$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa File: 272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa (raw, json) Hash identifier: /SiQOmCm9oAatqasr3VNJ8zmzzAAnkkbc5YEDODIFN4= Subject key identifier: 74:53:A7:4E:3B:4E:FC:02:E2:30:8D:D8:71:C6:55:5C:C0:A3:EC:AD Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F4328584AFC1BEE721813E905F95A9A80 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14500 IP address blocks: 68.70.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ee:72:18:13:e9:05:f9:5a:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=d0e66def-bcae-465d-b8e6-e9fe66338c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7f:b8:1b:d4:fd:0f:0c:3a:ca:f5:5c:ea:9c: 33:48:78:7e:db:9f:83:15:d1:cf:2d:96:53:9a:dc: f4:31:2e:1a:c3:f1:0d:c2:2e:d1:6f:54:c2:d4:fe: d7:25:81:72:19:e0:c0:d3:f8:7d:de:4e:e9:04:0e: ed:83:3c:89:52:b1:22:66:ba:3e:70:7a:2b:2e:7b: 1b:06:d9:1c:92:c5:35:16:29:82:00:0c:7a:dd:ab: 0d:79:e6:65:f6:63:58:4e:04:e3:d9:f8:fb:91:3e: b4:24:16:c6:3d:4f:1d:0d:29:03:20:7d:8e:7a:a6: 9b:3c:ad:be:48:b8:6c:98:e1:23:c6:60:aa:a2:6d: 34:ba:c8:6d:0f:8b:b3:ac:b5:2e:71:28:94:f9:db: f2:1b:e3:6f:0d:3b:f6:60:04:81:76:0e:52:d7:8b: 67:f1:23:80:81:ed:70:da:0d:4a:f5:06:19:34:d0: 29:a5:10:15:fc:3b:f2:45:c0:34:4f:d7:3e:68:d6: 9d:ff:64:2b:a2:a9:86:45:5b:3f:eb:d7:67:7e:82: 9d:e4:33:7d:3e:25:8d:55:67:e5:b2:ce:e6:90:17: 2d:f4:ba:77:01:8f:ae:4b:60:49:11:fb:56:3f:21: ce:93:d8:cc:0f:8b:40:57:90:6e:a4:0d:7f:f3:d1: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:53:A7:4E:3B:4E:FC:02:E2:30:8D:D8:71:C6:55:5C:C0:A3:EC:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 68.70.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:99:21:3b:c8:74:bd:25:43:e2:05:dd:da:5f:36:36:1e:7d: 9d:1d:ad:a8:f5:b9:69:d9:96:ae:2e:99:05:90:14:4e:7d:c1: 21:6a:17:95:b5:c2:b8:00:d1:04:6c:31:e3:6d:f1:dc:23:41: cc:b1:02:4b:33:a0:2a:c3:21:68:78:57:52:16:33:f0:17:f9: 55:b8:ec:98:73:b7:7b:eb:52:35:d9:4e:89:84:d6:6c:9e:e2: 4a:07:8e:f3:9b:9f:9a:81:9f:61:0e:25:32:83:99:52:17:e8: df:f6:5b:f3:45:fe:91:54:fb:b5:13:8b:3e:3e:c2:63:9a:e3: ad:32:5d:45:1d:17:ab:4d:d2:db:11:93:47:eb:02:f7:01:f5: d6:14:1e:39:39:6b:e5:d4:38:26:66:40:5d:7b:30:c3:19:b8: 40:7a:c9:73:cc:59:c7:e7:54:1c:8b:aa:1e:1b:b2:fa:95:a0: 10:31:b4:cd:b0:be:29:f0:47:d8:c1:28:4c:e2:aa:02:ba:5f: 66:25:f5:ca:9c:81:56:7a:ca:e4:68:07:c7:e5:8e:66:39:6c: e2:01:68:c3:45:6f:d7:b6:ca:3f:67:be:ed:01:e1:2d:7c:2c: 60:70:d3:d6:f3:4f:05:ea:86:ba:7e:00:1d:75:62:61:34:be: c2:62:2a:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+5yGBPpBflamoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDBlNjZkZWYtYmNhZS00NjVkLWI4ZTYtZTlmZTY2MzM4YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH+4G9T9Dww6yvVc6pwzSHh+25+DFdHPLZZT mtz0MS4aw/ENwi7Rb1TC1P7XJYFyGeDA0/h93k7pBA7tgzyJUrEiZro+cHorLnsb BtkcksU1FimCAAx63asNeeZl9mNYTgTj2fj7kT60JBbGPU8dDSkDIH2OeqabPK2+ SLhsmOEjxmCqom00ushtD4uzrLUucSiU+dvyG+NvDTv2YASBdg5S14tn8SOAge1w 2g1K9QYZNNAppRAV/DvyRcA0T9c+aNad/2QroqmGRVs/69dnfoKd5DN9PiWNVWfl ss7mkBct9Lp3AY+uS2BJEftWPyHOk9jMD4tAV5BupA1/89GMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRTp047TvwC4jCN2HHGVVzAo+ytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjcyZTNkNzItZjQyYi0z OTRkLWEyYWMtNDhhYzNlMDUwYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeZITvIdL0lQ+IF3dpfNjYefZ0draj1uWnZlq4umQWQFE59wSFqF5W1 wrgA0QRsMeNt8dwjQcyxAkszoCrDIWh4V1IWM/AX+VW47Jhzt3vrUjXZTomE1mye 4koHjvObn5qBn2EOJTKDmVIX6N/2W/NF/pFU+7UTiz4+wmOa460yXUUdF6tN0tsR k0frAvcB9dYUHjk5a+XUOCZmQF17MMMZuEB6yXPMWcfnVByLqh4bsvqVoBAxtM2w vinwR9jBKEziqgK6X2Yl9cqcgVZ6yuRoB8fljmY5bOIBaMNFb9e2yj9nvu0B4S18 LGBw09bzTwXqhrp+AB11YmE0vsJiKgc= -----END CERTIFICATE-----Generated at Tue Sep 16 02:33:20 2025 by rpki-client