$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/519e7b09-a5a1-3855-8709-07a3d744d492.roa File: 519e7b09-a5a1-3855-8709-07a3d744d492.roa (raw, json) Hash identifier: akjJfgPalj1nQTT4U3Em/mAiHS7Ua6fg2qMJakmKwgc= Subject key identifier: 02:0C:DA:08:8B:FD:CB:CA:FF:8A:67:90:8D:F7:2D:15:43:3A:ED:8B Certificate issuer: /CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Certificate serial: 010D0C9F4328584EA795D50C887B433E1C3B2CC0 Authority key identifier: F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/519e7b09-a5a1-3855-8709-07a3d744d492.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399955 IP address blocks: 96.45.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:d5:0c:88:7b:43:3e:1c:3b:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=897e1e30-e63d-4905-962d-917301aa8b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:ea:e7:54:c4:6e:b6:e0:90:b8:a0:bc:d9: 35:ac:ba:b5:4f:77:c7:50:13:2c:5b:0f:35:95:c4: 25:1a:25:dc:ca:ff:a0:8c:05:55:7b:79:3f:57:45: 50:da:9a:c8:db:f2:de:95:e5:b3:84:2a:56:42:4c: 72:3b:1d:34:64:bb:cb:01:9c:83:f4:1a:54:64:80: 22:9b:e1:1b:2d:80:13:06:da:59:10:73:03:c0:f4: f9:3c:61:98:d1:9c:06:1e:8d:75:f5:4c:70:6c:63: b3:19:29:58:2e:9f:7f:ee:f1:56:2c:ef:61:1a:b1: d5:70:be:1d:ac:16:ae:09:15:73:69:51:d4:30:84: f4:64:5b:72:68:35:1c:93:ff:cd:cf:61:59:04:9f: 00:d5:0d:ff:26:0d:b6:de:72:2f:3f:24:1f:01:a3: 62:fc:5d:78:1f:9c:67:d4:90:6c:a9:f6:92:eb:cb: 3e:7f:0a:a8:93:fe:8c:1d:2e:b8:a6:e5:8f:15:6f: c5:02:69:02:39:e7:e7:98:d1:1f:ea:45:94:4b:dd: df:7a:24:c0:5f:55:c1:76:f3:c6:bc:ac:71:d1:7a: a0:e8:08:eb:dc:c6:80:91:40:58:9c:64:27:b3:1d: 01:c2:ac:22:30:e1:3b:ff:c3:2b:86:17:34:36:7b: 71:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0C:DA:08:8B:FD:CB:CA:FF:8A:67:90:8D:F7:2D:15:43:3A:ED:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/519e7b09-a5a1-3855-8709-07a3d744d492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl X509v3 Authority Key Identifier: keyid:F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer sbgp-ipAddrBlock: critical IPv4: 96.45.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:96:b0:fa:dc:11:96:04:ef:ec:6e:73:4a:c3:a3:f3:39:cc: 06:05:fa:a4:f9:a0:ff:65:d4:a2:1a:6c:c5:21:ae:80:f3:2e: 3f:73:80:68:0f:0f:90:16:ca:40:62:61:07:da:da:b8:23:16: 98:e7:d4:46:a2:8a:9c:af:b9:18:d7:a6:99:53:a1:ce:b6:f6: 61:c8:81:a8:b9:a0:97:a5:e8:10:f9:3b:9c:7b:87:66:ac:22: 22:c4:71:98:be:ae:51:f6:e1:57:1a:09:24:e8:c1:19:a4:84: 55:82:2b:78:17:7f:24:7f:52:3a:00:60:86:c7:2c:d5:81:2e: 95:89:e2:0b:05:b6:ec:e4:a4:b7:4a:8a:25:0e:2b:1d:17:bd: d0:55:80:6c:de:9d:56:73:4a:36:cd:2e:34:80:68:10:30:5a: ff:f2:de:81:f7:98:34:08:13:4c:ce:64:62:83:40:97:21:5d: 69:f7:c9:1f:48:c5:80:b4:7f:4e:72:c8:27:b4:97:53:4f:58: b3:87:e1:99:45:be:db:bf:0b:87:1a:48:67:28:9c:fd:72:b7: 5d:70:45:4b:40:cd:7a:8b:96:a2:b8:44:19:60:12:77:73:4d: b8:1d:cf:3b:91:d5:72:36:35:e2:6f:eb:68:d2:73:20:01:e8: 0c:79:ee:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nldUMiHtDPhw7LMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4MmFjYzQtNTVmNS00ZmUyLWFmNzMtOTIzNjJlNDBi YmFhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODk3ZTFlMzAtZTYzZC00OTA1LTk2MmQtOTE3MzAxYWE4YjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1nq51TEbrbgkLigvNk1rLq1T3fHUBMsWw81 lcQlGiXcyv+gjAVVe3k/V0VQ2prI2/LeleWzhCpWQkxyOx00ZLvLAZyD9BpUZIAi m+EbLYATBtpZEHMDwPT5PGGY0ZwGHo119UxwbGOzGSlYLp9/7vFWLO9hGrHVcL4d rBauCRVzaVHUMIT0ZFtyaDUck//Nz2FZBJ8A1Q3/Jg223nIvPyQfAaNi/F14H5xn 1JBsqfaS68s+fwqok/6MHS64puWPFW/FAmkCOefnmNEf6kWUS93feiTAX1XBdvPG vKxx0Xqg6Ajr3MaAkUBYnGQnsx0BwqwiMOE7/8Mrhhc0NntxawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIM2giL/cvK/4pnkI33LRVDOu2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgy YWNjNC01NWY1LTRmZTItYWY3My05MjM2MmU0MGJiYWEvNTE5ZTdiMDktYTVhMS0z ODU1LTg3MDktMDdhM2Q3NDRkNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWY4MmFjYzQtNTVmNS00ZmUyLWFm NzMtOTIzNjJlNDBiYmFhL2FmODJhY2M0LTU1ZjUtNGZlMi1hZjczLTkyMzYyZTQw YmJhYS5jcmwwHwYDVR0jBBgwFoAU8PEbNC1f+rnWBnr8kjXUxKWeBcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgyYWNjNC01NWY1LTRmZTItYWY3My05MjM2 MmU0MGJiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYC00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSWsPrcEZYE7+xuc0rDo/M5zAYF+qT5oP9l1KIabMUhroDzLj9zgGgP D5AWykBiYQfa2rgjFpjn1EaiipyvuRjXpplToc629mHIgai5oJel6BD5O5x7h2as IiLEcZi+rlH24VcaCSTowRmkhFWCK3gXfyR/UjoAYIbHLNWBLpWJ4gsFtuzkpLdK iiUOKx0XvdBVgGzenVZzSjbNLjSAaBAwWv/y3oH3mDQIE0zOZGKDQJchXWn3yR9I xYC0f05yyCe0l1NPWLOH4ZlFvtu/C4caSGconP1yt11wRUtAzXqLlqK4RBlgEndz TbgdzzuR1XI2NeJv62jScyAB6Ax57hY= -----END CERTIFICATE-----Generated at Mon Sep 21 13:56:03 2026 by rpki-client