$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa File: 52ea8b98-74f4-3122-acd5-365ad4949a5e.roa (raw, json) Hash identifier: FrlXYnWg7wBkgtt10oR69TMfrfIA6spz8eWWg/n0aWM= Subject key identifier: 93:9D:F0:E8:91:91:4B:11:5F:05:08:24:FD:76:ED:94:BF:F6:79:84 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA796168C419D794AA6387500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7861 IP address blocks: 209.115.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:16:8c:41:9d:79:4a:a6:38:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4eaad284-d431-4ca3-90a4-5220b9d4d754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:ee:0d:f7:6a:de:80:00:90:16:d3:00:9c: 2f:e7:15:1c:ee:26:50:28:c5:d1:50:58:25:9a:7f: cc:76:f4:98:eb:18:68:64:9c:d8:44:91:48:7c:df: ef:ee:54:4c:e2:e9:e7:32:2c:8b:0d:1b:e3:24:51: 9a:26:4f:a9:ad:83:c9:61:6b:2d:b7:43:f4:aa:97: 66:03:bb:84:8a:b0:5b:d4:c5:5e:01:96:77:d2:e0: 68:f8:d8:70:ce:7e:db:e9:c9:c0:e0:21:5e:6d:5c: 33:ef:b0:6b:6b:79:42:45:a8:f9:39:52:1d:38:84: f0:c6:5e:a8:4d:29:f4:08:ee:33:95:a1:0f:16:e9: aa:c6:77:a9:ae:4c:14:34:0f:b7:cc:16:0f:f5:59: 89:21:62:66:aa:95:38:ee:d0:82:41:eb:6a:a7:9f: 48:96:30:b6:f3:c5:da:21:d1:75:5c:11:c2:9e:92: ce:f1:da:76:3c:1a:84:4f:81:7a:e3:d4:99:15:31: 6a:ab:88:1c:64:f6:8f:33:96:0e:3b:43:34:95:43: eb:25:d6:27:1a:54:75:69:31:5c:09:fe:ea:99:e0: 18:cb:fc:6e:44:3f:5e:72:9e:29:49:9c:25:35:3d: c4:76:d2:ef:5f:4e:d7:3c:9e:08:5b:27:16:29:97: 87:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9D:F0:E8:91:91:4B:11:5F:05:08:24:FD:76:ED:94:BF:F6:79:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.115.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b6:8d:0a:a1:c2:0d:68:81:a6:1d:1c:02:da:8c:1d:4e:9c: 48:9b:90:90:56:56:d9:66:06:b8:d5:0a:88:94:ae:30:62:48: f3:2c:ef:17:35:65:17:ee:79:03:9f:11:9d:84:9f:c2:62:95: ed:9c:64:7e:f9:84:ab:62:42:d7:dc:c5:79:b8:88:70:30:7f: e5:7b:75:a7:47:ec:4c:77:7f:a6:c0:6e:f6:8d:d6:09:de:a9: 9c:6b:a8:57:69:d7:6c:f0:2b:5b:bd:40:3a:fe:65:b1:84:6b: 94:83:2f:39:e2:60:b6:2f:a1:68:55:f6:01:20:32:d2:df:7f: 05:74:22:f0:dd:18:2e:7f:f1:d3:de:56:04:b4:89:51:8f:b9: 88:03:5c:50:c8:4e:9b:1a:62:24:3d:0e:82:77:3a:58:a3:80: 93:af:13:2f:4c:5f:59:be:cb:bb:09:77:e3:cb:09:20:db:c0: 24:09:15:ee:db:3b:07:93:bd:f0:a9:b5:ed:70:9c:5e:dd:5c: c5:c4:2c:57:9f:f6:09:ee:d1:5a:56:9c:ca:29:e1:63:93:d4: 37:f0:41:74:53:3d:a3:a7:59:fb:c3:02:e7:7e:ff:25:e0:0d: 07:37:4b:63:c5:d8:85:84:bf:92:d0:d1:ea:a3:9b:93:34:7c: f8:f2:0c:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlhaMQZ15SqY4dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGVhYWQyODQtZDQzMS00Y2EzLTkwYTQtNTIyMGI5ZDRkNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvbuDfdq3oAAkBbTAJwv5xUc7iZQKMXRUFgl mn/MdvSY6xhoZJzYRJFIfN/v7lRM4unnMiyLDRvjJFGaJk+prYPJYWstt0P0qpdm A7uEirBb1MVeAZZ30uBo+Nhwzn7b6cnA4CFebVwz77Bra3lCRaj5OVIdOITwxl6o TSn0CO4zlaEPFumqxneprkwUNA+3zBYP9VmJIWJmqpU47tCCQetqp59IljC288Xa IdF1XBHCnpLO8dp2PBqET4F649SZFTFqq4gcZPaPM5YOO0M0lUPrJdYnGlR1aTFc Cf7qmeAYy/xuRD9ecp4pSZwlNT3EdtLvX07XPJ4IWycWKZeHCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOd8OiRkUsRXwUIJP127ZS/9nmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTJlYThiOTgtNzRmNC0z MTIyLWFjZDUtMzY1YWQ0OTQ5YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW2jQqhwg1ogaYdHALajB1OnEibkJBWVtlmBrjVCoiUrjBiSPMs7xc1 ZRfueQOfEZ2En8Jile2cZH75hKtiQtfcxXm4iHAwf+V7dadH7Ex3f6bAbvaN1gne qZxrqFdp12zwK1u9QDr+ZbGEa5SDLzniYLYvoWhV9gEgMtLffwV0IvDdGC5/8dPe VgS0iVGPuYgDXFDITpsaYiQ9DoJ3OlijgJOvEy9MX1m+y7sJd+PLCSDbwCQJFe7b OweTvfCpte1wnF7dXMXELFef9gnu0VpWnMop4WOT1DfwQXRTPaOnWfvDAud+/yXg DQc3S2PF2IWEv5LQ0eqjm5M0fPjyDAE= -----END CERTIFICATE-----Generated at Wed Jul 29 05:18:00 2026 by rpki-client