$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa File: ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa (raw, json) Hash identifier: c2WjRm2LHwinZy3eR3fP9ggg7hcRVlA9VrMWE551afs= Subject key identifier: 68:F7:3E:95:AC:62:BF:7C:62:82:20:74:0F:6B:45:CC:DF:BC:3C:C8 Certificate issuer: /CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Certificate serial: 010D0C9F4328584EFB476386F4D37093CFF75900 Authority key identifier: F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 96.45.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:63:86:f4:d3:70:93:cf:f7:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=7a049343-a53e-448c-b467-38c75bb2ab04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:e5:8a:66:e9:33:ac:04:83:3b:de:fd:2c: d8:bb:63:3f:ed:e9:19:ac:48:58:77:d4:01:2e:69: 2c:8c:b6:32:50:68:65:3d:8b:aa:fe:17:80:16:1e: fe:29:8e:a0:f9:20:0e:82:5b:01:05:98:34:c7:e6: 11:06:fe:35:f2:99:9e:58:da:e2:d6:44:f2:a9:7a: e4:bb:32:8d:cb:2e:23:02:2a:8e:34:76:26:db:ee: 2e:db:56:31:c6:9b:a6:1e:13:5d:09:d6:b3:ea:53: f4:b4:26:94:f8:14:bb:b0:10:b9:6a:55:f3:b0:39: b2:9d:09:00:77:61:97:a4:f0:78:85:3f:3c:93:37: d1:83:f2:15:e1:87:87:92:22:b9:d8:f3:91:7e:f6: cf:28:68:c2:9b:9a:0d:ce:90:49:e6:2f:85:99:fa: 8c:44:e1:91:52:d4:bd:81:c1:e4:57:9f:05:6d:e0: 95:c7:aa:cd:dc:77:f8:d9:04:0a:62:59:7f:da:06: 8c:f1:99:ba:f3:03:e0:40:ae:f7:b5:9b:7b:13:42: 15:e3:e8:69:e9:e0:7e:65:b9:b8:83:cd:93:a1:8e: 6d:f1:9a:19:19:97:f8:43:60:ed:2e:d7:65:7e:fd: a8:f2:44:ab:39:5c:33:98:cb:0e:e2:95:99:67:c7: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F7:3E:95:AC:62:BF:7C:62:82:20:74:0F:6B:45:CC:DF:BC:3C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl X509v3 Authority Key Identifier: keyid:F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer sbgp-ipAddrBlock: critical IPv4: 96.45.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:94:d3:2f:ba:95:2c:44:b8:73:81:25:cd:80:2e:64:d8:65: 22:6a:10:4e:1e:bb:9f:8a:3f:3e:03:3e:b0:b0:89:fc:4b:37: 9b:12:37:f6:21:2b:93:84:10:52:33:1f:eb:0e:b9:59:f5:5c: 18:90:c4:be:e5:6d:64:48:eb:61:66:be:e2:27:93:b5:97:1d: f0:ef:d6:f4:49:d7:14:20:3c:ef:71:6f:e7:ff:11:21:a7:d9: 4d:d5:c6:3b:71:dc:d2:ce:1b:35:05:38:de:0e:56:87:9e:c2: 7a:6e:c6:db:ea:dc:29:9f:b5:9c:9f:4b:22:70:09:aa:a0:24: b1:5b:d7:b4:54:54:f2:76:26:6a:93:76:3e:fd:e7:db:9d:87: 70:a4:ec:a4:45:c0:0d:ad:84:e5:b9:b9:c5:77:60:1a:61:d8: 81:e9:bb:17:eb:dd:83:5b:11:8d:2a:69:8d:10:55:79:d5:51: ac:44:80:d0:25:31:5a:fd:fc:ce:70:7f:46:8c:4f:37:2d:6c: d5:c6:ff:ff:4a:16:a8:77:ca:2b:b7:ed:bb:5f:92:cc:8d:b2: 0e:36:82:67:e2:2e:c4:72:fd:f9:2a:a4:bd:d2:46:f4:47:12: 5c:9d:28:52:36:ac:28:02:ed:80:81:fc:37:f3:49:5c:68:20: dc:24:64:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R2OG9NNwk8/3WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4MmFjYzQtNTVmNS00ZmUyLWFmNzMtOTIzNjJlNDBi YmFhMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk N2EwNDkzNDMtYTUzZS00NDhjLWI0NjctMzhjNzViYjJhYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSjlimbpM6wEgzve/SzYu2M/7ekZrEhYd9QB LmksjLYyUGhlPYuq/heAFh7+KY6g+SAOglsBBZg0x+YRBv418pmeWNri1kTyqXrk uzKNyy4jAiqONHYm2+4u21YxxpumHhNdCdaz6lP0tCaU+BS7sBC5alXzsDmynQkA d2GXpPB4hT88kzfRg/IV4YeHkiK52PORfvbPKGjCm5oNzpBJ5i+FmfqMROGRUtS9 gcHkV58FbeCVx6rN3Hf42QQKYll/2gaM8Zm68wPgQK73tZt7E0IV4+hp6eB+Zbm4 g82ToY5t8ZoZGZf4Q2DtLtdlfv2o8kSrOVwzmMsO4pWZZ8fukQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj3PpWsYr98YoIgdA9rRczfvDzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgy YWNjNC01NWY1LTRmZTItYWY3My05MjM2MmU0MGJiYWEvY2E2ZmYzODctYTMxZC0z MjA5LTllMjgtNDhiYmQ0YWI3Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWY4MmFjYzQtNTVmNS00ZmUyLWFm NzMtOTIzNjJlNDBiYmFhL2FmODJhY2M0LTU1ZjUtNGZlMi1hZjczLTkyMzYyZTQw YmJhYS5jcmwwHwYDVR0jBBgwFoAU8PEbNC1f+rnWBnr8kjXUxKWeBcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgyYWNjNC01NWY1LTRmZTItYWY3My05MjM2 MmU0MGJiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYC00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+U0y+6lSxEuHOBJc2ALmTYZSJqEE4eu5+KPz4DPrCwifxLN5sSN/Yh K5OEEFIzH+sOuVn1XBiQxL7lbWRI62FmvuInk7WXHfDv1vRJ1xQgPO9xb+f/ESGn 2U3Vxjtx3NLOGzUFON4OVoeewnpuxtvq3CmftZyfSyJwCaqgJLFb17RUVPJ2JmqT dj7959udh3Ck7KRFwA2thOW5ucV3YBph2IHpuxfr3YNbEY0qaY0QVXnVUaxEgNAl MVr9/M5wf0aMTzctbNXG//9KFqh3yiu37btfksyNsg42gmfiLsRy/fkqpL3SRvRH ElydKFI2rCgC7YCB/DfzSVxoINwkZH0= -----END CERTIFICATE-----Generated at Thu Sep 3 00:56:18 2026 by rpki-client