$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0818f2-c728-33e7-81fa-a3207a132502.roa File: af0818f2-c728-33e7-81fa-a3207a132502.roa (raw, json) Hash identifier: l7JYgJ1droN1BRJdKZsJRIHdY4BBSsKM0bpBR7KSTNA= Subject key identifier: 34:EC:7F:A7:45:D1:EE:00:9B:EB:77:B2:08:2F:DF:8D:E7:7F:F9:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E2308162FA1EAF6EBEB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0818f2-c728-33e7-81fa-a3207a132502.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 107.3.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:23:08:16:2f:a1:ea:f6:eb:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=098a7307-720d-4403-af0b-47a3622686a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:c4:bd:c4:eb:c6:a4:f6:91:d3:74:4b:88: 73:8e:ae:ae:b9:bb:3b:18:44:7c:96:5c:81:f8:15: 87:ab:02:cd:63:e4:eb:73:fc:cc:5a:02:ac:1b:58: 04:ec:cc:33:ee:95:fb:a8:97:d7:92:9e:7e:16:f3: 59:dc:98:50:7e:fb:37:cd:b1:34:00:63:12:0b:86: b4:83:7d:f5:91:b8:ac:cb:53:b1:bd:77:cb:88:5f: 18:e5:65:97:54:c4:0c:a0:05:48:56:ee:ef:43:5a: be:a2:4d:6e:8f:4a:e4:99:d0:33:fb:6f:da:e6:2c: 96:d8:53:4b:85:af:59:ec:1e:5f:28:c8:8f:13:92: c5:ff:23:9f:7d:ca:13:c9:4d:cf:e1:44:c4:73:08: 67:04:95:8f:d4:58:4d:f2:76:af:78:d9:c5:f1:45: 98:31:34:91:6b:55:4c:67:53:f3:95:0a:9f:ab:a7: f3:7f:7c:ad:f1:03:69:fd:0b:63:72:6a:15:a6:64: bf:2b:a3:2c:5d:9f:7a:8d:ad:46:82:5a:4f:25:96: 4f:18:dc:c0:53:56:9e:ca:28:66:6c:81:8e:f0:23: 44:37:ea:3a:fb:fd:69:14:b0:22:50:4d:ff:90:84: 65:d7:53:5b:a8:56:b5:76:46:b4:69:e6:e6:84:51: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EC:7F:A7:45:D1:EE:00:9B:EB:77:B2:08:2F:DF:8D:E7:7F:F9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0818f2-c728-33e7-81fa-a3207a132502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.3.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f2:5e:46:b4:d4:cc:5c:04:88:39:29:77:c9:78:10:61:7c: af:06:27:d2:96:02:7f:77:c7:3b:e0:18:be:14:67:af:da:76: dd:5e:03:cc:6f:c9:8f:12:6b:c5:82:aa:c2:6f:98:5b:a8:7b: 19:c9:e0:a7:47:1b:05:17:59:df:65:61:e3:58:71:2d:9f:88: a1:28:61:67:bb:ae:9b:c0:53:af:3f:6b:88:da:ad:2f:e8:1f: 6e:8e:6c:1a:1d:2c:65:71:a1:d9:83:d5:f3:5d:31:28:bd:87: b1:a5:44:0f:5c:7f:d8:e4:ba:54:61:e9:49:0a:83:57:0f:be: f8:99:2c:3e:7b:9f:80:24:d0:74:e6:7f:64:da:fa:cf:de:de: f8:bb:74:e6:fa:81:10:e7:89:b1:6d:f8:db:b6:f6:fa:cd:07: 34:30:d1:18:2b:bb:a0:76:33:e2:7a:b3:40:90:88:da:cc:59: 81:03:ab:a0:2c:a7:d6:bb:97:a8:43:82:c3:7c:49:fc:f9:3f: b5:b8:aa:47:a2:48:91:21:e5:ba:c7:9c:d6:bc:ec:44:e5:1f: ff:ed:35:d4:39:0c:c8:0e:29:a4:ab:1c:cc:84:ab:68:8c:ec: 90:fc:2c:c4:28:fd:6d:67:52:a6:a9:ac:76:ae:c2:a2:4e:f6: 04:60:c6:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RniMIFi+h6vbr64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDk4YTczMDctNzIwZC00NDAzLWFmMGItNDdhMzYyMjY4NmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPjEvcTrxqT2kdN0S4hzjq6uubs7GER8llyB +BWHqwLNY+Trc/zMWgKsG1gE7Mwz7pX7qJfXkp5+FvNZ3JhQfvs3zbE0AGMSC4a0 g331kbisy1OxvXfLiF8Y5WWXVMQMoAVIVu7vQ1q+ok1uj0rkmdAz+2/a5iyW2FNL ha9Z7B5fKMiPE5LF/yOffcoTyU3P4UTEcwhnBJWP1FhN8naveNnF8UWYMTSRa1VM Z1PzlQqfq6fzf3yt8QNp/QtjcmoVpmS/K6MsXZ96ja1GglpPJZZPGNzAU1aeyihm bIGO8CNEN+o6+/1pFLAiUE3/kIRl11NbqFa1dka0aebmhFHd6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTsf6dF0e4Am+t3sggv343nf/kTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWYwODE4ZjItYzcyOC0z M2U3LTgxZmEtYTMyMDdhMTMyNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjyXka01MxcBIg5KXfJeBBhfK8GJ9KWAn93xzvgGL4UZ6/adt1eA8xv yY8Sa8WCqsJvmFuoexnJ4KdHGwUXWd9lYeNYcS2fiKEoYWe7rpvAU68/a4jarS/o H26ObBodLGVxodmD1fNdMSi9h7GlRA9cf9jkulRh6UkKg1cPvviZLD57n4Ak0HTm f2Ta+s/e3vi7dOb6gRDnibFt+Nu29vrNBzQw0Rgru6B2M+J6s0CQiNrMWYEDq6As p9a7l6hDgsN8Sfz5P7W4qkeiSJEh5brHnNa87ETlH//tNdQ5DMgOKaSrHMyEq2iM 7JD8LMQo/W1nUqaprHauwqJO9gRgxlQ= -----END CERTIFICATE-----Generated at Sun Sep 20 20:15:41 2026 by rpki-client