$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa File: f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa (raw, json) Hash identifier: eoj+f94RF5RboB6/r1tI2w4Ti0lMwxf+IMpa3Sxo4X8= Subject key identifier: F6:58:43:12:09:FD:B5:00:58:AB:64:AD:9A:47:75:65:B8:03:30:56 Certificate issuer: /CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Certificate serial: 010D0C9F4328584D667A57502F897D8D1E285400 Authority key identifier: A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 174 IP address blocks: 109.175.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:57:50:2f:89:7d:8d:1e:28:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=1b52e38d-cc64-4b55-aba7-5b29b1233b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:39:4c:d0:89:15:48:9a:b2:8c:cf:44:54:ee: de:f3:3b:67:1a:a2:e0:80:12:66:22:46:f0:80:69: de:19:93:d9:c5:cb:ef:e6:06:c4:8c:47:ff:99:b0: 9c:cf:4e:c2:ea:ec:03:eb:86:08:97:0b:01:22:00: ae:04:ba:d9:8d:e9:55:55:84:85:40:f0:f2:92:1b: 48:42:47:c3:2a:92:a9:7f:58:38:31:b9:5d:0c:b0: b2:f2:91:dd:44:82:07:0d:b9:e0:b1:8a:e0:72:3d: 35:71:a2:46:1d:d2:3f:d7:c3:f4:41:a2:90:66:da: 65:58:5b:7b:43:0d:50:c8:40:c1:d1:36:c9:06:38: fa:a2:d7:c6:60:12:73:70:da:ea:a4:14:05:db:05: 0c:e5:fd:a6:7a:e3:c5:4a:fe:da:e3:a5:d2:27:8b: 6d:fa:1a:2f:3e:aa:9a:53:44:53:30:ee:e6:fc:2b: 59:71:a1:2f:f8:9a:4d:85:db:3a:05:a1:bd:51:de: 2f:a3:80:1c:00:bf:63:ad:5f:54:32:cb:26:e0:1e: 4a:0d:05:68:ea:67:a6:83:4e:39:a2:73:31:83:38: f3:6f:8f:b5:f3:32:d3:eb:2e:ab:00:95:1c:23:92: 22:3d:fe:2c:f7:a4:17:8c:38:1c:36:b8:4b:06:ae: b7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:58:43:12:09:FD:B5:00:58:AB:64:AD:9A:47:75:65:B8:03:30:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl X509v3 Authority Key Identifier: keyid:A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer sbgp-ipAddrBlock: critical IPv4: 109.175.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7a:1d:8f:0e:0f:2f:0c:bc:5e:49:6c:62:8f:fd:fd:29:6d: 2c:d2:40:b4:bc:83:6c:76:03:ad:13:20:ab:01:a5:04:e5:56: 6e:71:3c:f2:16:a2:e2:8e:cc:3c:4a:55:67:fe:6b:03:04:a9: b7:c7:89:5e:70:62:15:b8:df:14:b6:7e:7e:79:9c:a2:3e:f0: a8:2c:1c:4e:b8:51:bd:bb:da:43:6e:76:96:e0:76:db:71:44: b7:4e:94:c5:6e:14:fc:0b:50:74:06:8a:56:a8:00:87:a3:5d: c2:8a:4b:35:21:55:29:9a:bd:80:f4:c3:55:89:1d:10:1b:ab: 67:fd:bc:c9:72:93:1d:7f:73:f0:6d:a8:de:79:fc:9e:15:bb: 0f:ba:4d:04:6e:91:d8:3e:f6:fd:c5:ad:62:c6:cf:ce:24:aa: 89:0e:b0:ea:e1:8b:32:39:dd:a6:e3:de:0f:9c:ee:f3:d7:30: 88:a7:ba:f8:43:d9:21:c6:eb:a2:6c:a0:e8:c5:df:ba:8a:8b: 7b:41:c2:e0:7d:ab:da:4b:ba:ab:a1:52:5e:07:4e:3e:21:72: a6:63:09:96:f8:c3:74:29:cb:4e:3e:c0:d0:95:74:0e:19:07: 6d:75:60:c2:50:a5:6d:95:bb:df:eb:a4:42:37:ca:e6:0e:4f: 92:45:4d:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1meldQL4l9jR4oVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYwMGRkOWMtYWM3ZC00ZmQzLTg0YTEtZWE2ZjY2YmMw MDA3MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk MWI1MmUzOGQtY2M2NC00YjU1LWFiYTctNWIyOWIxMjMzYjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTlM0IkVSJqyjM9EVO7e8ztnGqLggBJmIkbw gGneGZPZxcvv5gbEjEf/mbCcz07C6uwD64YIlwsBIgCuBLrZjelVVYSFQPDykhtI QkfDKpKpf1g4MbldDLCy8pHdRIIHDbngsYrgcj01caJGHdI/18P0QaKQZtplWFt7 Qw1QyEDB0TbJBjj6otfGYBJzcNrqpBQF2wUM5f2meuPFSv7a46XSJ4tt+hovPqqa U0RTMO7m/CtZcaEv+JpNhds6BaG9Ud4vo4AcAL9jrV9UMssm4B5KDQVo6memg045 onMxgzjzb4+18zLT6y6rAJUcI5IiPf4s96QXjDgcNrhLBq63owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZYQxIJ/bUAWKtkrZpHdWW4AzBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAw ZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZmNjZiYzAwMDcvZjFkZmU1ZTgtODllMi0z ZDU3LTg4MjItZDk3ZDFkYTU5MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYwMGRkOWMtYWM3ZC00ZmQzLTg0 YTEtZWE2ZjY2YmMwMDA3L2FmMDBkZDljLWFjN2QtNGZkMy04NGExLWVhNmY2NmJj MDAwNy5jcmwwHwYDVR0jBBgwFoAUo5Wu4k9S7a8QQi6BuJvb5jyuACgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAwZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZm NjZiYzAwMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAba/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl6HY8ODy8MvF5JbGKP/f0pbSzSQLS8g2x2A60TIKsBpQTlVm5xPPIW ouKOzDxKVWf+awMEqbfHiV5wYhW43xS2fn55nKI+8KgsHE64Ub272kNudpbgdttx RLdOlMVuFPwLUHQGilaoAIejXcKKSzUhVSmavYD0w1WJHRAbq2f9vMlykx1/c/Bt qN55/J4Vuw+6TQRukdg+9v3FrWLGz84kqokOsOrhizI53abj3g+c7vPXMIinuvhD 2SHG66JsoOjF37qKi3tBwuB9q9pLuquhUl4HTj4hcqZjCZb4w3Qpy04+wNCVdA4Z B211YMJQpW2Vu9/rpEI3yuYOT5JFTas= -----END CERTIFICATE-----Generated at Mon Apr 13 06:49:16 2026 by rpki-client