$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa File: 4c146698-99de-3bf6-915e-d2a6ca46429b.roa (raw, json) Hash identifier: 1rIv8Q16WEGaP9tWwgd1LAU1y0KBj4oWQr/bQmyJnKg= Subject key identifier: D8:60:05:79:F1:48:C0:35:36:4D:4D:73:99:BF:36:D6:94:E4:89:19 Certificate issuer: /CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Certificate serial: 010D0C9F4328584F71ED9BB6CA473EE1E26C027C Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 22794 IP address blocks: 131.226.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9b:b6:ca:47:3e:e1:e2:6c:02:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=0fac3bfb-ff25-41b6-b286-94f47d392097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:2c:62:c3:4a:45:ba:3d:40:3b:da:de:33: 90:01:04:fd:56:56:84:3a:ec:cb:11:0b:96:38:20: 12:a1:44:2c:ed:4e:06:c3:3c:b4:27:29:47:08:a9: 4e:4f:c4:97:e2:01:92:63:e4:8b:55:b7:38:f7:f5: fc:21:30:5a:7e:05:17:d1:23:ea:78:b2:e7:7a:7b: d3:05:8c:56:fe:6d:8f:f6:89:8e:fe:11:2c:1a:52: 9a:4c:29:7d:15:be:1b:0b:8f:68:9b:18:60:9f:a3: c0:c2:3c:4b:a6:9f:55:0f:05:44:a4:03:f8:33:2c: 82:16:52:b9:7a:b7:aa:77:f2:6c:ae:eb:f9:8b:c1: 21:e5:d2:24:ba:2e:c6:ac:21:51:f7:35:79:e4:9e: b1:5c:ad:a1:8f:5e:51:63:44:46:1f:ed:5a:e5:d7: a9:07:8b:65:15:4f:61:38:aa:ab:d7:bc:58:3b:cd: 8d:73:75:7f:a7:d7:e8:6a:94:70:dd:d0:7a:f4:3c: 07:92:77:dd:69:f3:f2:2a:40:9f:3d:49:2f:81:31: 2b:2c:68:11:43:2e:da:4e:ad:44:38:94:9a:17:c7: a4:17:70:87:06:25:76:c8:0f:de:58:d3:49:85:59: 3a:08:60:9b:eb:d7:6d:76:ce:bf:2e:0f:08:2e:91: 20:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:60:05:79:F1:48:C0:35:36:4D:4D:73:99:BF:36:D6:94:E4:89:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/4c146698-99de-3bf6-915e-d2a6ca46429b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl X509v3 Authority Key Identifier: keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer sbgp-ipAddrBlock: critical IPv4: 131.226.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:fc:88:84:21:85:13:d1:5f:8a:d9:fa:c4:4c:dc:49:bf:5a: 16:87:2d:e5:2d:4f:e4:7c:25:f1:3c:ba:14:de:ab:96:21:79: 5f:3d:ea:81:4e:23:21:f7:3b:23:3d:53:18:59:a3:16:dd:6f: 56:f8:51:24:c1:fe:cf:47:a2:83:01:74:31:9d:de:21:86:6d: 70:47:67:48:54:ce:ab:71:22:c6:62:1b:eb:fe:61:2b:8a:bb: 2b:84:43:3d:c8:1d:39:f2:02:2c:38:89:3b:36:c0:a5:22:2f: c7:9c:ef:37:2f:9e:0e:55:a1:af:8d:d1:62:09:fc:bd:18:02: f6:7c:ae:11:02:ae:12:bc:f7:8f:6b:bd:a2:fd:82:40:5e:42: a9:70:2a:fe:76:f8:1f:0a:f8:d3:4d:02:d3:05:32:40:4f:c9: e1:3f:d9:29:c0:6d:dc:aa:89:ae:75:71:6c:60:07:a7:e9:0e: 22:cf:c4:c8:3f:07:0e:ce:7a:d2:50:26:38:15:d8:f6:c8:e8: 7c:6e:ec:3c:4c:5b:6e:1b:17:ef:02:43:aa:d0:f4:e6:86:09: 97:17:25:ed:73:1e:ca:d2:5b:38:c5:33:6f:bd:7a:41:fa:59: b5:88:84:b7:17:10:96:22:7a:95:70:3d:6a:97:05:4b:c8:0c: 7e:4d:54:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Zu2ykc+4eJsAnwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4NmZlNTItNWI3Ny00NmI2LTk1MDItNTFjY2NjZjNh NzU1MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MGZhYzNiZmItZmYyNS00MWI2LWIyODYtOTRmNDdkMzkyMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriUsYsNKRbo9QDva3jOQAQT9VlaEOuzLEQuW OCASoUQs7U4Gwzy0JylHCKlOT8SX4gGSY+SLVbc49/X8ITBafgUX0SPqeLLnenvT BYxW/m2P9omO/hEsGlKaTCl9Fb4bC49omxhgn6PAwjxLpp9VDwVEpAP4MyyCFlK5 ereqd/Jsruv5i8Eh5dIkui7GrCFR9zV55J6xXK2hj15RY0RGH+1a5depB4tlFU9h OKqr17xYO82Nc3V/p9foapRw3dB69DwHknfdafPyKkCfPUkvgTErLGgRQy7aTq1E OJSaF8ekF3CHBiV2yA/eWNNJhVk6CGCb69dtds6/Lg8ILpEg6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhgBXnxSMA1Nk1Nc5m/NtaU5IkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2 ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNjY2NmM2E3NTUvNGMxNDY2OTgtOTlkZS0z YmY2LTkxNWUtZDJhNmNhNDY0MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWY4NmZlNTItNWI3Ny00NmI2LTk1 MDItNTFjY2NjZjNhNzU1L2FmODZmZTUyLTViNzctNDZiNi05NTAyLTUxY2NjY2Yz YTc1NS5jcmwwHwYDVR0jBBgwFoAUpCnYdby96fIjd9cnL82GRWj9YvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNj Y2NmM2E3NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGg+KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP8iIQhhRPRX4rZ+sRM3Em/WhaHLeUtT+R8JfE8uhTeq5YheV896oFO IyH3OyM9UxhZoxbdb1b4USTB/s9HooMBdDGd3iGGbXBHZ0hUzqtxIsZiG+v+YSuK uyuEQz3IHTnyAiw4iTs2wKUiL8ec7zcvng5Voa+N0WIJ/L0YAvZ8rhECrhK8949r vaL9gkBeQqlwKv52+B8K+NNNAtMFMkBPyeE/2SnAbdyqia51cWxgB6fpDiLPxMg/ Bw7OetJQJjgV2PbI6Hxu7DxMW24bF+8CQ6rQ9OaGCZcXJe1zHsrSWzjFM2+9ekH6 WbWIhLcXEJYiepVwPWqXBUvIDH5NVFE= -----END CERTIFICATE-----Generated at Sat Oct 10 23:09:27 2026 by rpki-client