$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa File: 52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa (raw, json) Hash identifier: g8heaKS+TNCDnebNapFLv2M1k4AKiF54ZBOWmT7hI1E= Subject key identifier: 5B:05:C5:83:83:49:4F:D3:B6:1A:5A:40:FE:7B:7B:C0:F9:0C:D2:34 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F3FAD40693EDE69F58C448600 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 393249 IP address blocks: 128.189.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:40:69:3e:de:69:f5:8c:44:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=5bf89745-dffc-4c93-8bed-72fae55ccc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fa:09:f1:b2:45:b1:b9:a5:63:2e:6f:65:d5: e3:7e:1a:6d:64:55:00:6d:84:40:26:25:2c:99:e6: 63:f8:d8:a8:b2:c8:92:0e:11:20:21:f6:93:2e:5b: 40:a5:9f:ea:40:00:1e:03:f8:f8:21:83:b7:09:f8: 32:62:d3:97:cd:b9:8c:e3:a2:c9:6d:d8:16:8e:39: f9:6e:4a:1a:38:54:86:75:5b:61:e7:df:23:bc:f8: 35:8b:fb:c6:85:02:29:b9:f4:9c:df:37:b2:b5:17: d7:d7:13:6c:7a:5c:44:3c:a3:c2:01:5b:69:34:d6: b0:f6:57:6c:14:b0:d2:45:83:55:5a:6c:c0:67:55: 88:65:5e:82:b4:46:86:c6:c5:2f:23:5a:2a:bc:20: 4d:3b:71:4b:b4:78:d9:24:81:37:71:a1:5c:c3:e9: 20:67:05:de:d8:fd:5f:f1:f5:64:6f:c6:af:4a:d7: 3a:df:13:4f:26:0d:d2:86:d8:d1:63:42:b7:7c:f8: f3:72:76:27:b0:2c:fc:28:75:6b:16:df:93:af:ed: 35:2f:bd:cf:d9:f4:31:d2:65:f4:bc:f5:75:c4:0b: f5:0b:24:05:c8:24:3a:7e:51:7c:65:4e:23:35:7e: d1:90:b3:87:4e:57:85:67:ed:07:b3:d3:2b:d8:f2: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:05:C5:83:83:49:4F:D3:B6:1A:5A:40:FE:7B:7B:C0:F9:0C:D2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ad:e4:da:34:32:6d:2a:66:a8:2b:19:e2:33:84:bb:d6:b8: bb:bc:30:3d:91:81:71:91:04:39:89:07:a7:ec:ef:6a:ff:46: 4c:1d:0c:95:57:21:8f:91:64:6a:16:d4:ff:52:7d:1a:8a:3a: d7:3b:a3:66:03:61:d9:52:b2:0a:86:86:ca:38:7a:7b:0a:25: 71:09:64:18:90:c7:81:d9:76:28:af:4b:4f:0f:63:64:6d:3b: 42:b4:b5:d2:d8:6b:7d:af:d7:aa:14:0b:6d:81:30:9e:c0:d4: 68:36:c8:bb:47:10:d4:43:30:89:c4:dc:84:dc:b7:67:a9:f7: 45:3f:5f:f0:04:5c:ed:73:71:10:67:4e:42:6d:31:ce:6f:f6: 91:ea:62:f2:0c:84:ec:21:9a:58:10:fc:85:47:d9:29:1a:63: ab:86:ca:72:4f:34:43:0b:e3:81:02:63:04:54:e1:7f:9d:2b: 05:f0:fa:99:79:ad:f4:b0:1e:5a:fd:01:e1:c2:b0:77:be:e7: 10:b8:f1:8d:d7:66:ef:e1:09:6a:30:16:8d:b9:46:4e:1e:a2: 3a:ca:58:86:48:01:fd:ac:f6:ab:40:57:a9:75:f3:68:07:b3: 97:ee:2e:e5:0d:c6:ba:c4:e8:c5:78:69:a1:cc:22:15:92:cd: e4:33:d9:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUBpPt5p9YxEhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NWJmODk3NDUtZGZmYy00YzkzLThiZWQtNzJmYWU1NWNjYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPoJ8bJFsbmlYy5vZdXjfhptZFUAbYRAJiUs meZj+NiossiSDhEgIfaTLltApZ/qQAAeA/j4IYO3CfgyYtOXzbmM46LJbdgWjjn5 bkoaOFSGdVth598jvPg1i/vGhQIpufSc3zeytRfX1xNselxEPKPCAVtpNNaw9lds FLDSRYNVWmzAZ1WIZV6CtEaGxsUvI1oqvCBNO3FLtHjZJIE3caFcw+kgZwXe2P1f 8fVkb8avStc63xNPJg3ShtjRY0K3fPjzcnYnsCz8KHVrFt+Tr+01L73P2fQx0mX0 vPV1xAv1CyQFyCQ6flF8ZU4jNX7RkLOHTleFZ+0Hs9Mr2PJ0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsFxYODSU/TthpaQP57e8D5DNI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTJmNGI0ZTAtMzEyMi0z ZmUwLThmMTctNGVmYjJkMmFjZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgL0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGt5No0Mm0qZqgrGeIzhLvWuLu8MD2RgXGRBDmJB6fs72r/RkwdDJVX IY+RZGoW1P9SfRqKOtc7o2YDYdlSsgqGhso4ensKJXEJZBiQx4HZdiivS08PY2Rt O0K0tdLYa32v16oUC22BMJ7A1Gg2yLtHENRDMInE3ITct2ep90U/X/AEXO1zcRBn TkJtMc5v9pHqYvIMhOwhmlgQ/IVH2SkaY6uGynJPNEML44ECYwRU4X+dKwXw+pl5 rfSwHlr9AeHCsHe+5xC48Y3XZu/hCWowFo25Rk4eojrKWIZIAf2s9qtAV6l182gH s5fuLuUNxrrE6MV4aaHMIhWSzeQz2Q4= -----END CERTIFICATE-----Generated at Sat Sep 26 04:10:48 2026 by rpki-client