$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa File: af46517c-ca12-3893-94bf-56e17eb024f2.roa (raw, json) Hash identifier: 8qIEKHvtglKsLtMC3qXZVvMWbBtWk0aGMT03eZa/Thc= Subject key identifier: 42:BA:89:0B:D6:64:71:48:C9:D8:AB:A6:5A:EF:B9:B0:BE:13:D1:7C Certificate issuer: /CN=72de343e-ded3-43ae-b207-e492c0f88566 Certificate serial: 010D0C9F4328584ECD372446288021BFD964CD80 Authority key identifier: D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 22803 IP address blocks: 199.59.234.0/23 maxlen: 24 208.92.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:24:46:28:80:21:bf:d9:64:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72de343e-ded3-43ae-b207-e492c0f88566 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=4867dba6-7f45-4480-b7e5-15df687e5b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:bb:63:66:bd:23:e0:11:8f:9b:da:43:ca: ab:41:57:ad:64:46:b2:38:77:6f:d0:a7:54:0b:6c: b8:5e:92:83:27:65:7f:3f:f4:5d:4c:5e:b9:5b:77: ac:19:8f:ed:db:26:22:f5:6d:71:83:52:20:82:51: e0:4a:24:43:67:19:5b:d1:d7:6e:25:49:58:1d:89: ff:c2:fe:9f:68:ea:ef:10:58:e9:ba:b9:80:c0:24: bc:22:b3:2f:7d:14:18:35:7e:2f:54:d0:12:34:b2: f1:ea:df:37:08:33:69:4b:d2:63:21:cc:7a:a8:22: 55:c1:3a:e2:97:30:b4:e9:15:28:7b:d7:e6:70:80: 09:30:6a:37:92:3f:69:02:a2:c4:c4:eb:19:ff:c3: 51:06:d5:ba:89:7c:d4:7c:5b:ae:2d:ef:6c:62:85: bb:41:7d:f7:7e:a3:b0:0b:3a:2c:04:7c:3f:38:0a: 43:01:0a:92:8d:a6:6c:cb:76:cd:e3:80:cd:fb:c1: 5d:46:f7:1d:c8:21:50:f0:3e:8c:b1:de:02:dd:20: db:3c:23:f5:d5:04:e3:ea:1a:03:5a:0d:47:4c:c8: 96:c7:dc:93:cf:e9:16:a1:55:25:ed:58:c4:98:a8: 04:60:c8:48:a0:cd:3d:dd:38:22:e3:9e:58:31:fb: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BA:89:0B:D6:64:71:48:C9:D8:AB:A6:5A:EF:B9:B0:BE:13:D1:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.crl X509v3 Authority Key Identifier: keyid:D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer sbgp-ipAddrBlock: critical IPv4: 199.59.234.0/23 208.92.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:61:5d:a2:92:22:bb:1d:df:5b:2f:aa:65:bb:bd:2e:89:88: 7e:54:fb:39:14:46:47:ce:64:26:3c:aa:a9:d2:ad:13:6e:06: bf:60:24:1d:47:a2:d7:46:68:84:5e:be:07:1a:d8:bf:73:75: 40:02:6f:a8:4a:9a:95:e2:15:06:3a:09:a1:38:15:df:e3:52: 45:20:7e:7b:b0:8b:8d:c4:48:bc:fc:60:55:0c:01:0e:63:cc: 32:f0:fd:63:8b:d7:ad:c2:be:8f:bc:0a:d5:20:36:05:2c:6d: bc:b6:c0:24:d3:84:2d:4a:32:0f:e7:d9:4b:1c:88:3b:4b:56: ef:bb:0f:8f:7f:a9:5e:02:36:28:f1:81:86:c2:88:5d:12:8f: 3d:8d:d5:59:2c:b5:1e:55:3d:c0:d2:b2:5a:cc:59:b1:7f:f0: f8:a2:2f:4c:a5:cc:97:1c:c4:34:75:79:c5:a5:3c:1b:a4:87: b0:2a:ee:49:e0:1d:79:bf:e8:ee:90:6f:76:d8:3f:68:11:68: f2:fa:0b:1b:84:a3:49:d2:fb:03:35:c6:cf:9f:91:da:19:b1: d3:f0:a1:1a:5e:a5:f4:52:49:f0:b1:22:6b:6f:7f:9f:a8:35: 6e:8b:89:0e:d5:2b:de:93:01:b1:f3:5b:21:9c:0c:3a:1e:1c: 06:3a:83:fa -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7NNyRGKIAhv9lkzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJkZTM0M2UtZGVkMy00M2FlLWIyMDctZTQ5MmMwZjg4 NTY2MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NDg2N2RiYTYtN2Y0NS00NDgwLWI3ZTUtMTVkZjY4N2U1YjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqm7Y2a9I+ARj5vaQ8qrQVetZEayOHdv0KdU C2y4XpKDJ2V/P/RdTF65W3esGY/t2yYi9W1xg1IgglHgSiRDZxlb0dduJUlYHYn/ wv6faOrvEFjpurmAwCS8IrMvfRQYNX4vVNASNLLx6t83CDNpS9JjIcx6qCJVwTri lzC06RUoe9fmcIAJMGo3kj9pAqLExOsZ/8NRBtW6iXzUfFuuLe9sYoW7QX33fqOw CzosBHw/OApDAQqSjaZsy3bN44DN+8FdRvcdyCFQ8D6Msd4C3SDbPCP11QTj6hoD Wg1HTMiWx9yTz+kWoVUl7VjEmKgEYMhIoM093Tgi455YMfu8ewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEK6iQvWZHFIydirplrvubC+E9F8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MmRl MzQzZS1kZWQzLTQzYWUtYjIwNy1lNDkyYzBmODg1NjYvYWY0NjUxN2MtY2ExMi0z ODkzLTk0YmYtNTZlMTdlYjAyNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzJkZTM0M2UtZGVkMy00M2FlLWIy MDctZTQ5MmMwZjg4NTY2LzcyZGUzNDNlLWRlZDMtNDNhZS1iMjA3LWU0OTJjMGY4 ODU2Ni5jcmwwHwYDVR0jBBgwFoAU183wKI29M1FMhbJfuD5KCaWPPPEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MmRlMzQzZS1kZWQzLTQzYWUtYjIwNy1lNDky YzBmODg1NjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBxzvqAwQC 0FzkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFJhXaKSIrsd31svqmW7vS6JiH5U+zkURkfOZCY8qqnSrRNu Br9gJB1HotdGaIRevgca2L9zdUACb6hKmpXiFQY6CaE4Fd/jUkUgfnuwi43ESLz8 YFUMAQ5jzDLw/WOL163Cvo+8CtUgNgUsbby2wCTThC1KMg/n2UsciDtLVu+7D49/ qV4CNijxgYbCiF0Sjz2N1VkstR5VPcDSslrMWbF/8PiiL0ylzJccxDR1ecWlPBuk h7Aq7kngHXm/6O6Qb3bYP2gRaPL6CxuEo0nS+wM1xs+fkdoZsdPwoRpepfRSSfCx Imtvf5+oNW6LiQ7VK96TAbHzWyGcDDoeHAY6g/o= -----END CERTIFICATE-----Generated at Sat Sep 12 14:24:20 2026 by rpki-client