$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5197bb03-5853-4e0b-a14f-ea177de68354/28ea79fe-4831-336e-8e6a-31cbcb23f85c.roa File: 28ea79fe-4831-336e-8e6a-31cbcb23f85c.roa (raw, json) Hash identifier: 4803w+ppIWVDChENdvDHo3vy5sBJCBFuA95Rx4NT7+8= Subject key identifier: 54:81:1A:BB:7A:B9:AF:FF:AF:57:D9:1F:F3:05:98:64:C3:0E:98:48 Certificate issuer: /CN=5197bb03-5853-4e0b-a14f-ea177de68354 Certificate serial: 010D0C9F4328584F06724004911717B90CDC8040 Authority key identifier: 52:EC:EB:6C:7C:60:DF:58:AA:61:53:F8:42:1A:99:F5:9F:C6:A0:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5197bb03-5853-4e0b-a14f-ea177de68354.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5197bb03-5853-4e0b-a14f-ea177de68354/28ea79fe-4831-336e-8e6a-31cbcb23f85c.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 19656 IP address blocks: 148.59.62.0/24 maxlen: 24 162.120.95.0/24 maxlen: 24 2606:ec40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5197bb03-5853-4e0b-a14f-ea177de68354/5197bb03-5853-4e0b-a14f-ea177de68354.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5197bb03-5853-4e0b-a14f-ea177de68354/5197bb03-5853-4e0b-a14f-ea177de68354.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5197bb03-5853-4e0b-a14f-ea177de68354.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:40:04:91:17:17:b9:0c:dc:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197bb03-5853-4e0b-a14f-ea177de68354 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=ee8983ba-9df7-4de0-bbfe-d09d345f8d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:d0:5d:f8:5a:78:70:ec:9f:97:1c:9d:ca: a0:f5:e8:20:5e:8f:bd:26:7a:d7:d5:3e:54:75:7a: 88:6b:2b:52:52:26:4f:ad:c5:fb:10:1e:db:4e:62: ae:46:ab:95:83:ca:97:6e:86:8f:72:c5:e7:3b:63: d8:23:57:02:f3:62:36:ef:85:56:c3:fb:94:94:9f: 5a:f8:91:f5:7b:51:3a:19:33:49:c1:e7:a2:4d:d2: 51:f7:10:61:5a:c9:ec:ad:bf:fd:c7:fa:65:2b:aa: 6e:bc:65:f3:03:9c:a9:4a:74:c7:b7:cd:f6:f3:0b: 5a:25:91:1b:7e:d8:42:f2:52:17:61:a9:ec:9f:bd: 4b:3d:1b:17:3d:2d:14:03:bf:38:cb:e3:f2:b1:2a: 37:1b:c7:f3:4d:70:24:51:85:33:92:80:2d:33:be: 51:01:f7:a3:f7:0b:f3:40:84:67:4d:d5:4c:a1:2d: 92:5c:ba:8f:6c:92:5a:39:b9:35:e3:72:15:86:bf: 39:a6:8d:f5:62:69:08:f6:d7:24:b9:2e:a8:01:ad: be:7b:69:cf:81:4b:f9:f9:cb:61:35:75:ec:8e:5a: 1e:91:7a:da:9b:7d:cf:22:87:94:6e:5d:c3:1c:ba: e8:41:22:1a:c2:e4:18:2e:6b:0c:b5:7f:1e:b7:64: 7d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:81:1A:BB:7A:B9:AF:FF:AF:57:D9:1F:F3:05:98:64:C3:0E:98:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5197bb03-5853-4e0b-a14f-ea177de68354/28ea79fe-4831-336e-8e6a-31cbcb23f85c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5197bb03-5853-4e0b-a14f-ea177de68354/5197bb03-5853-4e0b-a14f-ea177de68354.crl X509v3 Authority Key Identifier: