$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa File: a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa (raw, json) Hash identifier: rP328+sjvX/Mi9ATwZpLQkHVIo5Cu57XZS/a7uRxxqM= Subject key identifier: DF:B2:D0:B4:09:2E:97:09:73:50:13:0C:12:00:B4:3B:08:59:9A:E6 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584F189793FE0890F853DAA71480 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 88 IP address blocks: 192.12.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:93:fe:08:90:f8:53:da:a7:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=21f68fbf-37ce-4577-b3ae-63ec78f409d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:04:58:e7:ed:db:a3:c2:e0:68:c3:dc:73: a3:5f:8b:9c:0c:01:0b:e2:34:2f:2c:db:27:97:67: bb:0d:28:3d:46:73:ea:e0:ca:c4:b9:e5:c1:a5:67: ec:f8:c8:96:3d:8d:a8:78:fb:f2:97:d0:21:90:a8: 6f:bf:e8:c6:e0:7b:e7:3e:21:f8:f6:4e:a1:06:94: 5a:9d:97:ff:cf:30:b5:e6:08:96:f8:e5:d8:25:a7: a6:aa:a7:c6:c1:3a:99:e3:4c:2e:f4:eb:c1:48:db: 0b:9c:83:a0:c7:f1:84:7b:b2:ae:83:0c:bb:f0:43: 08:33:8c:fe:69:77:b5:ea:f4:58:80:a0:61:e2:d2: e3:9f:9a:b2:2e:58:26:51:24:8f:77:0d:84:0d:05: f3:63:8c:5d:94:c6:7d:29:b2:b5:6d:82:0d:b5:4f: ba:f0:5b:21:b5:f4:d3:4a:2c:a7:8d:d3:6b:75:2d: 31:03:94:ff:5d:e8:15:1c:2a:41:6f:89:9e:e1:83: 6a:1c:68:68:1f:f1:94:df:09:fa:15:90:c0:e6:15: fc:5d:43:19:ef:2c:53:eb:e5:d1:25:1c:fd:38:70: 49:ba:86:82:9d:f6:be:2b:1b:6a:30:7c:8d:1d:1e: 40:3f:64:d8:63:a0:2f:6a:49:7b:37:2b:ac:16:da: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B2:D0:B4:09:2E:97:09:73:50:13:0C:12:00:B4:3B:08:59:9A:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 192.12.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6f:97:64:d3:4d:6f:48:69:87:44:72:8e:87:fd:5b:a8:6d: 48:92:e2:7b:27:70:ea:87:2b:8d:f2:3f:19:5b:12:bc:ec:9f: b3:e6:b6:63:89:31:e3:3c:e9:aa:cc:1f:07:4a:81:dd:be:fb: c6:7a:45:12:b1:f7:cf:92:ca:f4:29:93:f9:22:82:00:70:e8: 6c:46:9f:d5:29:d9:2a:df:dd:de:4b:a2:71:2a:70:cd:0c:25: 70:24:14:cd:8e:84:a0:62:d6:e7:ae:f2:12:61:58:ee:e2:9b: fe:9d:d5:6b:d9:b5:ac:f9:60:50:20:e8:0f:9b:37:47:f3:76: c1:cc:93:ec:41:b9:f5:dc:b2:e1:be:08:e0:9f:a7:ed:e3:38: 77:2d:d6:93:e2:70:c6:d1:b9:25:19:44:91:ea:17:e9:05:ff: dc:5e:59:7d:34:ee:7e:74:a3:9d:c9:19:86:af:3d:0f:22:ec: 27:3b:93:ef:e6:da:41:c7:18:ac:cc:6a:ff:6e:f3:87:85:2f: 9a:e8:26:b4:74:2d:a1:b8:ce:28:94:97:51:43:06:da:ba:51: f0:55:68:7e:10:07:d1:3b:5f:95:49:65:2a:09:7d:a7:86:81: 15:fa:9f:be:72:02:8b:bc:89:ee:1d:80:69:9a:89:ec:3e:4b: e4:a7:d7:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5P+CJD4U9qnFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MjFmNjhmYmYtMzdjZS00NTc3LWIzYWUtNjNlYzc4ZjQwOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjwEWOft26PC4GjD3HOjX4ucDAEL4jQvLNsn l2e7DSg9RnPq4MrEueXBpWfs+MiWPY2oePvyl9AhkKhvv+jG4HvnPiH49k6hBpRa nZf/zzC15giW+OXYJaemqqfGwTqZ40wu9OvBSNsLnIOgx/GEe7Kugwy78EMIM4z+ aXe16vRYgKBh4tLjn5qyLlgmUSSPdw2EDQXzY4xdlMZ9KbK1bYINtU+68FshtfTT SiynjdNrdS0xA5T/XegVHCpBb4me4YNqHGhoH/GU3wn6FZDA5hX8XUMZ7yxT6+XR JRz9OHBJuoaCnfa+KxtqMHyNHR5AP2TYY6Avakl7NyusFtoRbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+y0LQJLpcJc1ATDBIAtDsIWZrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvYTcwNDY4ODMtZDllZS0z ZWZlLWJjY2QtY2I2YTAxM2IzYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAw1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1vl2TTTW9IaYdEco6H/VuobUiS4nsncOqHK43yPxlbErzsn7PmtmOJ MeM86arMHwdKgd2++8Z6RRKx98+SyvQpk/kiggBw6GxGn9Up2Srf3d5LonEqcM0M JXAkFM2OhKBi1ueu8hJhWO7im/6d1WvZtaz5YFAg6A+bN0fzdsHMk+xBufXcsuG+ COCfp+3jOHct1pPicMbRuSUZRJHqF+kF/9xeWX007n50o53JGYavPQ8i7Cc7k+/m 2kHHGKzMav9u84eFL5roJrR0LaG4ziiUl1FDBtq6UfBVaH4QB9E7X5VJZSoJfaeG gRX6n75yAou8ie4dgGmaiew+S+Sn130= -----END CERTIFICATE-----Generated at Tue Sep 22 00:51:36 2026 by rpki-client