$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/62e15b3a-4800-3253-ac1c-98f25c0db00d.roa File: 62e15b3a-4800-3253-ac1c-98f25c0db00d.roa (raw, json) Hash identifier: qhrqLMgigg+dTZlLcMspPr/uS8J9C5BNonndrFtElc0= Subject key identifier: 42:86:65:41:C7:3F:B9:B4:FE:5B:F1:5E:3F:C5:50:C5:D3:01:0D:82 Certificate issuer: /CN=693058af-5777-47e8-8d51-1b7f5214bf85 Certificate serial: 010D0C9F4328584F85787A46308DD6FA0B3C95C0 Authority key identifier: 10:6C:66:4D:7F:62:A8:1A:E3:A3:AF:C5:D9:18:DB:B6:0F:40:4F:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/62e15b3a-4800-3253-ac1c-98f25c0db00d.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 64249 IP address blocks: 52.124.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/693058af-5777-47e8-8d51-1b7f5214bf85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/693058af-5777-47e8-8d51-1b7f5214bf85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:7a:46:30:8d:d6:fa:0b:3c:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693058af-5777-47e8-8d51-1b7f5214bf85 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=9609d018-0558-42bb-9865-8354d5c70ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b4:f7:2b:a4:7e:38:c3:4d:61:80:ed:28:15: 21:a0:60:4b:a3:69:d3:3b:bb:9f:92:c6:41:fd:f3: 15:e7:bb:8a:1b:b2:bd:17:6f:9c:29:23:6f:d1:c1: 77:a8:a6:25:94:9f:63:1c:0c:ee:e3:87:85:2b:e7: 30:c7:20:2e:3c:14:d7:4c:c5:18:f2:80:83:06:44: 92:7c:d6:35:72:1d:a7:76:49:59:2a:a1:e0:88:d8: f5:d1:db:86:bd:50:8b:1e:35:d8:26:1e:4d:a2:81: 44:8a:7b:23:17:73:67:6b:4c:5d:ea:c6:44:f7:43: 95:f2:e2:f8:30:c6:55:50:db:0b:fd:bc:fd:62:d1: bb:22:45:00:f3:97:de:54:89:42:76:af:01:d7:a8: 72:50:12:6a:49:43:b1:54:05:0a:aa:1e:d3:40:ab: d7:23:65:88:a9:35:18:fd:ad:18:b1:0a:ba:17:92: ff:6e:b9:7b:16:fd:24:07:20:29:27:d5:ab:0e:db: 02:52:76:87:03:50:3b:91:67:b1:8f:1f:aa:8b:a6: ae:f4:19:52:12:3c:23:61:86:0c:8f:3e:e5:16:d2: 82:1b:98:33:be:8a:fd:ce:53:47:47:f3:c0:d7:2b: 3d:ad:c8:13:ef:fc:1a:f7:fb:53:e6:d0:09:30:48: 92:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:86:65:41:C7:3F:B9:B4:FE:5B:F1:5E:3F:C5:50:C5:D3:01:0D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/62e15b3a-4800-3253-ac1c-98f25c0db00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/693058af-5777-47e8-8d51-1b7f5214bf85.crl X509v3 Authority Key Identifier: keyid:10:6C:66:4D:7F:62:A8:1A:E3:A3:AF:C5:D9:18:DB:B6:0F:40:4F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85.cer sbgp-ipAddrBlock: critical IPv4: 52.124.