$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa File: 49ed5a06-61cd-30da-8170-9d7403ef7745.roa (raw, json) Hash identifier: QUJS4qXCpvFsk9Ve4x+yQmsYU4rhG0qSEhAEJc1TP0E= Subject key identifier: 7F:1A:0C:FB:DD:8C:A8:F6:DE:41:E2:8A:14:A6:F7:91:06:E8:BD:F2 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F43DD57699C57C14F97397100 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22652 IP address blocks: 192.252.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:57:69:9c:57:c1:4f:97:39:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=30798bb3-d3ed-45da-9a73-b6ca3024e9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:66:2c:6b:88:e0:4e:e6:3a:52:18:b9:9b: 25:f8:c2:06:22:e7:04:83:68:f1:bf:e3:28:0b:ed: 5a:45:dc:7c:03:6b:e4:12:3c:f0:57:6b:10:42:6e: c8:42:6f:0d:ed:78:a2:1b:db:6c:8e:82:b3:5d:c3: a0:f2:ec:3b:98:ce:93:f6:01:6f:ab:a5:15:a9:34: 4e:1e:b2:29:de:03:ab:f8:b5:d1:e4:b9:42:20:14: bb:73:dc:b3:bd:c0:1c:bf:ea:ad:9d:8f:64:b0:ad: d5:ad:73:58:88:a1:df:a8:23:9f:06:b6:68:91:d6: 1f:51:1d:17:2e:f2:c8:15:f7:fc:f6:6a:65:a2:40: 30:5f:5d:15:70:24:1d:c6:f4:28:a1:82:9f:2c:06: 90:91:62:d6:77:42:0f:3d:c5:90:39:62:a5:99:90: 52:ee:82:a2:56:8a:a8:b8:e6:d7:a5:08:a4:76:92: d2:ca:d1:cb:db:6d:ec:8d:ce:fc:94:0e:5f:a9:63: 7f:79:0e:79:c1:af:c2:99:a1:49:4b:f3:cd:d5:a8: bf:1b:aa:c8:0b:11:f0:0f:ed:28:9e:1b:fd:4f:02: b3:26:e4:e6:a3:66:c7:e5:e7:7f:37:df:c3:04:65: a1:45:17:bb:fb:b5:2e:10:a8:d3:42:33:7e:3f:dd: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1A:0C:FB:DD:8C:A8:F6:DE:41:E2:8A:14:A6:F7:91:06:E8:BD:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 192.252.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:57:64:05:5a:46:16:cb:2d:de:47:e9:8f:84:73:15:d3:ab: 86:ab:e3:63:c2:54:d7:20:c8:2a:5e:1f:ec:d7:4d:6e:d9:cf: 36:a3:f5:65:63:4f:db:dc:88:f8:53:af:b5:46:06:64:0a:a7: 54:a7:e5:ad:cf:9b:81:dc:df:29:63:c5:65:a2:ec:52:ee:ad: d1:aa:f7:79:17:ea:96:06:44:d2:c3:5a:09:ab:a4:ae:72:fb: c2:fe:6c:0b:55:77:de:95:a7:2d:5c:6a:e1:ae:78:38:ea:03: e6:4a:8f:24:35:fb:a4:0a:a6:49:d6:e4:7c:6e:af:36:18:15: ad:81:4c:3d:b2:9f:fa:7e:32:2c:b6:27:a1:aa:75:d7:4d:54: 87:f0:a6:f2:57:63:c8:16:2a:ac:f7:75:75:c6:65:75:12:49: 9b:6b:0e:83:73:db:86:9d:ad:41:e0:58:3a:b5:54:06:e3:44: 5b:9e:88:fe:82:a1:62:54:1b:a4:11:a5:b2:73:91:17:a6:ab: 90:15:89:52:6c:2e:b0:e1:3d:ae:fe:88:e1:f2:43:3c:6f:3b: 0b:d0:16:f7:42:ad:d1:c7:a9:ea:26:49:70:c9:1d:73:2e:cb: 6a:a2:1b:87:2b:1d:92:d0:ff:62:fb:08:a1:70:ae:e2:9d:09: 28:e4:4a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3VdpnFfBT5c5cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MzA3OThiYjMtZDNlZC00NWRhLTlhNzMtYjZjYTMwMjRlOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdxmLGuI4E7mOlIYuZsl+MIGIucEg2jxv+Mo C+1aRdx8A2vkEjzwV2sQQm7IQm8N7XiiG9tsjoKzXcOg8uw7mM6T9gFvq6UVqTRO HrIp3gOr+LXR5LlCIBS7c9yzvcAcv+qtnY9ksK3VrXNYiKHfqCOfBrZokdYfUR0X LvLIFff89mplokAwX10VcCQdxvQooYKfLAaQkWLWd0IPPcWQOWKlmZBS7oKiVoqo uObXpQikdpLSytHL223sjc78lA5fqWN/eQ55wa/CmaFJS/PN1ai/G6rICxHwD+0o nhv9TwKzJuTmo2bH5ed/N9/DBGWhRRe7+7UuEKjTQjN+P904jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8aDPvdjKj23kHiihSm95EG6L3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNDllZDVhMDYtNjFjZC0z MGRhLTgxNzAtOWQ3NDAzZWY3NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJXZAVaRhbLLd5H6Y+EcxXTq4ar42PCVNcgyCpeH+zXTW7Zzzaj9WVj T9vciPhTr7VGBmQKp1Sn5a3Pm4Hc3yljxWWi7FLurdGq93kX6pYGRNLDWgmrpK5y +8L+bAtVd96Vpy1cauGueDjqA+ZKjyQ1+6QKpknW5HxurzYYFa2BTD2yn/p+Miy2 J6GqdddNVIfwpvJXY8gWKqz3dXXGZXUSSZtrDoNz24adrUHgWDq1VAbjRFueiP6C oWJUG6QRpbJzkRemq5AViVJsLrDhPa7+iOHyQzxvOwvQFvdCrdHHqeomSXDJHXMu y2qiG4crHZLQ/2L7CKFwruKdCSjkSss= -----END CERTIFICATE-----Generated at Wed Sep 23 22:45:01 2026 by rpki-client