keyid:52:EC:EB:6C:7C:60:DF:58:AA:61:53:F8:42:1A:99:F5:9F:C6:A0:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5197bb03-5853-4e0b-a14f-ea177de68354.cer sbgp-ipAddrBlock: critical IPv4: 148.59.62.0/24 162.120.95.0/24 IPv6: 2606:ec40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e5:64:b6:f0:88:75:8a:61:9d:23:8a:11:5d:0a:41:8e:70: 9c:43:b8:60:25:3e:89:41:c5:30:2d:e7:79:e8:fb:ec:54:03: c7:7a:4e:b9:55:ba:ea:61:50:db:11:e3:d1:9d:08:39:ce:0b: 84:24:75:94:4d:ee:ae:8a:26:80:a1:25:b2:63:27:f1:fc:a2: e4:f0:74:31:85:99:49:ee:c2:0c:81:12:35:9c:ed:a4:6a:1a: 08:1e:75:80:53:59:ad:6c:12:09:eb:09:94:76:e0:51:2a:64: ef:80:a7:76:53:f4:d4:73:b9:05:41:4d:99:0c:99:ea:62:84: d9:e2:ea:31:ed:55:78:1f:fa:eb:19:74:cb:36:79:7b:fa:38: cf:36:0b:a1:0a:8b:73:96:c3:6e:af:4c:bd:40:5e:57:46:41: 32:e7:f7:68:cc:12:41:65:29:b2:03:95:46:92:e0:e1:b8:52: 27:51:94:cb:c7:c9:b4:a7:c5:4c:1c:f3:d3:0a:eb:04:b1:b4: 95:fe:04:55:84:12:9a:93:74:dc:84:24:8b:bb:cf:1a:b5:92: d3:a6:98:1a:6c:e2:1e:35:88:11:81:86:b4:23:1a:92:5d:ce: 25:ee:20:11:16:d6:99:6b:8f:f1:57:c3:61:17:1c:a1:a6:b9: 4c:ea:04:16 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE8GckAEkRcXuQzcgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE5N2JiMDMtNTg1My00ZTBiLWExNGYtZWExNzdkZTY4 MzU0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZWU4OTgzYmEtOWRmNy00ZGUwLWJiZmUtZDA5ZDM0NWY4ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym7QXfhaeHDsn5ccncqg9eggXo+9JnrX1T5U dXqIaytSUiZPrcX7EB7bTmKuRquVg8qXboaPcsXnO2PYI1cC82I274VWw/uUlJ9a +JH1e1E6GTNJweeiTdJR9xBhWsnsrb/9x/plK6puvGXzA5ypSnTHt8328wtaJZEb fthC8lIXYansn71LPRsXPS0UA784y+PysSo3G8fzTXAkUYUzkoAtM75RAfej9wvz QIRnTdVMoS2SXLqPbJJaObk143IVhr85po31YmkI9tckuS6oAa2+e2nPgUv5+cth NXXsjloekXram33PIoeUbl3DHLroQSIawuQYLmsMtX8et2R9awIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFSBGrt6ua//r1fZH/MFmGTDDphIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTk3 YmIwMy01ODUzLTRlMGItYTE0Zi1lYTE3N2RlNjgzNTQvMjhlYTc5ZmUtNDgzMS0z MzZlLThlNmEtMzFjYmNiMjNmODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE5N2JiMDMtNTg1My00ZTBiLWEx NGYtZWExNzdkZTY4MzU0LzUxOTdiYjAzLTU4NTMtNGUwYi1hMTRmLWVhMTc3ZGU2 ODM1NC5jcmwwHwYDVR0jBBgwFoAUUuzrbHxg31iqYVP4QhqZ9Z/GoB4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTk3YmIwMy01ODUzLTRlMGItYTE0Zi1lYTE3 N2RlNjgzNTQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAlDs+AwQA onhfMA0EAgACMAcDBQAmBuxAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACDlZLbwiHWKYZ0jihFdCkGOcJxD uGAlPolBxTAt53no++xUA8d6TrlVuuphUNsR49GdCDnOC4QkdZRN7q6KJoChJbJj J/H8ouTwdDGFmUnuwgyBEjWc7aRqGggedYBTWa1sEgnrCZR24FEqZO+Ap3ZT9NRz uQVBTZkMmepihNni6jHtVXgf+usZdMs2eXv6OM82C6EKi3OWw26vTL1AXldGQTLn 92jMEkFlKbIDlUaS4OG4UidRlMvHybSnxUwc89MK6wSxtJX+BFWEEpqTdNyEJIu7 zxq1ktOmmBps4h41iBGBhrQjGpJdziXuIBEW1plrj/FXw2EXHKGmuUzqBBY= -----END CERTIFICATE-----Generated at Fri Sep 25 08:45:38 2026 by rpki-client