$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa File: ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa (raw, json) Hash identifier: zmoo19jpyrPsz419NdQAWEenUHYSZYPCZfR2ko2/vaI= Subject key identifier: AA:98:FB:66:48:2F:52:DE:BB:BF:9B:20:E0:5A:7D:14:A0:42:37:65 Certificate issuer: /CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Certificate serial: 010D0C9F4328584D789FCAF3264F2F13DCCA2480 Authority key identifier: F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa Signing time: Sat 11 Apr 2026 13:00:31 +0000 ROA not before: Sat 11 Apr 2026 13:00:31 +0000 ROA not after: Fri 10 Jul 2026 13:00:31 +0000 asID: 5650 IP address blocks: 96.45.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:78:9f:ca:f3:26:4f:2f:13:dc:ca:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Validity Not Before: Apr 11 13:00:31 2026 GMT Not After : Jul 10 13:00:31 2026 GMT Subject: CN=0049bbf6-086b-434d-a81c-00c9c086b681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:88:90:62:58:71:06:b7:47:d9:c0:b1:e6: 0e:13:0b:11:a6:42:16:a1:15:38:02:3a:d8:67:3d: 7b:f6:2a:3a:71:81:93:49:af:02:43:2e:93:96:be: 31:d7:4e:df:0a:9d:38:81:ce:7f:f6:78:44:32:e8: e4:a0:45:6f:f5:f2:fe:ca:69:b7:b1:80:13:b1:6f: 89:6b:e8:41:54:cc:5b:d0:83:14:c6:ea:4d:3b:66: 78:20:f9:24:8a:c3:fb:aa:e5:cb:ed:c4:41:79:79: c6:42:bf:ab:24:8b:7f:db:b2:d9:e8:1e:e3:ba:18: 1f:09:6b:f0:80:59:fb:8d:04:82:02:61:83:f2:a8: 29:7f:16:01:ad:19:f3:9e:fe:90:7f:90:6e:d6:5d: a4:43:d0:7d:3a:5b:bf:8a:56:5b:5a:54:e8:26:78: b7:8a:dc:df:49:63:2c:6d:ea:5d:c2:61:87:3e:60: 6a:73:ad:fc:95:cb:9c:00:06:75:cb:72:66:8e:32: 1d:59:16:87:c5:89:04:20:3b:fc:78:48:ae:a7:45: a4:0a:b1:61:10:46:a2:1f:f0:bd:14:08:51:c3:54: e1:d3:37:fc:de:1b:e4:cb:e4:8f:0f:6b:e0:a4:c5: bb:3e:bd:fa:00:1d:ce:4c:5d:89:9e:d9:12:f8:33: 3c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:98:FB:66:48:2F:52:DE:BB:BF:9B:20:E0:5A:7D:14:A0:42:37:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl X509v3 Authority Key Identifier: keyid:F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer sbgp-ipAddrBlock: critical IPv4: 96.45.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c0:12:91:72:2e:03:fb:6e:6c:87:2b:29:fb:9a:14:34:dc: 24:0c:2b:0a:18:6e:f3:27:07:59:ea:b3:37:97:a7:30:eb:29: 01:64:bb:88:45:9f:42:3f:5c:db:dc:f3:f8:dd:73:10:3f:c7: e3:62:c7:cb:ba:da:f1:07:f6:e7:16:ae:89:34:d9:32:19:f4: 3e:09:91:c9:93:8e:5c:63:7e:77:af:ed:b7:52:27:9b:c7:9e: 7a:3c:31:ab:a8:c9:11:87:36:55:59:96:c9:39:e2:e6:13:48: 0f:23:6f:13:9b:df:a2:31:22:fa:6d:72:c3:e7:d5:0e:1d:9a: e0:5f:82:e4:2e:c5:16:84:6d:50:b4:7d:52:f2:58:08:9e:ed: 08:b8:ad:c4:1a:a5:fd:61:3c:db:26:20:a7:68:01:64:45:9c: 7e:10:e8:90:37:c2:b3:bd:5c:a6:9c:78:84:1f:ff:86:9a:9e: 6b:c9:67:8b:96:4b:97:e1:d2:98:bc:8d:31:95:3e:b1:d5:97: 71:5b:45:87:61:e7:cd:11:f0:5d:d3:93:1b:cd:34:b4:e7:87: 9d:ac:fc:0b:06:b0:af:5a:b4:b0:40:4f:44:63:a2:1c:10:c8: d7:69:7a:12:3f:e3:f8:4c:84:30:4c:e8:91:9b:5b:46:6c:82: 20:37:3b:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE14n8rzJk8vE9zKJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4MmFjYzQtNTVmNS00ZmUyLWFmNzMtOTIzNjJlNDBi YmFhMB4XDTI2MDQxMTEzMDAzMVoXDTI2MDcxMDEzMDAzMVowLzEtMCsGA1UEAxMk MDA0OWJiZjYtMDg2Yi00MzRkLWE4MWMtMDBjOWMwODZiNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKWIkGJYcQa3R9nAseYOEwsRpkIWoRU4AjrY Zz179io6cYGTSa8CQy6Tlr4x107fCp04gc5/9nhEMujkoEVv9fL+ymm3sYATsW+J a+hBVMxb0IMUxupNO2Z4IPkkisP7quXL7cRBeXnGQr+rJIt/27LZ6B7juhgfCWvw gFn7jQSCAmGD8qgpfxYBrRnznv6Qf5Bu1l2kQ9B9Olu/ilZbWlToJni3itzfSWMs bepdwmGHPmBqc638lcucAAZ1y3JmjjIdWRaHxYkEIDv8eEiup0WkCrFhEEaiH/C9 FAhRw1Th0zf83hvky+SPD2vgpMW7Pr36AB3OTF2JntkS+DM8iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqY+2ZIL1Leu7+bIOBafRSgQjdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgy YWNjNC01NWY1LTRmZTItYWY3My05MjM2MmU0MGJiYWEvY2E2ZmYzODctYTMxZC0z MjA5LTllMjgtNDhiYmQ0YWI3Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWY4MmFjYzQtNTVmNS00ZmUyLWFm NzMtOTIzNjJlNDBiYmFhL2FmODJhY2M0LTU1ZjUtNGZlMi1hZjczLTkyMzYyZTQw YmJhYS5jcmwwHwYDVR0jBBgwFoAU8PEbNC1f+rnWBnr8kjXUxKWeBcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgyYWNjNC01NWY1LTRmZTItYWY3My05MjM2 MmU0MGJiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYC00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjAEpFyLgP7bmyHKyn7mhQ03CQMKwoYbvMnB1nqszeXpzDrKQFku4hF n0I/XNvc8/jdcxA/x+Nix8u62vEH9ucWrok02TIZ9D4JkcmTjlxjfnev7bdSJ5vH nno8MauoyRGHNlVZlsk54uYTSA8jbxOb36IxIvptcsPn1Q4dmuBfguQuxRaEbVC0 fVLyWAie7Qi4rcQapf1hPNsmIKdoAWRFnH4Q6JA3wrO9XKaceIQf/4aanmvJZ4uW S5fh0pi8jTGVPrHVl3FbRYdh580R8F3TkxvNNLTnh52s/AsGsK9atLBAT0RjohwQ yNdpehI/4/hMhDBM6JGbW0ZsgiA3O7Q= -----END CERTIFICATE-----Generated at Fri Apr 17 06:54:43 2026 by rpki-client