$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/af85533c-8398-322a-b767-04b2d9900d33.roa File: af85533c-8398-322a-b767-04b2d9900d33.roa (raw, json) Hash identifier: rZ4xyXjyXo+C1dNZIIxe1jIAFdfH1CL0E9UVH8/5pMw= Subject key identifier: 76:CF:F9:87:46:BA:5D:34:90:66:CD:30:CE:92:47:2F:2C:B9:E7:BA Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584D932551F815A5F035EF160D00 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/af85533c-8398-322a-b767-04b2d9900d33.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 6079 IP address blocks: 209.150.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:51:f8:15:a5:f0:35:ef:16:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=64404363-85c2-4866-864f-fd4b5d6acd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:86:f6:f5:2f:39:a7:c4:b3:02:03:2b:14:a9: 3e:4b:55:27:af:26:0d:6a:72:11:99:4c:5c:a7:31: c9:33:16:cb:0d:c9:ff:9f:8b:af:67:08:94:4e:f1: 75:01:91:1a:28:43:74:eb:fd:16:fb:b0:44:ba:d0: 4b:2a:91:88:92:ea:cb:44:ad:bd:dc:ec:02:29:03: c9:9e:dd:f2:34:20:57:1c:4b:fe:6b:3f:27:75:57: dd:9b:e8:d3:47:0d:b4:80:ab:1e:2d:99:11:26:a3: 35:35:d2:99:f2:50:44:d9:bb:e0:21:8d:5a:10:3a: af:cb:24:2c:db:68:27:ef:00:d0:d8:7e:46:65:6e: 2a:19:d9:16:5f:2b:c4:3b:cb:c9:9a:20:c6:98:88: 7d:37:e2:98:34:a9:af:3e:68:37:36:91:c2:ed:08: 92:5e:74:6d:93:25:05:f3:7a:3b:dd:61:7a:12:da: 8c:70:3a:db:9e:f8:52:ca:6a:a2:59:fe:7f:47:b4: 6e:c7:09:76:f7:88:5b:a8:d5:51:97:5f:c8:36:72: 5d:32:53:06:c0:21:63:43:21:c1:a0:dc:3e:32:f6: c2:c4:af:6a:5d:0c:c3:a9:18:91:6c:06:77:b5:81: 63:de:9a:8c:d6:49:f3:18:30:19:3d:bd:5e:26:16: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CF:F9:87:46:BA:5D:34:90:66:CD:30:CE:92:47:2F:2C:B9:E7:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/af85533c-8398-322a-b767-04b2d9900d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 209.150.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ec:de:c0:a1:1e:5b:83:75:06:35:17:2b:23:98:cb:e1:ff: 57:9d:09:71:76:8a:9d:b6:e1:82:17:9d:6a:93:16:25:1d:f3: 46:bd:44:a5:3c:18:bc:df:82:2d:96:2f:79:3b:00:be:20:e5: ed:fb:20:15:b3:f2:38:04:30:26:18:36:d8:ff:cc:89:a9:99: 5c:1c:d9:76:93:93:27:0d:95:13:db:4a:c9:b4:d9:04:7d:0f: 6c:07:e8:cb:9a:84:b9:8f:52:45:d4:29:e1:d4:0b:55:02:3f: 17:7a:96:82:f1:c1:14:6d:c9:6f:5b:6d:19:88:24:ac:31:9e: 62:15:61:a9:26:b4:0c:49:70:ab:45:07:c9:97:d3:4c:c5:6b: 3a:d7:02:98:d4:d1:ae:98:44:34:7a:29:8e:be:34:11:36:14: 57:76:48:d6:f7:fd:7d:07:d4:16:71:21:d7:1f:bd:9b:0d:20: 55:be:93:1f:b9:00:d3:8f:e3:79:e5:f3:bb:15:2b:47:9c:0c: dc:8a:11:0d:6d:49:31:23:4a:c4:36:ce:dc:e9:b5:6a:ad:6c: 66:74:7d:61:f5:5a:aa:0c:4b:a0:88:50:4b:d5:01:53:74:8d: 62:e3:ba:4e:c5:68:96:5e:f8:a6:bb:e9:b8:d3:83:f4:af:e8: 22:b7:dd:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJVH4FaXwNe8WDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NjQ0MDQzNjMtODVjMi00ODY2LTg2NGYtZmQ0YjVkNmFjZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYb29S85p8SzAgMrFKk+S1UnryYNanIRmUxc pzHJMxbLDcn/n4uvZwiUTvF1AZEaKEN06/0W+7BEutBLKpGIkurLRK293OwCKQPJ nt3yNCBXHEv+az8ndVfdm+jTRw20gKseLZkRJqM1NdKZ8lBE2bvgIY1aEDqvyyQs 22gn7wDQ2H5GZW4qGdkWXyvEO8vJmiDGmIh9N+KYNKmvPmg3NpHC7QiSXnRtkyUF 83o73WF6EtqMcDrbnvhSymqiWf5/R7Ruxwl294hbqNVRl1/INnJdMlMGwCFjQyHB oNw+MvbCxK9qXQzDqRiRbAZ3tYFj3pqM1knzGDAZPb1eJhZckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbP+YdGul00kGbNMM6SRy8suee6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYWY4NTUzM2MtODM5OC0z MjJhLWI3NjctMDRiMmQ5OTAwZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0ZYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3s3sChHluDdQY1FysjmMvh/1edCXF2ip224YIXnWqTFiUd80a9RKU8 GLzfgi2WL3k7AL4g5e37IBWz8jgEMCYYNtj/zImpmVwc2XaTkycNlRPbSsm02QR9 D2wH6MuahLmPUkXUKeHUC1UCPxd6loLxwRRtyW9bbRmIJKwxnmIVYakmtAxJcKtF B8mX00zFazrXApjU0a6YRDR6KY6+NBE2FFd2SNb3/X0H1BZxIdcfvZsNIFW+kx+5 ANOP43nl87sVK0ecDNyKEQ1tSTEjSsQ2ztzptWqtbGZ0fWH1WqoMS6CIUEvVAVN0 jWLjuk7FaJZe+Ka76bjTg/Sv6CK33WA= -----END CERTIFICATE-----Generated at Tue Apr 28 00:06:18 2026 by rpki-client