$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa File: f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa (raw, json) Hash identifier: NqvDXS1ydBFfVpLQ2iOWIpTd93ogbc8re4kytMltwAM= Subject key identifier: A2:35:15:59:F9:41:9F:F1:12:E2:57:19:75:11:E0:2A:1D:FB:70:8E Certificate issuer: /CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Certificate serial: 010D0C9F4328584E46BF29300B6716FEC3EC9240 Authority key identifier: A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa Signing time: Wed 24 Jun 2026 09:00:12 +0000 ROA not before: Wed 24 Jun 2026 09:00:12 +0000 ROA not after: Tue 22 Sep 2026 09:00:12 +0000 asID: 174 IP address blocks: 109.175.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:46:bf:29:30:0b:67:16:fe:c3:ec:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Validity Not Before: Jun 24 09:00:12 2026 GMT Not After : Sep 22 09:00:12 2026 GMT Subject: CN=f0caf15a-51f2-46a4-8be7-452d041bf186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:db:46:fd:cb:15:0a:56:15:ad:38:a8:6a: 64:6e:75:51:92:f1:76:55:02:5f:37:5d:d5:25:e4: 6e:58:28:1f:8f:62:db:b2:33:cf:3e:6c:df:2e:d7: b6:22:61:c9:3d:34:a6:83:59:8d:9b:e0:95:5a:b9: 4a:77:95:16:47:ac:fe:d2:e3:41:92:50:a2:73:99: 8d:02:bf:70:f2:18:c5:d3:f2:9b:e5:a8:48:f0:e1: c1:f8:77:4f:13:b1:68:2d:f9:6e:36:aa:a4:13:70: 32:2a:5a:00:fb:c1:b0:59:04:04:2f:8a:67:54:fe: ec:35:0b:9d:4f:4d:3f:6b:07:c8:d8:99:4e:7c:f4: 69:12:39:39:c1:56:5a:f6:61:85:2f:71:d2:8d:6a: bb:b4:2b:d0:a2:02:03:c2:f4:9d:ee:2e:da:97:85: 47:18:84:77:35:98:18:32:35:95:6b:c5:b2:c2:10: 64:b6:8d:7a:23:6b:22:47:16:51:f9:17:22:32:dc: 73:54:33:04:0b:18:c6:5c:77:17:22:66:a7:f8:08: c0:37:e5:27:b6:01:2f:02:25:dd:86:78:cf:f7:b7: e2:7c:80:b3:63:25:e0:aa:b8:bd:49:6e:11:63:2a: 92:8e:0c:03:f0:11:2d:69:a1:46:79:05:63:f9:e0: 82:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:35:15:59:F9:41:9F:F1:12:E2:57:19:75:11:E0:2A:1D:FB:70:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl X509v3 Authority Key Identifier: keyid:A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer sbgp-ipAddrBlock: critical IPv4: 109.175.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:05:37:12:58:76:7a:41:49:e7:34:96:f5:e5:68:87:c6:19: a5:22:a9:04:71:64:a5:db:3a:b1:96:6e:0e:69:8f:f9:0c:31: 34:7a:05:c7:ae:be:c4:38:88:d1:a2:b7:6c:ce:4a:d6:fa:b6: 6e:ea:e9:79:4b:e7:79:15:a3:a0:ac:4d:88:5b:41:f8:10:90: 78:61:fa:22:7b:d5:ef:34:fd:1c:be:91:f5:76:82:49:00:10: 64:f4:0f:d5:d5:6e:0e:9c:b6:ce:c3:7d:3f:7b:a5:d4:2b:84: 74:f5:7f:13:d6:44:07:19:c1:0f:3f:22:9d:cc:e9:07:db:0b: 72:d3:57:c4:2b:82:61:66:56:78:f5:69:e6:b6:e8:13:c2:71: 24:3c:32:95:0f:f1:ba:81:32:4f:02:aa:c1:97:56:4e:c7:2d: 91:6e:11:a7:cb:ac:31:04:f6:0e:a3:f7:49:b4:d5:97:8d:78: cf:e7:79:73:5c:dc:2e:0b:f2:90:44:bd:b7:ba:d6:a3:ae:0d: f7:9f:e7:03:e0:07:96:de:44:bd:22:c1:dc:ff:43:13:7e:a4: 7a:7a:78:07:14:d8:cf:a7:67:b4:09:a6:39:47:cc:f5:19:fa: d8:e4:1a:fe:9f:a1:76:ea:39:90:3c:d9:81:4a:bc:1b:0b:ba: ae:87:26:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5GvykwC2cW/sPskkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYwMGRkOWMtYWM3ZC00ZmQzLTg0YTEtZWE2ZjY2YmMw MDA3MB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZjBjYWYxNWEtNTFmMi00NmE0LThiZTctNDUyZDA0MWJmMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNvbRv3LFQpWFa04qGpkbnVRkvF2VQJfN13V JeRuWCgfj2LbsjPPPmzfLte2ImHJPTSmg1mNm+CVWrlKd5UWR6z+0uNBklCic5mN Ar9w8hjF0/Kb5ahI8OHB+HdPE7FoLfluNqqkE3AyKloA+8GwWQQEL4pnVP7sNQud T00/awfI2JlOfPRpEjk5wVZa9mGFL3HSjWq7tCvQogIDwvSd7i7al4VHGIR3NZgY MjWVa8WywhBkto16I2siRxZR+RciMtxzVDMECxjGXHcXIman+AjAN+UntgEvAiXd hnjP97fifICzYyXgqri9SW4RYyqSjgwD8BEtaaFGeQVj+eCCswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKI1FVn5QZ/xEuJXGXUR4Cod+3COMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAw ZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZmNjZiYzAwMDcvZjFkZmU1ZTgtODllMi0z ZDU3LTg4MjItZDk3ZDFkYTU5MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYwMGRkOWMtYWM3ZC00ZmQzLTg0 YTEtZWE2ZjY2YmMwMDA3L2FmMDBkZDljLWFjN2QtNGZkMy04NGExLWVhNmY2NmJj MDAwNy5jcmwwHwYDVR0jBBgwFoAUo5Wu4k9S7a8QQi6BuJvb5jyuACgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAwZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZm NjZiYzAwMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAba/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoFNxJYdnpBSec0lvXlaIfGGaUiqQRxZKXbOrGWbg5pj/kMMTR6Bceu vsQ4iNGit2zOStb6tm7q6XlL53kVo6CsTYhbQfgQkHhh+iJ71e80/Ry+kfV2gkkA EGT0D9XVbg6cts7DfT97pdQrhHT1fxPWRAcZwQ8/Ip3M6QfbC3LTV8QrgmFmVnj1 aea26BPCcSQ8MpUP8bqBMk8CqsGXVk7HLZFuEafLrDEE9g6j90m01ZeNeM/neXNc 3C4L8pBEvbe61qOuDfef5wPgB5beRL0iwdz/QxN+pHp6eAcU2M+nZ7QJpjlHzPUZ +tjkGv6foXbqOZA82YFKvBsLuq6HJtw= -----END CERTIFICATE-----Generated at Tue Jun 30 10:19:45 2026 by rpki-client