$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa File: afde5cdc-3c5d-342d-a648-49b9232529c6.roa (raw, json) Hash identifier: 4JCsMipZb3Oi1n+Kcloz0KOpaaT1Sy3nUZMPTtAr3jo= Subject key identifier: 1E:3B:46:5A:A0:76:E5:F2:CF:25:47:2C:2E:14:E6:75:C0:19:66:E8 Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F4328584EC4D7111A561CF6585F9233C0 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa Signing time: Sat 08 Aug 2026 13:00:11 +0000 ROA not before: Sat 08 Aug 2026 13:00:11 +0000 ROA not after: Fri 06 Nov 2026 14:00:11 +0000 asID: 393844 IP address blocks: 167.160.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c4:d7:11:1a:56:1c:f6:58:5f:92:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Aug 8 13:00:11 2026 GMT Not After : Nov 6 14:00:11 2026 GMT Subject: CN=5ec17453-32b4-438b-8ab2-301fbfe797f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:fd:5c:f0:33:40:31:73:26:4d:d3:e0:77: 09:02:f9:14:68:90:1d:63:17:9f:09:ea:25:ef:10: 1e:a0:f1:4e:9d:02:0f:5f:01:30:0a:bb:07:66:fe: 8e:ac:e5:36:a4:56:ef:09:9e:6c:30:78:2b:b4:79: 2a:a7:4a:49:a6:f0:0a:9f:be:60:21:80:c7:17:1a: ad:cb:a1:0b:86:0e:79:47:75:b2:50:ef:76:5b:8a: 2c:b5:3d:09:67:c4:05:63:33:5a:f8:68:2b:48:c6: 2a:92:75:47:2b:26:8e:70:fd:03:ee:1f:4a:02:0d: 7e:76:88:64:7c:5d:87:4d:a3:65:c6:5b:ea:66:58: 75:b7:25:6b:59:50:2e:3c:de:eb:31:75:b0:60:59: 25:ff:78:2f:e0:83:98:c6:8e:8e:19:97:ac:a9:39: d4:4e:e8:27:b8:3d:51:19:87:8e:18:94:24:ae:5c: c3:80:ec:21:6b:6a:9d:4e:38:84:e9:cd:d2:ee:1b: 75:00:6c:c7:10:98:ce:c4:48:21:03:a1:fe:7f:55: dd:11:40:ea:e4:b7:21:17:ee:b6:e7:88:d0:41:1c: 00:b1:59:e8:5e:7a:b2:b6:97:96:93:0b:24:be:fd: af:84:fc:24:54:15:75:60:54:80:94:70:00:b5:93: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3B:46:5A:A0:76:E5:F2:CF:25:47:2C:2E:14:E6:75:C0:19:66:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv4: 167.160.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d2:a4:f4:af:9f:2d:85:a0:9e:b2:0c:e9:80:e6:d0:e8:5b: f3:3f:4d:d5:ba:db:0e:71:4b:d7:50:5c:4d:1c:e7:19:74:be: 64:35:7f:eb:97:45:c9:bc:e1:03:9f:58:82:34:d8:eb:35:fd: 45:a9:f8:a4:e1:66:42:66:d6:a0:c3:e4:55:77:78:d2:61:18: 4e:e2:94:57:be:1b:a8:d8:6f:43:d3:ad:bc:7b:36:de:cb:f0: c0:be:f5:85:66:a2:b3:db:f6:04:7c:2f:bf:29:27:5e:18:50: 25:34:39:a5:5b:d2:41:ff:6c:d6:da:4e:24:20:b7:39:05:2e: f1:af:c0:d0:5d:0a:1f:3d:9c:9c:1f:17:92:6c:20:2e:b8:8e: c8:7a:f9:74:08:f8:b3:ed:a5:3f:bc:69:87:38:85:43:79:b9: 9c:26:89:66:a9:04:09:49:04:b0:60:d6:21:99:02:9d:bb:d8: d7:99:44:c1:93:30:46:a7:ad:0f:34:0e:d0:96:6c:8f:79:a6: 44:0e:b6:86:a6:1d:9c:da:6c:fe:fa:0c:39:91:ef:cf:51:cc: 1a:ba:27:46:cd:6b:d9:94:f7:8a:2d:aa:df:68:d7:3b:0a:1b: 92:2f:7f:1a:d4:6c:c1:2f:b8:da:71:a1:7e:ab:15:e9:27:21: 67:30:f0:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7E1xEaVhz2WF+SM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk NWVjMTc0NTMtMzJiNC00MzhiLThhYjItMzAxZmJmZTc5N2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocz9XPAzQDFzJk3T4HcJAvkUaJAdYxefCeol 7xAeoPFOnQIPXwEwCrsHZv6OrOU2pFbvCZ5sMHgrtHkqp0pJpvAKn75gIYDHFxqt y6ELhg55R3WyUO92W4ostT0JZ8QFYzNa+GgrSMYqknVHKyaOcP0D7h9KAg1+dohk fF2HTaNlxlvqZlh1tyVrWVAuPN7rMXWwYFkl/3gv4IOYxo6OGZesqTnUTugnuD1R GYeOGJQkrlzDgOwha2qdTjiE6c3S7ht1AGzHEJjOxEghA6H+f1XdEUDq5LchF+62 54jQQRwAsVnoXnqytpeWkwskvv2vhPwkVBV1YFSAlHAAtZNeowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB47RlqgduXyzyVHLC4U5nXAGWboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvYWZkZTVjZGMtM2M1ZC0z NDJkLWE2NDgtNDliOTIzMjUyOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFp6DgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnSpPSvny2FoJ6yDOmA5tDoW/M/TdW62w5xS9dQXE0c5xl0vmQ1f+uX Rcm84QOfWII02Os1/UWp+KThZkJm1qDD5FV3eNJhGE7ilFe+G6jYb0PTrbx7Nt7L 8MC+9YVmorPb9gR8L78pJ14YUCU0OaVb0kH/bNbaTiQgtzkFLvGvwNBdCh89nJwf F5JsIC64jsh6+XQI+LPtpT+8aYc4hUN5uZwmiWapBAlJBLBg1iGZAp272NeZRMGT MEanrQ80DtCWbI95pkQOtoamHZzabP76DDmR789RzBq6J0bNa9mU94otqt9o1zsK G5IvfxrUbMEvuNpxoX6rFeknIWcw8K0= -----END CERTIFICATE-----Generated at Sat Sep 12 09:03:46 2026 by rpki-client