$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa File: a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa (raw, json) Hash identifier: YknfRpLBC9Gi9FTvywnanvZgqj8/8yWSD2GF8GH8DYI= Subject key identifier: 67:7A:66:61:53:05:59:0A:51:0E:6D:64:AB:B5:C9:D3:21:54:9D:34 Certificate issuer: /CN=af3da563-8689-4ebd-a553-31a2f310113a Certificate serial: 010D0C9F4328584EBC7701C5EA80A4BE9FED2280 Authority key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 399688 IP address blocks: 108.174.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:01:c5:ea:80:a4:be:9f:ed:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3da563-8689-4ebd-a553-31a2f310113a Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=40b8753d-c0b8-4132-a8e0-e61c6edef45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:55:87:eb:04:6a:a1:83:15:29:04:95:9b: 90:26:c7:09:f7:fb:b5:f3:9c:db:de:c5:0b:4e:23: cb:f3:a1:c5:77:f0:9a:bb:9a:96:9d:47:d6:cc:b4: b1:03:3c:b5:c6:89:a9:37:ee:c9:5d:ae:8c:34:1d: 68:c8:25:e3:d2:83:37:d2:2a:16:e1:17:63:6a:58: fa:04:fa:97:30:f3:13:cf:3f:a2:07:fe:31:54:03: 18:11:ac:75:53:ad:57:e9:76:af:47:25:23:1e:2b: e8:79:97:d6:6d:6e:cb:74:94:3e:8f:ca:6c:bc:e2: 3b:e9:4e:46:e0:85:f3:a9:c2:96:c1:eb:9d:9a:9a: 52:52:bf:f2:3e:d6:60:cd:44:03:2f:91:c4:28:e5: 24:f8:79:c1:68:6d:83:75:88:4e:e0:99:6b:a7:87: 57:aa:e0:71:28:a7:26:41:fe:ab:01:a7:a4:5a:bf: a8:03:34:ee:5c:d9:ba:a0:3d:5e:3c:ff:58:9a:e3: e5:78:14:70:83:b9:09:70:fe:d1:e9:a5:ba:33:fe: 67:83:48:25:92:a8:67:a7:8b:56:78:d7:46:7f:e2: b8:d9:f8:24:d7:da:5a:e7:a4:57:7f:c7:15:3b:f6: 6a:e4:b5:71:b4:2a:f3:41:5e:43:36:28:c6:b1:3a: 0c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7A:66:61:53:05:59:0A:51:0E:6D:64:AB:B5:C9:D3:21:54:9D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl X509v3 Authority Key Identifier: keyid:A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer sbgp-ipAddrBlock: critical IPv4: 108.174.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5b:eb:14:6d:75:2e:6b:f2:77:5b:3f:8e:a4:60:c4:2c:e2: 0a:72:6f:e3:15:56:c1:7a:69:1f:8c:37:1f:4a:96:02:0a:1b: 15:81:55:d4:51:e0:e6:5d:54:8c:7e:9e:54:c6:59:df:b6:56: 66:46:b8:69:a0:ef:1c:14:49:7c:5b:d6:1f:0d:9a:fe:21:1a: 44:90:f4:03:6a:2f:1f:22:53:ce:b9:a5:fe:5b:42:7f:5d:71: 5e:00:4f:3c:d7:81:a5:49:18:48:ff:e3:14:0f:95:75:a6:f4: 24:60:0f:83:80:ce:0f:b1:fc:2e:29:21:8b:0c:01:83:4c:c9: 78:fc:3c:b6:50:53:68:16:c3:d5:bd:f6:cf:45:60:f8:00:76: 00:11:bc:10:05:f5:31:34:81:1f:40:48:b9:15:6a:8c:48:19: f9:36:a3:38:d9:4c:eb:da:b7:87:12:c6:48:75:cc:e4:ef:1f: 0d:90:2d:3b:d5:5d:c8:e6:bd:a1:8f:02:52:d5:30:9d:fa:6e: dd:9f:2f:be:b4:4b:f6:68:31:61:c7:a3:23:e8:42:59:42:5c: 47:de:77:af:a0:e3:3e:a0:9b:00:ef:ad:9f:1b:9c:66:f6:5f: a7:0c:35:92:de:e3:0c:e7:93:6b:17:d4:b7:e1:70:a9:95:76: 77:f3:88:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dwHF6oCkvp/tIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYzZGE1NjMtODY4OS00ZWJkLWE1NTMtMzFhMmYzMTAx MTNhMB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk NDBiODc1M2QtYzBiOC00MTMyLWE4ZTAtZTYxYzZlZGVmNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptZVh+sEaqGDFSkElZuQJscJ9/u185zb3sUL TiPL86HFd/Cau5qWnUfWzLSxAzy1xompN+7JXa6MNB1oyCXj0oM30ioW4Rdjalj6 BPqXMPMTzz+iB/4xVAMYEax1U61X6XavRyUjHivoeZfWbW7LdJQ+j8psvOI76U5G 4IXzqcKWweudmppSUr/yPtZgzUQDL5HEKOUk+HnBaG2DdYhO4Jlrp4dXquBxKKcm Qf6rAaekWr+oAzTuXNm6oD1ePP9YmuPleBRwg7kJcP7R6aW6M/5ng0glkqhnp4tW eNdGf+K42fgk19pa56RXf8cVO/Zq5LVxtCrzQV5DNijGsToMaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd6ZmFTBVkKUQ5tZKu1ydMhVJ00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNk YTU2My04Njg5LTRlYmQtYTU1My0zMWEyZjMxMDExM2EvYTZjMmNlMDAtNjJhMy0z YTY1LThlYTYtZmM3MTRlNzZiZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYzZGE1NjMtODY4OS00ZWJkLWE1 NTMtMzFhMmYzMTAxMTNhL2FmM2RhNTYzLTg2ODktNGViZC1hNTUzLTMxYTJmMzEw MTEzYS5jcmwwHwYDVR0jBBgwFoAUpq/bvLa9B8T8UIC72m3cN+BpkuAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNkYTU2My04Njg5LTRlYmQtYTU1My0zMWEy ZjMxMDExM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9b6xRtdS5r8ndbP46kYMQs4gpyb+MVVsF6aR+MNx9KlgIKGxWBVdRR 4OZdVIx+nlTGWd+2VmZGuGmg7xwUSXxb1h8Nmv4hGkSQ9ANqLx8iU865pf5bQn9d cV4ATzzXgaVJGEj/4xQPlXWm9CRgD4OAzg+x/C4pIYsMAYNMyXj8PLZQU2gWw9W9 9s9FYPgAdgARvBAF9TE0gR9ASLkVaoxIGfk2ozjZTOvat4cSxkh1zOTvHw2QLTvV XcjmvaGPAlLVMJ36bt2fL760S/ZoMWHHoyPoQllCXEfed6+g4z6gmwDvrZ8bnGb2 X6cMNZLe4wznk2sX1LfhcKmVdnfziGc= -----END CERTIFICATE-----Generated at Fri Aug 21 01:15:12 2026 by rpki-client