$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/3142eba4-c8d5-31a5-a25a-78d92dcdb82f.roa File: 3142eba4-c8d5-31a5-a25a-78d92dcdb82f.roa (raw, json) Hash identifier: XR3O6fAQu/LDP5pqgWc0r4MNfRPkPk8yjP0Bv+lQbgs= Subject key identifier: 88:6F:19:6B:B7:A9:EF:3A:09:A6:BE:F7:D5:22:F5:AD:7E:F9:DC:5F Certificate issuer: /CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Certificate serial: 010D0C9F4328584EEA874AFBB9755E898B731D80 Authority key identifier: A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/3142eba4-c8d5-31a5-a25a-78d92dcdb82f.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 174 IP address blocks: 216.226.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:4a:fb:b9:75:5e:89:8b:73:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=7310d0aa-cb75-49fc-a1a4-694a2831c507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:90:5c:56:ff:19:51:0e:49:5b:f4:1a:f8: 15:91:3a:eb:de:95:f9:b4:dd:41:0d:88:a0:47:cc: 57:8d:86:66:ed:89:a0:6a:92:6c:e9:3b:d3:dd:12: 82:80:28:6d:43:b0:87:4d:90:ae:fa:43:56:51:64: 69:e9:1a:3e:84:99:bd:d2:3a:8b:b7:3c:44:7e:c9: 17:83:bb:bf:94:cd:cf:b0:3f:d6:16:bf:68:3a:66: 10:41:59:fa:c1:ec:f9:f5:8b:47:cf:90:79:5c:4d: 25:6d:75:2d:f9:62:d7:9f:28:ee:26:5b:77:36:27: 33:16:6b:31:7d:28:49:48:a0:17:26:f2:9f:2f:cd: b8:a6:b2:68:57:db:3a:fd:a9:f6:d4:88:88:9b:54: 97:8a:75:ca:b6:5f:01:3f:c7:f6:64:bb:91:db:86: 49:68:94:2e:da:e9:53:0f:f6:1b:09:d7:e7:17:1e: 94:a1:4c:cf:7a:8d:87:fa:f7:84:3a:09:88:5d:2a: 89:10:fc:24:0c:e9:68:85:89:c5:b7:db:96:cd:68: 7a:48:38:d2:1f:08:f2:09:43:9d:0c:b8:56:6d:5f: 54:d8:50:c4:5e:c4:16:68:da:18:a0:db:22:7a:09: 0c:e5:ee:ef:f7:fc:2a:83:f6:56:cc:15:d8:25:52: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6F:19:6B:B7:A9:EF:3A:09:A6:BE:F7:D5:22:F5:AD:7E:F9:DC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/3142eba4-c8d5-31a5-a25a-78d92dcdb82f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl X509v3 Authority Key Identifier: keyid:A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer sbgp-ipAddrBlock: critical IPv4: 216.226.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d4:67:35:9a:c5:41:77:53:49:33:d3:d6:f5:5d:18:48:a4: 32:be:02:5a:6d:e5:cd:2d:0c:2b:d9:da:29:6e:09:f2:b7:6a: 4c:36:ba:63:c7:09:1c:75:a8:8d:3d:bb:f4:da:78:61:6e:05: fb:8f:f3:36:01:7c:d6:5b:7d:18:1f:28:ce:ec:0d:93:36:50: 16:1c:9f:9b:e2:41:48:bf:b8:70:0b:4a:c6:12:73:57:67:82: 42:92:ff:10:e8:48:57:44:07:f3:2d:a8:cd:10:f7:f4:75:fc: a7:51:a7:8e:6b:95:f6:40:77:78:6e:e8:46:61:66:89:c2:cb: e2:54:e3:1c:01:26:4d:14:31:34:24:3b:3e:2d:5a:33:91:96: fc:7d:0c:ee:e6:3d:34:a5:b4:ed:eb:ae:e9:a5:7b:17:35:8b: 5f:26:3e:0e:6e:d5:2f:98:2f:3e:08:77:07:d2:11:d2:64:79: c5:33:d5:b5:97:7a:13:c7:bc:03:45:02:d7:42:76:98:6a:5e: 20:76:f3:88:c0:97:28:d8:2e:94:ae:3a:75:fb:45:62:87:e6: f5:e5:fd:19:8e:b4:a9:0b:fe:64:f8:de:f1:78:33:8c:2d:58: 37:cd:dd:32:bc:03:6d:90:ed:cf:22:d2:dd:bf:bf:c3:e8:2b: 30:f4:ce:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh0r7uXVeiYtzHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYwMGRkOWMtYWM3ZC00ZmQzLTg0YTEtZWE2ZjY2YmMw MDA3MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NzMxMGQwYWEtY2I3NS00OWZjLWExYTQtNjk0YTI4MzFjNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIaQXFb/GVEOSVv0GvgVkTrr3pX5tN1BDYig R8xXjYZm7YmgapJs6TvT3RKCgChtQ7CHTZCu+kNWUWRp6Ro+hJm90jqLtzxEfskX g7u/lM3PsD/WFr9oOmYQQVn6wez59YtHz5B5XE0lbXUt+WLXnyjuJlt3NiczFmsx fShJSKAXJvKfL824prJoV9s6/an21IiIm1SXinXKtl8BP8f2ZLuR24ZJaJQu2ulT D/YbCdfnFx6UoUzPeo2H+veEOgmIXSqJEPwkDOlohYnFt9uWzWh6SDjSHwjyCUOd DLhWbV9U2FDEXsQWaNoYoNsiegkM5e7v9/wqg/ZWzBXYJVIY+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhvGWu3qe86Caa+99Ui9a1++dxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAw ZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZmNjZiYzAwMDcvMzE0MmViYTQtYzhkNS0z MWE1LWEyNWEtNzhkOTJkY2RiODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYwMGRkOWMtYWM3ZC00ZmQzLTg0 YTEtZWE2ZjY2YmMwMDA3L2FmMDBkZDljLWFjN2QtNGZkMy04NGExLWVhNmY2NmJj MDAwNy5jcmwwHwYDVR0jBBgwFoAUo5Wu4k9S7a8QQi6BuJvb5jyuACgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAwZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZm NjZiYzAwMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OJDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHUZzWaxUF3U0kz09b1XRhIpDK+Alpt5c0tDCvZ2iluCfK3akw2umPH CRx1qI09u/TaeGFuBfuP8zYBfNZbfRgfKM7sDZM2UBYcn5viQUi/uHALSsYSc1dn gkKS/xDoSFdEB/MtqM0Q9/R1/KdRp45rlfZAd3hu6EZhZonCy+JU4xwBJk0UMTQk Oz4tWjORlvx9DO7mPTSltO3rrumlexc1i18mPg5u1S+YLz4IdwfSEdJkecUz1bWX ehPHvANFAtdCdphqXiB284jAlyjYLpSuOnX7RWKH5vXl/RmOtKkL/mT43vF4M4wt WDfN3TK8A22Q7c8i0t2/v8PoKzD0zlA= -----END CERTIFICATE-----Generated at Tue Sep 22 09:05:49 2026 by rpki-client