$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa File: af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa (raw, json) Hash identifier: BeJauNCE/E2B7P2BZgRLh+yNxG2zU3DEWom/Dh/Rqcs= Subject key identifier: A5:BA:4D:5F:FB:5C:8E:E1:10:B3:5C:6E:67:F4:76:5E:89:D7:A4:29 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584F49850D6A14AB7F3F5344D800 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36492 IP address blocks: 172.102.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:0d:6a:14:ab:7f:3f:53:44:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=69d2b839-26cb-4697-9140-20fe2585bb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:d2:94:80:2c:f5:d2:ba:d6:8c:fe:21:cb: d8:e0:72:39:b4:b0:20:a0:a5:49:0c:87:e4:1a:5a: 15:25:12:51:68:99:53:3f:ba:dc:a8:82:08:91:92: b8:c2:8e:c3:80:bb:f1:68:98:b0:27:81:31:e8:fd: 8f:61:16:f3:b2:e9:16:ad:74:86:d8:eb:5f:15:5e: 6c:2d:e0:22:23:ba:ea:97:49:48:0a:f4:65:1b:50: dd:42:03:79:2d:f5:b3:53:50:1e:8e:58:f8:26:0e: 79:d0:41:8e:12:17:fb:52:08:7c:d3:1b:a7:3e:d8: f2:1c:56:9c:67:20:5b:ae:35:4d:dd:6f:e7:32:3c: 97:8e:3a:f8:d5:d8:8e:81:da:96:dc:64:69:3b:12: d7:09:ba:7f:af:c5:59:f2:5e:6a:f6:6e:95:bb:c6: 4e:4c:73:a1:b9:f1:e2:c1:db:26:a9:98:ba:72:70: 68:2b:99:31:d0:94:44:59:32:26:0b:38:c8:47:55: dd:4f:3f:90:bb:6e:c2:31:18:03:2a:70:0f:c7:43: 71:54:24:93:f9:62:f9:e7:15:2f:56:98:a0:ef:37: 08:92:ca:e2:31:55:2b:62:d1:eb:4c:7a:70:47:b1: 1a:8c:58:f4:65:66:d8:90:f4:de:fd:b8:9b:69:45: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BA:4D:5F:FB:5C:8E:E1:10:B3:5C:6E:67:F4:76:5E:89:D7:A4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:64:34:6e:96:1e:45:c3:78:e6:f1:a3:6b:97:5e:5f:a6:92: 79:9b:56:19:19:99:9b:bc:62:69:ea:0b:90:34:31:8a:af:66: 9a:5e:44:4f:68:67:3a:ba:35:a6:86:d0:b5:61:42:62:78:a4: d3:ca:22:f0:c9:cf:36:c6:e0:77:02:9b:66:09:5d:62:df:1a: df:59:5d:cd:7e:ee:86:69:8f:2f:43:db:35:bd:a0:95:64:82: dc:6b:ec:0e:e5:91:9e:ce:3f:d5:73:49:34:c2:f2:7e:c4:a0: a2:09:48:a3:15:69:63:13:57:fa:c1:11:0e:cf:38:ec:83:2c: 05:40:88:53:77:03:3f:09:ae:46:c3:b2:0e:89:38:5e:c2:7a: be:27:3e:c4:eb:77:da:75:d1:64:9f:e2:47:cc:1e:de:be:6a: f7:cf:27:ea:77:e8:b6:26:66:d5:94:58:2b:47:9b:a4:b8:cd: 72:15:4b:e9:39:46:a5:28:d3:e4:43:28:22:af:f9:9e:9f:b3: 8d:17:d0:a4:31:29:f3:47:3e:6f:60:96:46:47:5a:0f:94:26: 0c:f9:52:76:6f:8f:75:7f:fd:38:7e:9b:2b:b5:9b:35:1e:33: 75:58:45:c9:e7:22:b0:b0:69:2b:8b:34:c4:8a:09:e8:31:d6: b3:b4:e6:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQ1qFKt/P1NE2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjlkMmI4MzktMjZjYi00Njk3LTkxNDAtMjBmZTI1ODViYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqPSlIAs9dK61oz+IcvY4HI5tLAgoKVJDIfk GloVJRJRaJlTP7rcqIIIkZK4wo7DgLvxaJiwJ4Ex6P2PYRbzsukWrXSG2OtfFV5s LeAiI7rql0lICvRlG1DdQgN5LfWzU1Aejlj4Jg550EGOEhf7Ugh80xunPtjyHFac ZyBbrjVN3W/nMjyXjjr41diOgdqW3GRpOxLXCbp/r8VZ8l5q9m6Vu8ZOTHOhufHi wdsmqZi6cnBoK5kx0JREWTImCzjIR1XdTz+Qu27CMRgDKnAPx0NxVCST+WL55xUv Vpig7zcIksriMVUrYtHrTHpwR7EajFj0ZWbYkPTe/bibaUWK1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW6TV/7XI7hELNcbmf0dl6J16QpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvYWYxZTQ1YmItM2Q1Zi0z YTNiLTg4MTgtODg0ZWNlNmMxNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGYJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhkNG6WHkXDeObxo2uXXl+mknmbVhkZmZu8YmnqC5A0MYqvZppeRE9o Zzq6NaaG0LVhQmJ4pNPKIvDJzzbG4HcCm2YJXWLfGt9ZXc1+7oZpjy9D2zW9oJVk gtxr7A7lkZ7OP9VzSTTC8n7EoKIJSKMVaWMTV/rBEQ7POOyDLAVAiFN3Az8JrkbD sg6JOF7Cer4nPsTrd9p10WSf4kfMHt6+avfPJ+p36LYmZtWUWCtHm6S4zXIVS+k5 RqUo0+RDKCKv+Z6fs40X0KQxKfNHPm9glkZHWg+UJgz5UnZvj3V//Th+myu1mzUe M3VYRcnnIrCwaSuLNMSKCegx1rO05nE= -----END CERTIFICATE-----Generated at Sat Sep 26 08:38:52 2026 by rpki-client