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d8:23:34:87:c6:fd:cf:ad:ee:a4:ea:09:4b:61:7a:3c:3b: bb:bd:c4:03:33:a1:fc:7a:f4:6f:25:8b:53:5b:cc:d7:4f:b8: 9d:5e:aa:a3:9a:a3:70:c6:2a:4d:4e:7e:67:77:a8:36:ea:cf: c9:07:17:60:09:46:2a:09:28:7d:5e:ea:77:92:5c:80:bd:4f: cc:bf:e6:9e:5e:d7:ec:a2:8f:d9:a4:79:12:e2:b1:73:0f:f9: 1f:e5:c3:75:2c:44:de:a0:fb:1d:13:a3:08:ba:c8:6b:10:28: 9f:9b:8a:5a:03:db:aa:63:ad:74:83:4d:f9:60:ca:84:45:36: 25:fc:eb:60:b6:41:51:09:e3:ca:0f:a9:07:b7:a8:61:91:4d: 9d:cc:0e:7f:44:01:65:78:e9:2c:f6:21:97:ea:49:24:bd:a8: a1:71:10:4b:b9:00:ec:89:05:4f:37:22:1d:26:79:c4:92:3b: c3:18:a8:8e:b1:70:64:3f:98:32:49:8d:71:6e:4a:7c:25:48: b7:c4:a5:8e:16:e0:46:50:5d:ea:63:18:ae:53:8f:ed:10:e6: 6e:8f:78:28:92:07:74:c6:f9:f6:42:02:8d:eb:64:35:31:62: 98:96:41:26:7a:75:b8:5f:f4:e7:e6:bc:14:0d:f6:a0:09:33: be:28:92:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHpGMI3W+gs8lcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkzMDU4YWYtNTc3Ny00N2U4LThkNTEtMWI3ZjUyMTRi Zjg1MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk OTYwOWQwMTgtMDU1OC00MmJiLTk4NjUtODM1NGQ1YzcwZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrT3K6R+OMNNYYDtKBUhoGBLo2nTO7ufksZB /fMV57uKG7K9F2+cKSNv0cF3qKYllJ9jHAzu44eFK+cwxyAuPBTXTMUY8oCDBkSS fNY1ch2ndklZKqHgiNj10duGvVCLHjXYJh5NooFEinsjF3Nna0xd6sZE90OV8uL4 MMZVUNsL/bz9YtG7IkUA85feVIlCdq8B16hyUBJqSUOxVAUKqh7TQKvXI2WIqTUY /a0YsQq6F5L/brl7Fv0kByApJ9WrDtsCUnaHA1A7kWexjx+qi6au9BlSEjwjYYYM jz7lFtKCG5gzvor9zlNHR/PA1ys9rcgT7/wa9/tT5tAJMEiSoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKGZUHHP7m0/lvxXj/FUMXTAQ2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OTMw NThhZi01Nzc3LTQ3ZTgtOGQ1MS0xYjdmNTIxNGJmODUvNjJlMTViM2EtNDgwMC0z MjUzLWFjMWMtOThmMjVjMGRiMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjkzMDU4YWYtNTc3Ny00N2U4LThk NTEtMWI3ZjUyMTRiZjg1LzY5MzA1OGFmLTU3NzctNDdlOC04ZDUxLTFiN2Y1MjE0 YmY4NS5jcmwwHwYDVR0jBBgwFoAUEGxmTX9iqBrjo6/F2Rjbtg9AT6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OTMwNThhZi01Nzc3LTQ3ZTgtOGQ1MS0xYjdm NTIxNGJmODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNHwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnYIzSHxv3Pre6k6glLYXo8O7u9xAMzofx69G8li1NbzNdPuJ1eqqOa o3DGKk1Ofmd3qDbqz8kHF2AJRioJKH1e6neSXIC9T8y/5p5e1+yij9mkeRLisXMP +R/lw3UsRN6g+x0Towi6yGsQKJ+biloD26pjrXSDTflgyoRFNiX862C2QVEJ48oP qQe3qGGRTZ3MDn9EAWV46Sz2IZfqSSS9qKFxEEu5AOyJBU83Ih0mecSSO8MYqI6x cGQ/mDJJjXFuSnwlSLfEpY4W4EZQXepjGK5Tj+0Q5m6PeCiSB3TG+fZCAo3rZDUx YpiWQSZ6dbhf9OfmvBQN9qAJM74okg0= -----END CERTIFICATE-----Generated at Sat Oct 17 15:34:49 2026 by rpki-client