$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa File: 49ed5a06-61cd-30da-8170-9d7403ef7745.roa (raw, json) Hash identifier: sDXCh+ZJJ2GL0Qsu8RFJ8zGfKncnLDwypDCL7HzhMOk= Subject key identifier: F6:C8:73:FB:72:B9:93:B1:8B:CC:31:5B:69:C8:82:AC:C7:40:0D:A7 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584EA17A8626BCBC393315225B80 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22652 IP address blocks: 192.252.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:86:26:bc:bc:39:33:15:22:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=9eb4999d-01b2-4169-9f1d-73f506836878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:cb:b3:3e:08:07:95:ed:2d:b8:d7:89:2f: f1:1e:0a:eb:0f:ce:71:95:79:a9:a1:33:b6:b1:7c: 8f:91:67:d2:98:55:8b:82:44:13:40:06:06:54:21: 51:7c:7b:c8:0c:dc:f0:0f:16:cb:ac:c0:21:52:27: 07:a0:94:fc:0d:52:e7:66:cd:7a:3b:9e:dc:ed:3d: 8c:b7:3d:f2:cb:8b:db:fb:57:c8:ba:3b:e6:81:4d: f0:98:0d:5b:8a:d7:b5:24:49:cf:4e:d9:14:65:5a: 81:45:aa:d0:a6:43:18:5e:dc:8e:e9:cd:04:b6:ee: e7:0f:c5:8b:75:19:e1:40:11:9d:26:be:8e:94:f7: c0:89:be:7e:8c:ea:2c:94:d2:02:af:f0:ba:4d:c2: d7:e9:81:68:99:98:3e:ee:00:68:58:b3:f2:4a:1b: 4e:ab:92:67:2e:43:68:08:71:28:60:48:41:f1:8a: 3f:f9:c8:43:94:a9:74:ad:9d:bc:6d:d6:80:9f:de: 43:02:3c:14:94:89:77:cf:b3:38:59:57:40:43:ce: 6c:86:ec:a0:8e:ec:b7:de:39:02:32:f6:02:6e:b2: e6:92:a6:01:31:b1:63:24:bf:c1:a0:f7:19:19:28: e9:d9:83:b3:86:31:0e:8c:3b:d1:69:5f:44:bc:9d: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C8:73:FB:72:B9:93:B1:8B:CC:31:5B:69:C8:82:AC:C7:40:0D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/49ed5a06-61cd-30da-8170-9d7403ef7745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 192.252.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6a:7f:6d:4a:84:db:5b:cd:82:7a:63:1e:f4:7b:6b:74:d2: 2e:b3:42:57:23:ea:56:6b:9e:ec:a3:03:63:21:f7:9b:85:b9: 6d:e4:2b:c1:96:75:a2:a6:83:22:0c:00:7b:78:53:15:33:ef: 88:5d:ed:6e:da:01:8c:8a:1c:44:6f:b6:25:e1:03:b8:b5:35: 2a:f9:65:ae:7c:e1:6e:bd:20:cb:13:ef:22:62:9c:a6:6f:28: ce:ef:b4:1a:ea:04:4c:8a:54:9e:27:cb:9b:ae:56:9a:d0:a7: f4:78:54:84:9e:00:c6:ab:32:94:e1:cf:d0:66:34:56:aa:8e: 03:f4:ee:d7:db:5e:3c:96:d9:fd:80:f9:73:72:d0:ff:34:95: 36:86:94:bf:90:93:94:46:af:ad:d3:de:30:f0:98:84:8e:7a: 09:51:c1:59:fe:eb:da:24:d6:91:f4:bc:78:99:58:20:2d:e5: 69:dc:d0:80:90:3f:4b:71:67:81:e1:25:9e:6b:15:0c:96:a1: 01:fe:6c:42:d5:69:18:ce:0f:91:22:33:7b:fd:8f:f3:2d:b6: a0:12:cf:06:32:7a:47:f9:bf:16:93:53:cf:9c:e6:1e:b2:49: 48:46:78:8e:02:93:c5:1e:8d:f9:df:9c:f0:96:0c:d9:13:18: 45:ab:5f:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heoYmvLw5MxUiW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk OWViNDk5OWQtMDFiMi00MTY5LTlmMWQtNzNmNTA2ODM2ODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSvLsz4IB5XtLbjXiS/xHgrrD85xlXmpoTO2 sXyPkWfSmFWLgkQTQAYGVCFRfHvIDNzwDxbLrMAhUicHoJT8DVLnZs16O57c7T2M tz3yy4vb+1fIujvmgU3wmA1bite1JEnPTtkUZVqBRarQpkMYXtyO6c0Etu7nD8WL dRnhQBGdJr6OlPfAib5+jOoslNICr/C6TcLX6YFomZg+7gBoWLPyShtOq5JnLkNo CHEoYEhB8Yo/+chDlKl0rZ28bdaAn95DAjwUlIl3z7M4WVdAQ85shuygjuy33jkC MvYCbrLmkqYBMbFjJL/BoPcZGSjp2YOzhjEOjDvRaV9EvJ1m9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbIc/tyuZOxi8wxW2nIgqzHQA2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNDllZDVhMDYtNjFjZC0z MGRhLTgxNzAtOWQ3NDAzZWY3NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxqf21KhNtbzYJ6Yx70e2t00i6zQlcj6lZrnuyjA2Mh95uFuW3kK8GW daKmgyIMAHt4UxUz74hd7W7aAYyKHERvtiXhA7i1NSr5Za584W69IMsT7yJinKZv KM7vtBrqBEyKVJ4ny5uuVprQp/R4VISeAMarMpThz9BmNFaqjgP07tfbXjyW2f2A +XNy0P80lTaGlL+Qk5RGr63T3jDwmISOeglRwVn+69ok1pH0vHiZWCAt5Wnc0ICQ P0txZ4HhJZ5rFQyWoQH+bELVaRjOD5EiM3v9j/MttqASzwYyekf5vxaTU8+c5h6y SUhGeI4Ck8UejfnfnPCWDNkTGEWrX88= -----END CERTIFICATE-----Generated at Tue Jul 28 19:47:24 2026 by rpki-client