$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/36484c89-fa9e-3b7d-82d1-ae025943c86e.roa File: 36484c89-fa9e-3b7d-82d1-ae025943c86e.roa (raw, json) Hash identifier: nwXhu6oK6+IA1gHp2rEjtSvyy6MQzJmNiBn0EuyRzRc= Subject key identifier: 99:A5:47:3E:DE:14:C0:D6:DC:68:6A:8B:C5:3F:30:CD:11:C0:13:1D Certificate issuer: /CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Certificate serial: 010D0C9F4328584FA85E49B09FFBC5AEEC3141C0 Authority key identifier: F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/36484c89-fa9e-3b7d-82d1-ae025943c86e.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 7029 IP address blocks: 96.45.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5e:49:b0:9f:fb:c5:ae:ec:31:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=f25fbec7-f08a-4ac2-b00d-c24088697eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:38:67:23:57:9e:7e:47:d2:5f:96:77:53: 57:99:5e:75:a4:6b:29:e5:c0:11:5a:08:34:6e:62: 05:e0:ce:fb:83:d4:a7:d5:e8:01:f8:95:60:d4:27: e0:fe:e2:46:a7:9a:ef:eb:d0:52:c2:b6:37:64:d6: e0:82:dd:7f:d3:f7:7b:d1:6b:8a:1b:da:c4:b4:ad: 67:0b:45:4a:93:34:63:f3:0e:8e:be:1d:e6:26:57: 90:5a:8f:01:cf:7b:eb:38:0c:09:a6:29:ab:9b:65: 88:77:e1:b7:f3:2a:26:72:8f:2b:37:bc:e9:1c:da: 66:63:a5:b9:32:86:a7:3d:0a:1d:06:18:6f:a4:e6: 12:9c:dc:fb:f2:9e:be:92:fc:73:d4:00:ac:89:f1: 47:53:b3:12:0e:d6:52:67:ef:88:5f:b5:f4:b0:67: d9:9c:b9:2a:60:0c:0f:8f:7c:cc:be:a4:6a:bf:16: b7:25:bd:b8:2a:e4:ca:9e:89:6f:01:4d:42:ec:ba: 85:83:3c:39:28:1a:21:08:78:53:87:28:e7:fa:b1: ae:ea:7c:17:15:54:1e:44:49:ad:1e:49:1f:34:5c: ad:02:b4:8e:f0:c7:af:76:1a:d9:53:a3:4a:2f:f7: 2d:97:21:0f:e9:27:75:a1:aa:31:10:f4:29:bd:ad: a1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A5:47:3E:DE:14:C0:D6:DC:68:6A:8B:C5:3F:30:CD:11:C0:13:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/36484c89-fa9e-3b7d-82d1-ae025943c86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl X509v3 Authority Key Identifier: keyid:F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer sbgp-ipAddrBlock: critical IPv4: 96.45.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:de:f6:ef:aa:8d:5f:40:e3:1f:ce:ee:b3:af:6a:c9:9e:29: f4:75:2b:60:96:5c:3e:c0:f8:a0:67:71:9c:7b:4a:2f:bf:81: 18:71:7b:50:88:8e:41:b3:82:64:96:87:ce:10:c5:33:0d:1b: 90:b5:31:67:e8:5e:92:50:8e:2b:a7:4b:f3:57:e4:c6:0b:8d: a8:80:87:d4:71:51:b1:ea:7d:eb:15:5a:ba:d2:e4:b0:92:e5: 8a:f8:c9:1e:97:d9:bc:39:ac:19:bc:13:d0:c4:97:29:3f:be: b5:76:39:b3:87:7a:9c:9a:e7:c8:48:65:8b:a9:c8:03:cd:cd: 46:cd:47:9f:29:9b:7f:5d:02:fd:14:c9:1c:8a:ac:b8:ad:bd: 51:4d:21:bc:e3:19:28:56:2d:34:4e:7c:14:77:4e:ee:84:17: e7:d1:ae:76:e7:b2:c2:b0:d7:bb:07:ed:e8:cf:33:ff:25:22: c6:c2:9c:fb:e5:54:36:6a:96:f6:3b:c9:ef:48:45:a2:e0:dd: 89:e6:3f:75:94:f7:6f:37:56:bc:e7:8f:bf:56:87:98:0a:90: 31:39:ac:a1:6c:23:d1:35:4a:d6:07:13:8a:8b:2e:9b:3e:86: 0c:81:2d:47:18:72:2a:3f:60:a6:6d:3f:cb:cf:d6:9f:5f:35: a6:45:22:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXkmwn/vFruwxQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4MmFjYzQtNTVmNS00ZmUyLWFmNzMtOTIzNjJlNDBi YmFhMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZjI1ZmJlYzctZjA4YS00YWMyLWIwMGQtYzI0MDg4Njk3ZWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbs4ZyNXnn5H0l+Wd1NXmV51pGsp5cARWgg0 bmIF4M77g9Sn1egB+JVg1Cfg/uJGp5rv69BSwrY3ZNbggt1/0/d70WuKG9rEtK1n C0VKkzRj8w6Ovh3mJleQWo8Bz3vrOAwJpimrm2WId+G38yomco8rN7zpHNpmY6W5 MoanPQodBhhvpOYSnNz78p6+kvxz1ACsifFHU7MSDtZSZ++IX7X0sGfZnLkqYAwP j3zMvqRqvxa3Jb24KuTKnolvAU1C7LqFgzw5KBohCHhThyjn+rGu6nwXFVQeREmt HkkfNFytArSO8MevdhrZU6NKL/ctlyEP6Sd1oaoxEPQpva2hHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmlRz7eFMDW3Ghqi8U/MM0RwBMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgy YWNjNC01NWY1LTRmZTItYWY3My05MjM2MmU0MGJiYWEvMzY0ODRjODktZmE5ZS0z YjdkLTgyZDEtYWUwMjU5NDNjODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWY4MmFjYzQtNTVmNS00ZmUyLWFm NzMtOTIzNjJlNDBiYmFhL2FmODJhY2M0LTU1ZjUtNGZlMi1hZjczLTkyMzYyZTQw YmJhYS5jcmwwHwYDVR0jBBgwFoAU8PEbNC1f+rnWBnr8kjXUxKWeBcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgyYWNjNC01NWY1LTRmZTItYWY3My05MjM2 MmU0MGJiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYC00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJne9u+qjV9A4x/O7rOvasmeKfR1K2CWXD7A+KBncZx7Si+/gRhxe1CI jkGzgmSWh84QxTMNG5C1MWfoXpJQjiunS/NX5MYLjaiAh9RxUbHqfesVWrrS5LCS 5Yr4yR6X2bw5rBm8E9DElyk/vrV2ObOHepya58hIZYupyAPNzUbNR58pm39dAv0U yRyKrLitvVFNIbzjGShWLTROfBR3Tu6EF+fRrnbnssKw17sH7ejPM/8lIsbCnPvl VDZqlvY7ye9IRaLg3YnmP3WU9283Vrznj79Wh5gKkDE5rKFsI9E1StYHE4qLLps+ hgyBLUcYcio/YKZtP8vP1p9fNaZFIog= -----END CERTIFICATE-----Generated at Sun Nov 15 21:13:53 2026 by rpki-client