZh5FG4fMaTAX+eyDmol713nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESE4V5e5KKw8D8W/kaZ6n8j64OwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvODAyZTRmM2UtNDc3ZC0z MzQzLWI0ZGYtNDA0NGE0OWNiNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELoZmoMNuQYKSeX7a812pRukxh0hji/7Zz0sAjCpU1a2UPLt7zgFlcj sDstnMs/u+SnQpOzH8bfJ+rMtLYh9rtqfziBhFZEkwn6+Qe62dgiIuhj97H7zgdg DNJhBKypxeyG4hKG3F4TEYvs7Dt4+VS3R17+uWAnvAaBhRVzI7+aoV9hc8tRtwS0 oR/H7TQi9toj1/kEz6wzlpEEjK58KqGqEZ3mNCVIYQOQPv/FT3IBhS51+3AqoIMR H8Cnn+KykDY85R7LGCB9uIyWLkvp2Rkyzo4Ku8KDqQX5NlAYSWE5kWh2tW/TNwW+ Mo1J5MkAObGNngSWoeyIlD7xYXStmKs= -----END CERTIFICATE-----Generated at Mon Mar 2 18:48:43 2026 by rpki-client