$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/12934b1e-e50b-3256-9bb6-411361a0fd32.roa File: 12934b1e-e50b-3256-9bb6-411361a0fd32.roa (raw, json) Hash identifier: gJy0oasCkc+Qkfk71AOvCs4i7vysybUJeVXkqF6XrXk= Subject key identifier: 05:B1:9C:A5:74:7B:7B:2C:D4:11:38:08:6E:CA:A8:7A:EC:31:58:8E Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F0AB57ACEFA4F795264E28E00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/12934b1e-e50b-3256-9bb6-411361a0fd32.roa Signing time: Wed 02 Sep 2026 13:39:12 +0000 ROA not before: Wed 02 Sep 2026 13:39:12 +0000 ROA not after: Tue 01 Dec 2026 14:39:12 +0000 asID: 22652 IP address blocks: 209.145.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:b5:7a:ce:fa:4f:79:52:64:e2:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 2 13:39:12 2026 GMT Not After : Dec 1 14:39:12 2026 GMT Subject: CN=168801d9-9f9b-4a64-bf92-8b54d3e8bbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:2c:94:92:98:f5:09:1f:8b:f1:44:72:c5: 15:6d:2a:ca:86:2e:9d:20:56:16:d7:00:bc:3b:7f: 22:28:91:54:81:8d:15:10:cc:ac:dd:26:1f:03:7e: 1f:34:07:45:2a:d5:27:2c:e3:3f:fc:9f:0c:14:37: c1:6b:da:07:0b:61:70:45:02:1c:29:07:18:6f:65: ed:c0:eb:13:2a:6a:ed:cc:29:03:19:cb:9a:21:f9: e8:fb:bc:f4:76:ad:e8:a4:a6:be:91:c0:e1:65:96: 00:ee:d9:6a:ee:e8:6d:88:cb:47:8e:bb:f3:4f:d7: 12:bd:ea:ba:eb:01:99:aa:7b:08:9f:45:66:2c:22: 23:24:f8:f6:69:5e:40:22:0b:c8:4a:07:0f:3f:4c: be:ad:33:1e:7f:b2:e5:53:c1:c9:2b:32:b1:af:f9: cd:76:07:06:5b:60:13:ee:34:b5:80:2d:cb:3a:0f: 0c:f1:e8:29:e1:99:de:78:8d:28:de:89:98:50:67: a5:81:b9:48:7e:c6:5f:ba:a4:9e:ab:44:ef:2d:e1: 75:d4:5b:d5:2b:ef:4a:7a:47:e9:c8:de:12:e6:45: e4:6a:60:60:5d:13:98:6d:11:50:52:4b:aa:82:60: 89:86:b5:6b:37:6d:fc:ab:76:81:60:9f:63:3b:c9: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B1:9C:A5:74:7B:7B:2C:D4:11:38:08:6E:CA:A8:7A:EC:31:58:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/12934b1e-e50b-3256-9bb6-411361a0fd32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 209.145.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:4c:be:0d:8c:86:4f:e4:e5:84:38:08:64:89:0e:e1:3f:ec: d6:21:f0:2a:59:d9:94:a7:59:d8:de:d6:98:04:3e:66:27:8d: 37:6f:9f:82:ec:5f:c3:de:cc:97:e7:62:a6:85:d7:3b:80:0c: 3b:eb:f9:ad:fe:aa:3f:aa:35:80:c7:60:d7:1c:c1:87:40:d8: c1:61:52:f3:c8:04:dd:79:03:9c:d3:04:10:59:aa:cd:da:d9: db:6e:e8:37:12:3c:93:f6:9a:87:45:1f:af:ad:dc:de:9c:fb: 37:ed:81:b1:a7:62:ad:bc:ec:f1:49:44:3b:4b:34:ae:64:70: b5:ee:e4:be:71:91:bf:15:08:b7:87:3d:1e:be:02:5e:85:1b: f1:bf:30:e9:09:d6:ec:c7:6c:64:7e:4f:c8:e1:56:6d:69:33: fa:3b:d5:4f:58:c0:2d:7f:55:1f:82:c6:24:af:58:b1:75:06: 68:26:2d:56:51:2a:68:71:73:1b:a8:ed:81:a1:81:99:1d:f4: b1:97:ee:12:cd:fc:36:34:77:13:56:29:2b:d2:b4:4b:6d:cc: f6:4e:c2:d6:49:85:18:5e:1b:19:9a:6f:8b:98:a7:a9:c2:3f: ac:eb:ed:72:0a:36:d2:8d:53:69:9c:b7:f9:9c:4f:46:5e:c2: 76:2e:14:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KtXrO+k95UmTijgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkwMjEzMzkxMloXDTI2MTIwMTE0MzkxMlowLzEtMCsGA1UEAxMk MTY4ODAxZDktOWY5Yi00YTY0LWJmOTItOGI1NGQzZThiYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyQslJKY9Qkfi/FEcsUVbSrKhi6dIFYW1wC8 O38iKJFUgY0VEMys3SYfA34fNAdFKtUnLOM//J8MFDfBa9oHC2FwRQIcKQcYb2Xt wOsTKmrtzCkDGcuaIfno+7z0dq3opKa+kcDhZZYA7tlq7uhtiMtHjrvzT9cSveq6 6wGZqnsIn0VmLCIjJPj2aV5AIgvISgcPP0y+rTMef7LlU8HJKzKxr/nNdgcGW2AT 7jS1gC3LOg8M8egp4ZneeI0o3omYUGelgblIfsZfuqSeq0TvLeF11FvVK+9Kekfp yN4S5kXkamBgXROYbRFQUkuqgmCJhrVrN238q3aBYJ9jO8mpvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWxnKV0e3ss1BE4CG7KqHrsMViOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMTI5MzRiMWUtZTUwYi0z MjU2LTliYjYtNDExMzYxYTBmZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0ZHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJMvg2Mhk/k5YQ4CGSJDuE/7NYh8CpZ2ZSnWdje1pgEPmYnjTdvn4Ls X8PezJfnYqaF1zuADDvr+a3+qj+qNYDHYNccwYdA2MFhUvPIBN15A5zTBBBZqs3a 2dtu6DcSPJP2modFH6+t3N6c+zftgbGnYq287PFJRDtLNK5kcLXu5L5xkb8VCLeH PR6+Al6FG/G/MOkJ1uzHbGR+T8jhVm1pM/o71U9YwC1/VR+CxiSvWLF1BmgmLVZR Kmhxcxuo7YGhgZkd9LGX7hLN/DY0dxNWKSvStEttzPZOwtZJhRheGxmab4uYp6nC P6zr7XIKNtKNU2mct/mcT0ZewnYuFII= -----END CERTIFICATE-----Generated at Tue Sep 22 03:25:51 2026 by rpki-client