$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/36484c89-fa9e-3b7d-82d1-ae025943c86e.roa File: 36484c89-fa9e-3b7d-82d1-ae025943c86e.roa (raw, json) Hash identifier: uaWfagtAeFH59WlPwPAZp1wDCEd5si/jzbFf2VJqm8o= Subject key identifier: 02:0F:72:A5:6A:E2:A5:B9:D5:4A:FF:90:A2:E1:DA:67:18:82:47:A5 Certificate issuer: /CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Certificate serial: 010D0C9F4328584F06729EB7DFEA0EA5EDFF7B80 Authority key identifier: F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/36484c89-fa9e-3b7d-82d1-ae025943c86e.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 96.45.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:9e:b7:df:ea:0e:a5:ed:ff:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=c5880aac-4fa0-499e-b5e2-54c686de55da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:61:5b:b7:a6:83:7e:cb:c0:e4:f4:43:3c:b9: 3a:95:47:c4:29:6a:ec:7a:fb:6b:43:b2:6b:34:47: 36:4b:c9:86:79:55:b9:54:86:31:4d:e8:08:92:8f: 4a:68:c4:bd:ce:9e:e7:e1:20:91:72:7d:df:ac:93: c4:b2:7d:cf:4b:8b:4a:02:23:38:96:0d:92:c8:dc: ac:32:30:7c:aa:a0:22:9a:f4:03:51:22:87:ea:56: fb:67:4a:03:b6:38:27:23:00:ff:f8:eb:1b:c1:bb: 38:fc:05:59:ee:f5:c4:51:c9:5e:af:ad:fe:f8:5a: 17:19:ba:13:50:82:75:bc:cc:6e:cb:66:c2:f8:eb: ce:5d:74:f6:7d:ab:10:99:0c:00:98:29:e7:e5:f5: 9f:eb:f2:d1:d5:cb:3b:4b:2d:f4:b0:63:38:38:11: 31:36:90:68:09:23:ab:03:14:17:d7:c7:0c:97:2c: a6:22:92:c5:ac:25:7e:c2:4f:1e:64:50:a2:79:ea: 83:c2:30:97:37:84:a7:9c:c2:b3:b1:c8:43:c7:ff: 12:15:7c:9b:4a:79:2c:27:5e:a4:8d:58:74:69:b8: 1e:ae:40:a0:55:88:d9:9f:24:4d:01:ed:fa:5b:74: 4d:ae:4a:8f:87:b3:2f:a3:5d:98:3e:fb:0e:d4:6b: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0F:72:A5:6A:E2:A5:B9:D5:4A:FF:90:A2:E1:DA:67:18:82:47:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/36484c89-fa9e-3b7d-82d1-ae025943c86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl X509v3 Authority Key Identifier: keyid:F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer sbgp-ipAddrBlock: critical IPv4: 96.45.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a7:1c:13:69:0d:c2:22:48:de:d2:eb:1e:6f:ee:2e:d3:da: 77:2e:e8:00:6f:aa:41:fa:48:c1:58:08:39:ca:67:11:eb:fb: a0:b0:4a:2d:e8:a0:3a:5b:a0:39:f1:34:09:ad:ca:2a:bf:a8: 20:18:c5:7a:8b:ec:dd:d7:f5:2b:69:45:5b:8c:47:71:98:07: b9:d1:5b:00:2c:d0:52:64:7a:38:54:f9:ec:c3:95:b0:ef:c0: 89:22:f8:d4:ae:6e:70:90:90:45:8b:f2:68:a6:56:33:85:62: 2d:47:be:7e:2a:69:34:6e:f4:ec:63:d2:6d:c1:46:90:ed:a2: 06:38:05:85:8c:68:04:78:d6:df:96:8f:fb:94:46:06:6b:22: 6b:1c:4f:10:5f:60:be:b6:fb:6f:cd:05:f1:70:3e:05:b5:7a: 94:f8:75:db:47:0f:b9:36:ff:0e:1f:f7:58:f2:de:46:dd:21: d7:b0:a9:29:21:58:0d:63:83:85:ad:89:f2:2e:dc:35:25:ca: 03:c1:a4:2a:59:91:5a:ae:f5:a6:61:4b:7e:90:0c:7e:e6:44: c6:ac:86:ec:0b:1e:42:50:47:87:9e:55:7a:35:67:ac:7f:25: ca:45:2d:7f:2b:fb:fc:50:46:4f:d8:14:e6:1d:4d:2d:7e:c0: 48:fe:64:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gcp633+oOpe3/e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4MmFjYzQtNTVmNS00ZmUyLWFmNzMtOTIzNjJlNDBi YmFhMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YzU4ODBhYWMtNGZhMC00OTllLWI1ZTItNTRjNjg2ZGU1NWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWFbt6aDfsvA5PRDPLk6lUfEKWrsevtrQ7Jr NEc2S8mGeVW5VIYxTegIko9KaMS9zp7n4SCRcn3frJPEsn3PS4tKAiM4lg2SyNys MjB8qqAimvQDUSKH6lb7Z0oDtjgnIwD/+Osbwbs4/AVZ7vXEUcler63++FoXGboT UIJ1vMxuy2bC+OvOXXT2fasQmQwAmCnn5fWf6/LR1cs7Sy30sGM4OBExNpBoCSOr AxQX18cMlyymIpLFrCV+wk8eZFCieeqDwjCXN4SnnMKzschDx/8SFXybSnksJ16k jVh0abgerkCgVYjZnyRNAe36W3RNrkqPh7Mvo12YPvsO1GvSjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIPcqVq4qW51Ur/kKLh2mcYgkelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgy YWNjNC01NWY1LTRmZTItYWY3My05MjM2MmU0MGJiYWEvMzY0ODRjODktZmE5ZS0z YjdkLTgyZDEtYWUwMjU5NDNjODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWY4MmFjYzQtNTVmNS00ZmUyLWFm NzMtOTIzNjJlNDBiYmFhL2FmODJhY2M0LTU1ZjUtNGZlMi1hZjczLTkyMzYyZTQw YmJhYS5jcmwwHwYDVR0jBBgwFoAU8PEbNC1f+rnWBnr8kjXUxKWeBcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgyYWNjNC01NWY1LTRmZTItYWY3My05MjM2 MmU0MGJiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYC00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2nHBNpDcIiSN7S6x5v7i7T2ncu6ABvqkH6SMFYCDnKZxHr+6CwSi3o oDpboDnxNAmtyiq/qCAYxXqL7N3X9StpRVuMR3GYB7nRWwAs0FJkejhU+ezDlbDv wIki+NSubnCQkEWL8mimVjOFYi1Hvn4qaTRu9Oxj0m3BRpDtogY4BYWMaAR41t+W j/uURgZrImscTxBfYL62+2/NBfFwPgW1epT4ddtHD7k2/w4f91jy3kbdIdewqSkh WA1jg4WtifIu3DUlygPBpCpZkVqu9aZhS36QDH7mRMashuwLHkJQR4eeVXo1Z6x/ JcpFLX8r+/xQRk/YFOYdTS1+wEj+ZAY= -----END CERTIFICATE-----Generated at Tue Sep 1 04:33:20 2026 by rpki-client