$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa File: af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa (raw, json) Hash identifier: menOIq+U5+qOlanPHUHAJKmRTYUbCwDferTQdfvxlV4= Subject key identifier: 7A:E6:1F:84:B9:DA:30:43:E6:00:E8:6C:3C:04:15:DD:22:EC:86:79 Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Certificate serial: 010D0C9F4328584F49886E618CA24F90D06B8F40 Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11377 IP address blocks: 216.20.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:6e:61:8c:a2:4f:90:d0:6b:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e62daeca-2d67-4820-8473-18b682865598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:e8:38:ec:35:4b:93:fd:50:82:93:fd:94: d6:18:88:bf:7a:b1:a1:b9:4f:ea:f1:a6:55:e2:47: 48:c9:ef:ab:a1:46:1c:9d:64:4d:b6:7f:3d:d0:34: f4:56:96:e7:81:ba:c7:04:0b:e8:9d:81:ee:0f:1b: ef:5e:ff:6c:01:fa:af:1c:66:3f:82:5a:5c:68:61: 61:94:e5:56:20:32:22:1f:49:bf:ca:97:4c:82:66: df:5c:97:3e:f0:ac:e3:c2:b9:e3:cc:9f:e2:67:89: 2c:75:8e:37:40:97:da:c7:50:34:da:14:9d:fe:75: 29:c9:75:94:4d:af:75:be:04:c9:f5:90:e5:59:13: 71:ab:52:5a:44:e3:ee:27:4b:30:40:7c:24:b6:de: 86:76:95:8d:69:1c:85:39:dc:80:01:e7:b7:b2:9c: 37:56:e4:c2:d6:3e:bd:df:78:0f:49:84:4f:de:1f: a8:9f:92:eb:3f:8d:93:8f:97:10:24:8c:47:ab:ce: c8:ba:53:9b:49:a0:b6:a2:77:b1:64:5a:61:9c:eb: a0:81:f9:03:b2:2e:70:fe:96:5e:d0:e2:7a:4b:74: 28:0b:f2:59:6a:c0:13:0c:71:ea:b4:ff:c1:76:dc: c5:07:c5:49:d1:bd:bb:7f:38:60:2e:e3:26:45:01: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E6:1F:84:B9:DA:30:43:E6:00:E8:6C:3C:04:15:DD:22:EC:86:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/af676e91-f574-3a35-a1eb-6f87b5a96c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl X509v3 Authority Key Identifier: keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer sbgp-ipAddrBlock: critical IPv4: 216.20.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:96:c3:58:fb:50:d6:28:51:6e:e8:c6:9f:ea:80:8d:29:b8: 7c:c3:48:1e:67:51:92:2f:41:5e:49:0b:18:f4:eb:0a:c8:4b: ab:9d:c8:22:8f:f0:8d:cb:2b:64:72:e4:39:fc:3f:4b:a2:ee: 4b:7f:d2:cb:66:81:9b:6e:65:63:3b:85:22:54:3e:7a:e6:19: c8:3a:36:27:56:34:04:5e:8b:b5:e4:f6:26:7b:f4:cb:b3:e0: 32:4c:98:1e:4e:35:ff:ab:49:ff:42:49:51:49:eb:21:c0:bf: 5a:64:60:6c:b7:e8:20:96:6d:f2:09:8e:9d:61:15:ef:ee:15: c4:a3:2e:38:9e:1d:94:18:e8:12:c3:d3:98:7f:67:ff:e1:2a: 8b:50:7a:a0:66:8a:a6:df:62:99:88:df:38:9a:5e:44:15:bb: df:b1:9e:b8:b1:93:46:85:ef:72:b4:f9:48:f7:cc:31:2a:0c: aa:54:5a:17:e4:97:25:86:09:98:28:3c:cb:53:73:41:71:e0: d4:33:0e:15:77:df:8b:88:70:93:a7:c5:b5:07:bb:fe:eb:c7: 36:fc:68:82:67:97:53:53:47:44:f5:7c:37:36:66:ff:27:ec: c7:e9:e3:a6:1b:64:bf:b1:28:a7:85:cc:5f:3c:87:ce:3e:f2: 80:07:a0:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiG5hjKJPkNBrj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1 MGI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTYyZGFlY2EtMmQ2Ny00ODIwLTg0NzMtMThiNjgyODY1NTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWLoOOw1S5P9UIKT/ZTWGIi/erGhuU/q8aZV 4kdIye+roUYcnWRNtn890DT0VpbngbrHBAvonYHuDxvvXv9sAfqvHGY/glpcaGFh lOVWIDIiH0m/ypdMgmbfXJc+8KzjwrnjzJ/iZ4ksdY43QJfax1A02hSd/nUpyXWU Ta91vgTJ9ZDlWRNxq1JaROPuJ0swQHwktt6GdpWNaRyFOdyAAee3spw3VuTC1j69 33gPSYRP3h+on5LrP42Tj5cQJIxHq87IulObSaC2onexZFphnOuggfkDsi5w/pZe 0OJ6S3QoC/JZasATDHHqtP/BdtzFB8VJ0b27fzhgLuMmRQFg9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrmH4S52jBD5gDobDwEFd0i7IZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0 ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvYWY2NzZlOTEtZjU3NC0z YTM1LWExZWItNmY4N2I1YTk2YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2BQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+Ww1j7UNYoUW7oxp/qgI0puHzDSB5nUZIvQV5JCxj06wrIS6udyCKP 8I3LK2Ry5Dn8P0ui7kt/0stmgZtuZWM7hSJUPnrmGcg6NidWNARei7Xk9iZ79Muz 4DJMmB5ONf+rSf9CSVFJ6yHAv1pkYGy36CCWbfIJjp1hFe/uFcSjLjieHZQY6BLD 05h/Z//hKotQeqBmiqbfYpmI3ziaXkQVu9+xnrixk0aF73K0+Uj3zDEqDKpUWhfk lyWGCZgoPMtTc0Fx4NQzDhV334uIcJOnxbUHu/7rxzb8aIJnl1NTR0T1fDc2Zv8n 7Mfp46YbZL+xKKeFzF88h84+8oAHoMg= -----END CERTIFICATE-----Generated at Sun Sep 27 06:04:32 2026 by rpki-client