$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa File: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (raw, json) Hash identifier: 5qIEJsEu60tOwaHnPRaWbaxPjV0VvQpauMNOUzeRQKk= Subject key identifier: CE:BD:F5:10:C4:AE:EB:95:D4:0C:34:B6:79:45:F1:2B:17:47:7E:4B Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F4328584EA787DC179EC3F8B19EB400A0 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32242 IP address blocks: 172.102.2.0/24 maxlen: 24 172.102.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:dc:17:9e:c3:f8:b1:9e:b4:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a8dd0320-50f3-44d8-a1ea-e502e4712f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:27:6d:e2:93:22:78:0e:8e:95:d9:bf:ae: 9b:8c:1a:88:b6:03:e3:26:02:7b:9c:0f:e5:77:9e: bf:cf:c3:88:63:c6:74:5f:00:9b:03:04:5a:4b:88: a7:ae:e4:1f:52:e5:59:bb:44:e0:46:21:31:7c:6c: 12:06:6a:f0:4f:7a:4e:42:50:eb:a4:ae:fd:99:3a: 37:f0:dc:3b:3d:7f:17:98:22:7f:37:45:0f:2a:da: 38:0e:7d:fa:2d:d1:c9:37:83:19:9f:76:8f:a0:1e: 60:7f:07:ab:76:1f:83:f6:97:63:1f:f6:8c:f3:4e: 91:cb:35:36:10:97:79:07:81:47:ca:d1:19:62:8c: 68:23:15:57:6f:e3:96:96:ae:dd:a3:fb:e5:e5:41: be:a2:4e:73:48:b1:88:b7:2a:86:16:52:a0:84:b3: 6e:4c:15:a3:ad:04:ed:91:a9:b6:33:a1:e6:74:40: 84:d5:bc:44:58:42:37:97:a0:ae:17:3c:6f:cf:70: 50:4c:7d:fe:e2:3a:04:0c:3b:ff:16:e1:13:fe:24: cc:81:06:05:41:9e:73:44:53:24:04:47:ae:c0:b3: 90:82:fc:ce:12:91:0b:c3:85:3d:92:fa:1b:de:c2: cf:8c:be:80:df:b7:21:f5:e2:c7:d3:b9:3a:03:84: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BD:F5:10:C4:AE:EB:95:D4:0C:34:B6:79:45:F1:2B:17:47:7E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv4: 172.102.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:8c:15:60:64:33:b2:3a:2a:f0:6b:ec:b9:16:42:cb:dc:1e: 18:08:d6:93:72:cd:8e:6a:3a:11:29:31:6c:75:98:6d:b7:0a: 9e:71:97:48:bd:e8:01:e5:10:cd:22:21:f3:6b:f7:81:f2:f2: da:27:7e:a3:4b:21:49:18:4f:5c:87:43:eb:94:6e:b8:14:a6: 2f:ea:a2:fb:60:a5:78:74:82:81:e0:25:a8:d2:c3:f7:31:db: ac:fe:69:4c:9f:6f:b1:ce:bb:bf:d4:77:ac:f3:54:86:63:3a: 7a:68:f0:77:31:6d:56:4b:f3:45:81:d3:5b:31:a4:b5:80:27: 0e:37:76:70:7c:3d:f7:d9:d9:04:03:6f:2a:a3:95:73:62:9e: 60:28:89:77:d8:4a:3d:8e:d8:9e:c2:34:8e:8e:c4:a1:53:56: 66:5a:1d:b9:0f:36:e9:e5:eb:c7:7e:dd:c7:fd:86:07:66:4f: 7f:d6:0c:0f:ed:97:cc:48:be:4f:f0:c8:f8:7b:39:b1:4a:9d: 1e:bf:5e:77:0b:98:80:17:88:e6:c4:3f:d8:e4:e1:e4:06:6d: 7f:e9:35:be:46:b6:59:1a:a1:e9:fe:97:f6:a2:8b:b9:50:65: 5d:7e:7a:7f:2b:f5:c3:62:a8:b1:56:90:40:6b:fe:0d:d7:d5: 77:4c:01:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9wXnsP4sZ60AKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YThkZDAzMjAtNTBmMy00NGQ4LWExZWEtZTUwMmU0NzEyZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrQnbeKTIngOjpXZv66bjBqItgPjJgJ7nA/l d56/z8OIY8Z0XwCbAwRaS4inruQfUuVZu0TgRiExfGwSBmrwT3pOQlDrpK79mTo3 8Nw7PX8XmCJ/N0UPKto4Dn36LdHJN4MZn3aPoB5gfwerdh+D9pdjH/aM806RyzU2 EJd5B4FHytEZYoxoIxVXb+OWlq7do/vl5UG+ok5zSLGItyqGFlKghLNuTBWjrQTt kam2M6HmdECE1bxEWEI3l6CuFzxvz3BQTH3+4joEDDv/FuET/iTMgQYFQZ5zRFMk BEeuwLOQgvzOEpELw4U9kvob3sLPjL6A37ch9eLH07k6A4QBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM699RDEruuV1Aw0tnlF8SsXR35LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvNzBlYjJkMDktYmY1MS0z NzkzLThhZjMtODMxMjE3YjhhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWMFWBkM7I6KvBr7LkWQsvcHhgI1pNyzY5qOhEpMWx1mG23Cp5xl0i9 6AHlEM0iIfNr94Hy8tonfqNLIUkYT1yHQ+uUbrgUpi/qovtgpXh0goHgJajSw/cx 26z+aUyfb7HOu7/Ud6zzVIZjOnpo8HcxbVZL80WB01sxpLWAJw43dnB8PffZ2QQD byqjlXNinmAoiXfYSj2O2J7CNI6OxKFTVmZaHbkPNunl68d+3cf9hgdmT3/WDA/t l8xIvk/wyPh7ObFKnR6/XncLmIAXiObEP9jk4eQGbX/pNb5Gtlkaoen+l/aii7lQ ZV1+en8r9cNiqLFWkEBr/g3X1XdMASM= -----END CERTIFICATE-----Generated at Sat Sep 5 13:24:55 2026 by rpki-client