$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa File: acc5bd5d-5f68-3673-813c-63c52d3a1683.roa (raw, json) Hash identifier: Ho38rc0PsGvXvfW0YZsKm4tmD6JKxXZ9U6pDgkuigu4= Subject key identifier: 96:81:3E:50:2E:B8:4C:DB:AF:4A:62:34:74:19:8A:F6:22:6D:2B:BE Certificate issuer: /CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Certificate serial: 010D0C9F4328584EA7873A1EDD19D172B02DF400 Authority key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21521 IP address blocks: 192.252.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3a:1e:dd:19:d1:72:b0:2d:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7ab5d73a-3ec9-4296-be7e-2e0e87671d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:6b:a6:1a:e5:25:98:4b:d9:9c:ee:10:c8: 1c:6c:54:bb:97:2b:69:5e:11:29:f3:36:d1:0e:10: b7:35:6b:28:dc:d7:e5:11:61:34:9c:d6:78:ab:65: 47:81:ae:36:99:de:f1:47:c1:2a:88:59:96:d5:53: 36:85:d7:a1:24:94:8b:5b:be:b1:2c:f8:17:41:1c: ca:fa:62:2e:d5:8b:ab:78:01:7e:83:52:c6:9b:f9: 91:be:2e:c3:c1:1f:2e:87:3d:4b:3d:58:c3:41:b2: 7c:da:d9:b1:34:9f:35:7d:c1:a1:27:30:0c:c9:37: f1:a2:74:4b:90:d7:fc:fa:83:5b:ea:fd:09:2b:38: ac:66:fc:c7:c3:81:da:cf:ac:84:30:51:06:5e:fe: 51:0f:5b:b7:fa:bc:29:c2:a4:98:fb:ec:49:12:2b: 8a:e3:24:51:8d:4e:e8:af:08:5e:a4:a8:72:39:8c: 14:bf:6d:be:93:05:71:67:a8:c0:7d:12:21:ae:df: f7:37:81:14:0f:23:bf:07:d6:73:a3:df:2f:71:04: 71:14:ac:db:57:f3:a0:2a:57:7f:b3:77:27:5e:46: 7a:d9:d6:c0:f1:ca:c0:1d:f4:76:84:a2:09:db:29: 9b:8a:40:11:84:78:17:42:22:2d:d4:77:89:45:57: 60:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:81:3E:50:2E:B8:4C:DB:AF:4A:62:34:74:19:8A:F6:22:6D:2B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl X509v3 Authority Key Identifier: keyid:8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer sbgp-ipAddrBlock: critical IPv4: 192.252.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c9:54:a4:59:fc:94:8a:66:ae:d5:73:7c:e3:12:7b:96:2e: 14:39:af:3a:1f:0f:f4:e7:12:2f:25:29:5c:3b:12:ec:7e:99: 74:9c:9e:06:5c:5d:3e:3f:e5:c2:10:ec:0f:57:c8:ae:a0:3b: eb:9c:ef:5a:03:25:3c:77:31:55:50:f4:b4:6c:31:74:df:b1: c1:de:b9:36:78:5e:a6:5d:29:23:16:7e:9e:82:d0:18:df:da: 0a:db:44:15:13:36:bc:8b:34:65:c8:ba:75:52:3d:e3:b6:e4: 70:6f:42:52:e8:1f:d4:e1:58:ea:15:08:7e:73:b6:5a:dc:99: 84:33:52:d2:0e:04:03:e5:c2:34:3e:23:1a:7d:fa:af:20:99: b7:c6:f8:74:ca:9e:51:56:61:8b:c7:2d:1b:c9:70:5f:de:d7: b5:37:20:be:d1:0d:9b:41:be:32:99:a8:37:17:52:b4:ff:7b: 1a:ae:fd:ae:09:2c:33:1c:17:b6:f0:1f:71:e0:08:b6:d5:79: 37:81:f7:e9:02:71:25:af:db:9a:fc:fe:16:ea:25:85:81:4b: ba:15:55:14:d8:51:3f:bb:58:47:3b:9d:dd:56:6b:88:a2:d3: 43:5c:d4:5f:3d:0a:bf:6f:ab:42:86:4d:6b:06:ce:b4:5b:e1: db:2e:7d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhzoe3RnRcrAt9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJjOTQ1OTItNzNlOS00NTJlLWFkODgtYWFmYzhlM2Vl N2E1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2FiNWQ3M2EtM2VjOS00Mjk2LWJlN2UtMmUwZTg3NjcxZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/9rphrlJZhL2ZzuEMgcbFS7lytpXhEp8zbR DhC3NWso3NflEWE0nNZ4q2VHga42md7xR8EqiFmW1VM2hdehJJSLW76xLPgXQRzK +mIu1YureAF+g1LGm/mRvi7DwR8uhz1LPVjDQbJ82tmxNJ81fcGhJzAMyTfxonRL kNf8+oNb6v0JKzisZvzHw4Haz6yEMFEGXv5RD1u3+rwpwqSY++xJEiuK4yRRjU7o rwhepKhyOYwUv22+kwVxZ6jAfRIhrt/3N4EUDyO/B9Zzo98vcQRxFKzbV/OgKld/ s3cnXkZ62dbA8crAHfR2hKIJ2ymbikARhHgXQiIt1HeJRVdg2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaBPlAuuEzbr0piNHQZivYibSu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMmM5 NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUzZWU3YTUvYWNjNWJkNWQtNWY2OC0z NjczLTgxM2MtNjNjNTJkM2ExNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjJjOTQ1OTItNzNlOS00NTJlLWFk ODgtYWFmYzhlM2VlN2E1L2IyYzk0NTkyLTczZTktNDUyZS1hZDg4LWFhZmM4ZTNl ZTdhNS5jcmwwHwYDVR0jBBgwFoAUi1izm4Qm8HXsOYvA8T1AHv13TxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZj OGUzZWU3YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrJVKRZ/JSKZq7Vc3zjEnuWLhQ5rzofD/TnEi8lKVw7Eux+mXScngZc XT4/5cIQ7A9XyK6gO+uc71oDJTx3MVVQ9LRsMXTfscHeuTZ4XqZdKSMWfp6C0Bjf 2grbRBUTNryLNGXIunVSPeO25HBvQlLoH9ThWOoVCH5ztlrcmYQzUtIOBAPlwjQ+ Ixp9+q8gmbfG+HTKnlFWYYvHLRvJcF/e17U3IL7RDZtBvjKZqDcXUrT/exqu/a4J LDMcF7bwH3HgCLbVeTeB9+kCcSWv25r8/hbqJYWBS7oVVRTYUT+7WEc7nd1Wa4ii 00Nc1F89Cr9vq0KGTWsGzrRb4dsufbA= -----END CERTIFICATE-----Generated at Wed Jul 29 04:10:54 2026 by rpki-client