$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/898d6e32-f2ea-3c49-a4fd-6ab7850a23a4.roa File: 898d6e32-f2ea-3c49-a4fd-6ab7850a23a4.roa (raw, json) Hash identifier: BuY93P7waQ1SQgUJ8gyQ5Mu2stYWeTL6glquU+AmKXI= Subject key identifier: C8:14:06:8D:CB:2F:03:02:B7:BE:4D:77:81:64:BF:85:54:57:E4:94 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584CBDB1DE92DBB45656EFEF9EA0 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/898d6e32-f2ea-3c49-a4fd-6ab7850a23a4.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 14500 IP address blocks: 173.244.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:de:92:db:b4:56:56:ef:ef:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=eae3b5cb-64b4-4f16-bba7-1e03a62b518b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:d9:f4:4a:cb:0c:27:3e:be:7f:2f:ff:b7: 61:c7:51:be:3f:fa:81:f9:6e:ce:71:a7:56:f3:6e: 0e:5c:26:22:da:a5:20:55:02:f7:f2:bd:bc:cf:1e: 76:68:72:c7:13:49:73:1d:1f:41:01:75:4c:62:45: d2:f0:c5:05:72:46:dc:55:7b:94:38:97:0a:45:b9: 84:ae:4e:1a:58:53:60:0b:20:07:d2:e9:27:d9:54: ac:b2:d2:16:74:9f:e0:7c:c8:5f:69:4d:4f:1c:a9: 0e:a9:af:42:01:8b:84:e1:09:93:bf:f7:9e:43:40: e6:80:af:3f:23:48:70:79:1e:12:b5:70:1d:66:0f: 7b:62:ea:5e:f5:49:73:46:b2:91:e3:5a:25:27:40: 11:cf:39:e4:82:b4:4f:f2:08:fe:17:92:af:3b:69: 64:c7:5b:55:c2:48:01:1c:46:b8:df:8d:ed:30:25: 50:98:52:22:1c:45:f6:78:bf:90:35:82:c7:5c:62: 1a:64:2a:35:51:31:db:a3:84:dd:a3:c9:fe:99:48: c0:90:68:41:31:93:99:b9:bb:36:08:6a:21:dc:98: 7f:13:d2:d2:c2:94:84:22:f1:99:b8:13:29:e3:27: 4f:c0:0a:bc:92:4e:52:00:38:ba:1e:4a:e8:ff:a8: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:14:06:8D:CB:2F:03:02:B7:BE:4D:77:81:64:BF:85:54:57:E4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/898d6e32-f2ea-3c49-a4fd-6ab7850a23a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ee:bf:cc:3f:ac:8b:ff:8f:10:7a:6d:1f:9e:2d:05:b5:44: c2:d4:79:46:a9:24:9f:bf:cd:8b:56:de:8b:ef:c6:e0:93:6c: cd:e7:49:9f:ed:90:7c:2e:d7:0e:10:67:10:b6:4b:eb:47:02: 3e:c1:6b:ee:12:9b:b9:b7:97:bd:fe:68:1f:db:69:c5:a2:32: 86:7e:78:bf:e7:6e:b7:ef:48:74:25:79:04:7c:2a:f5:b8:f5: 49:a6:06:3f:d4:39:08:ad:dc:02:f8:88:50:80:22:07:b4:fc: 8e:51:57:a3:4a:7e:9f:ca:a2:7e:47:10:a3:ca:e0:80:7f:b9: b4:03:8a:73:35:70:02:87:9d:3d:77:19:75:b9:ba:9b:f8:f8: 57:87:63:42:1b:1d:5e:ec:d8:0c:7c:ac:f6:6d:02:17:0a:49: 3c:89:65:db:5f:a1:ee:fc:52:28:35:6d:32:01:95:c4:bc:f3: 48:62:fc:4a:74:53:48:f5:b6:50:50:13:c7:7f:5a:0f:e8:e0: de:2b:a9:95:49:88:02:47:1d:29:70:75:80:3a:7a:56:61:d3: 59:03:64:ba:45:bd:17:1e:9b:ce:b6:6a:f5:28:29:fa:5c:40: 00:30:7c:19:22:6d:f2:65:65:8c:95:9d:e7:ab:ed:36:c9:78: cd:4c:be:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sd6S27RWVu/vnqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk ZWFlM2I1Y2ItNjRiNC00ZjE2LWJiYTctMWUwM2E2MmI1MThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFbZ9ErLDCc+vn8v/7dhx1G+P/qB+W7OcadW 824OXCYi2qUgVQL38r28zx52aHLHE0lzHR9BAXVMYkXS8MUFckbcVXuUOJcKRbmE rk4aWFNgCyAH0ukn2VSsstIWdJ/gfMhfaU1PHKkOqa9CAYuE4QmTv/eeQ0DmgK8/ I0hweR4StXAdZg97Yupe9UlzRrKR41olJ0ARzznkgrRP8gj+F5KvO2lkx1tVwkgB HEa4343tMCVQmFIiHEX2eL+QNYLHXGIaZCo1UTHbo4Tdo8n+mUjAkGhBMZOZubs2 CGoh3Jh/E9LSwpSEIvGZuBMp4ydPwAq8kk5SADi6Hkro/6ivAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgUBo3LLwMCt75Nd4Fkv4VUV+SUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvODk4ZDZlMzItZjJlYS0z YzQ5LWE0ZmQtNmFiNzg1MGEyM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrfRcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXuv8w/rIv/jxB6bR+eLQW1RMLUeUapJJ+/zYtW3ovvxuCTbM3nSZ/t kHwu1w4QZxC2S+tHAj7Ba+4Sm7m3l73+aB/bacWiMoZ+eL/nbrfvSHQleQR8KvW4 9UmmBj/UOQit3AL4iFCAIge0/I5RV6NKfp/Kon5HEKPK4IB/ubQDinM1cAKHnT13 GXW5upv4+FeHY0IbHV7s2Ax8rPZtAhcKSTyJZdtfoe78Uig1bTIBlcS880hi/Ep0 U0j1tlBQE8d/Wg/o4N4rqZVJiAJHHSlwdYA6elZh01kDZLpFvRcem862avUoKfpc QAAwfBkibfJlZYyVneer7TbJeM1Mvps= -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:56 2026 by rpki-client