$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa File: f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa (raw, json) Hash identifier: 75k0Ykmd3Ynbu9squCz+YcGJ3Cu0cAiUD4ue5ByfwlY= Subject key identifier: EC:5D:5C:48:DD:94:1E:EC:ED:84:41:43:08:5D:36:84:32:9E:A5:46 Certificate issuer: /CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Certificate serial: 010D0C9F4328584EE921F34CCB02B14D6E58B8E0 Authority key identifier: A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 174 IP address blocks: 109.175.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:f3:4c:cb:02:b1:4d:6e:58:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=b0a840c2-8201-44a1-ade3-763bbc709727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d1:17:ff:56:f7:9d:69:4e:27:6a:16:cf:d5: 7f:a0:35:85:37:cf:97:fa:8a:62:08:b8:fe:b2:2a: 11:b8:79:22:ea:11:bb:5a:5b:2e:df:97:93:a2:33: 0d:7b:72:64:0d:32:c0:eb:09:e2:db:7b:0a:f5:98: 51:f7:fc:15:92:3a:68:cc:2f:c2:68:9b:08:cb:4b: 1a:f2:dd:46:cd:d6:18:0b:21:ad:0c:68:74:f4:40: 47:c8:35:e0:70:b7:73:c7:5f:46:4f:4b:d1:c8:07: c0:7b:01:ab:c8:64:22:36:30:36:6a:25:7c:aa:82: 6e:23:ce:67:03:2f:23:32:a9:13:36:e1:eb:91:eb: 86:bc:fb:5d:a3:8d:3b:5c:c2:19:9a:f9:ae:c8:dd: 1a:dc:64:1d:30:44:19:3d:fc:9a:04:4d:07:0c:87: 8f:4f:c8:fa:c3:85:70:10:3a:5d:ab:ae:c5:7f:6c: ba:54:7b:87:74:ff:62:ae:65:a7:f6:8e:44:f2:84: ac:db:a2:5c:30:42:0e:8d:d1:96:58:19:89:ee:5f: 94:0d:a4:c7:38:28:97:05:87:d1:40:13:c4:f7:9b: 68:19:a6:aa:f1:92:c0:3e:35:0b:33:c7:1d:37:dd: ce:a7:a7:8f:f8:66:f7:74:b0:a7:4c:46:6f:32:11: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5D:5C:48:DD:94:1E:EC:ED:84:41:43:08:5D:36:84:32:9E:A5:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/f1dfe5e8-89e2-3d57-8822-d97d1da590b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.crl X509v3 Authority Key Identifier: keyid:A3:95:AE:E2:4F:52:ED:AF:10:42:2E:81:B8:9B:DB:E6:3C:AE:00:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af00dd9c-ac7d-4fd3-84a1-ea6f66bc0007.cer sbgp-ipAddrBlock: critical IPv4: 109.175.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:54:30:4a:72:f9:49:d5:9b:61:22:e9:a1:70:6b:29:58:19: ea:da:83:c6:b4:63:c3:57:35:92:8d:b0:df:ca:01:e5:b7:b6: c1:19:98:4e:88:e6:8f:16:5e:4c:88:38:9b:80:dc:8e:aa:9a: 3b:ee:6a:fe:f0:a9:73:6a:ea:01:27:46:ea:77:2f:0b:32:be: eb:2b:96:d8:fc:dd:c4:f3:12:38:93:bd:e4:a5:8b:e2:d0:dc: 22:95:29:42:89:13:09:bc:df:d3:6a:c2:ed:31:53:a1:ff:f8: 1a:0d:ab:70:e6:0a:39:67:5f:9e:3e:04:d9:39:32:60:bd:be: b8:f4:ac:83:83:e8:2a:0d:a8:7b:8c:f4:3f:ec:0b:06:5b:a5: c3:9b:e7:85:85:bf:f4:8e:aa:51:db:f0:39:08:6b:d6:99:44: 43:49:9f:d5:66:68:7a:41:f3:e4:90:20:42:e3:04:53:7e:6d: fe:f6:7c:b4:08:29:54:28:b3:61:eb:82:44:0b:7e:ca:99:d2: 7f:69:f4:f9:15:76:6d:0d:2d:b6:aa:29:c4:56:99:86:89:f6: 47:9b:ff:bd:3e:8f:40:a9:48:5e:95:c7:fa:b1:e2:93:c7:3e: 42:55:31:0f:8e:3b:1c:91:90:f9:dd:b2:9b:64:f7:a0:e0:f4: 6b:c1:8f:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIfNMywKxTW5YuOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYwMGRkOWMtYWM3ZC00ZmQzLTg0YTEtZWE2ZjY2YmMw MDA3MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk YjBhODQwYzItODIwMS00NGExLWFkZTMtNzYzYmJjNzA5NzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9EX/1b3nWlOJ2oWz9V/oDWFN8+X+opiCLj+ sioRuHki6hG7Wlsu35eTojMNe3JkDTLA6wni23sK9ZhR9/wVkjpozC/CaJsIy0sa 8t1GzdYYCyGtDGh09EBHyDXgcLdzx19GT0vRyAfAewGryGQiNjA2aiV8qoJuI85n Ay8jMqkTNuHrkeuGvPtdo407XMIZmvmuyN0a3GQdMEQZPfyaBE0HDIePT8j6w4Vw EDpdq67Ff2y6VHuHdP9irmWn9o5E8oSs26JcMEIOjdGWWBmJ7l+UDaTHOCiXBYfR QBPE95toGaaq8ZLAPjULM8cdN93Op6eP+Gb3dLCnTEZvMhFpbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxdXEjdlB7s7YRBQwhdNoQynqVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAw ZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZmNjZiYzAwMDcvZjFkZmU1ZTgtODllMi0z ZDU3LTg4MjItZDk3ZDFkYTU5MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYwMGRkOWMtYWM3ZC00ZmQzLTg0 YTEtZWE2ZjY2YmMwMDA3L2FmMDBkZDljLWFjN2QtNGZkMy04NGExLWVhNmY2NmJj MDAwNy5jcmwwHwYDVR0jBBgwFoAUo5Wu4k9S7a8QQi6BuJvb5jyuACgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjAwZGQ5Yy1hYzdkLTRmZDMtODRhMS1lYTZm NjZiYzAwMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAba/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVUMEpy+UnVm2Ei6aFwaylYGerag8a0Y8NXNZKNsN/KAeW3tsEZmE6I 5o8WXkyIOJuA3I6qmjvuav7wqXNq6gEnRup3Lwsyvusrltj83cTzEjiTveSli+LQ 3CKVKUKJEwm839Nqwu0xU6H/+BoNq3DmCjlnX54+BNk5MmC9vrj0rIOD6CoNqHuM 9D/sCwZbpcOb54WFv/SOqlHb8DkIa9aZRENJn9VmaHpB8+SQIELjBFN+bf72fLQI KVQos2HrgkQLfsqZ0n9p9PkVdm0NLbaqKcRWmYaJ9keb/70+j0CpSF6Vx/qx4pPH PkJVMQ+OOxyRkPndsptk96Dg9GvBj0U= -----END CERTIFICATE-----Generated at Sun Sep 20 15:56:10 2026 by rpki-client