$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa File: 52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa (raw, json) Hash identifier: 9N5EVs0f8hw6hP/ow38JPEotP6hg7e7RgUZh6DaD77g= Subject key identifier: DB:E5:90:B1:8C:AB:B2:D6:FE:AD:E5:78:CD:F4:3D:61:88:A3:2F:14 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584E9D4A73DBF4E482692AB33DC0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 393249 IP address blocks: 128.189.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:73:db:f4:e4:82:69:2a:b3:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=e48dbf3e-c25d-49d1-9d76-c6575d23b458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bb:cc:17:df:af:e8:cc:35:f0:51:67:f8:ce: 99:37:af:8c:8d:59:09:0e:d6:98:af:0f:10:f0:97: ce:13:94:36:2a:11:c9:71:15:19:06:f2:37:7b:75: e7:be:16:69:c2:6a:73:35:e4:ac:51:7a:a3:6c:6e: 4f:57:e2:b6:20:70:a2:13:84:6c:cc:64:26:e8:4e: 50:af:af:f6:bc:35:06:23:a7:19:56:7e:23:05:80: 2b:62:49:76:ef:0c:a8:54:51:e1:63:4e:e7:8b:7e: 79:12:27:87:c3:49:bf:1d:b0:8b:c5:39:39:53:08: 8e:21:f4:2c:e6:35:5d:bd:ac:56:4e:e3:01:08:4a: 37:54:cf:2f:cc:a0:23:78:d5:99:3c:63:27:e8:92: 11:23:59:28:81:8e:c3:d6:17:87:54:46:47:72:7e: 32:05:93:c6:6c:48:32:52:9b:d3:ed:4e:2d:4f:23: 85:aa:4e:14:30:f4:1b:29:5e:4a:4b:4a:cb:ad:69: 0a:55:d9:bc:10:11:53:66:34:20:2d:7a:5e:52:94: 5b:52:f6:1b:cb:fa:cd:56:8b:0f:61:6e:60:a2:84: d3:86:fd:d0:d6:37:09:a3:d9:46:ba:f7:c8:07:d3: ce:67:c1:01:6e:69:8c:c2:e9:76:c6:f0:6a:fa:c6: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E5:90:B1:8C:AB:B2:D6:FE:AD:E5:78:CD:F4:3D:61:88:A3:2F:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:08:de:de:9f:a5:c8:3e:13:95:b5:fb:b1:a9:02:ac:b1:04: 5b:e6:6a:df:15:1f:b7:3c:ab:a9:7c:ef:fd:b1:a8:a3:b0:b0: 08:19:aa:fa:05:1a:54:7e:32:0a:be:7f:40:57:63:b8:51:a7: ae:67:1c:0f:f8:84:7d:ec:fb:db:56:e6:da:5c:2b:00:d0:db: 87:d1:0d:ad:ba:f3:22:4c:32:23:1a:93:bb:e6:b9:c5:05:8c: 71:0c:e5:fe:30:1f:cb:df:8a:18:08:28:88:21:a7:6a:3d:99: 01:8a:81:22:19:b0:de:8b:aa:92:e4:dd:5e:8d:8f:cf:50:4e: 66:87:06:2d:18:b8:71:a9:d7:3c:76:a2:78:2e:df:63:a5:86: 8a:1e:19:35:79:55:9b:64:a4:0e:ac:21:f9:0c:25:08:8e:20: 82:c4:e4:5d:2d:39:3b:42:c1:00:c2:2b:0d:c3:0f:1b:a7:8a: ec:c2:87:41:30:20:2e:b6:80:83:73:7f:b8:99:8d:d9:ae:33: e6:60:1b:58:1d:f9:29:91:8e:d6:51:fb:a5:04:f4:d5:f2:ec: 86:3c:eb:46:b2:f3:78:f7:d6:2d:ba:b0:61:c1:ee:58:ff:46: 0e:d1:b5:f8:1f:80:14:31:22:24:41:10:44:7c:7b:9a:ca:64: 1f:0a:ce:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnPb9OSCaSqzPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZTQ4ZGJmM2UtYzI1ZC00OWQxLTlkNzYtYzY1NzVkMjNiNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrvMF9+v6Mw18FFn+M6ZN6+MjVkJDtaYrw8Q 8JfOE5Q2KhHJcRUZBvI3e3XnvhZpwmpzNeSsUXqjbG5PV+K2IHCiE4RszGQm6E5Q r6/2vDUGI6cZVn4jBYArYkl27wyoVFHhY07ni355EieHw0m/HbCLxTk5UwiOIfQs 5jVdvaxWTuMBCEo3VM8vzKAjeNWZPGMn6JIRI1kogY7D1heHVEZHcn4yBZPGbEgy UpvT7U4tTyOFqk4UMPQbKV5KS0rLrWkKVdm8EBFTZjQgLXpeUpRbUvYby/rNVosP YW5gooTThv3Q1jcJo9lGuvfIB9POZ8EBbmmMwul2xvBq+saVlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvlkLGMq7LW/q3leM30PWGIoy8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTJmNGI0ZTAtMzEyMi0z ZmUwLThmMTctNGVmYjJkMmFjZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgL0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYI3t6fpcg+E5W1+7GpAqyxBFvmat8VH7c8q6l87/2xqKOwsAgZqvoF GlR+Mgq+f0BXY7hRp65nHA/4hH3s+9tW5tpcKwDQ24fRDa268yJMMiMak7vmucUF jHEM5f4wH8vfihgIKIghp2o9mQGKgSIZsN6LqpLk3V6Nj89QTmaHBi0YuHGp1zx2 ongu32OlhooeGTV5VZtkpA6sIfkMJQiOIILE5F0tOTtCwQDCKw3DDxuniuzCh0Ew IC62gINzf7iZjdmuM+ZgG1gd+SmRjtZR+6UE9NXy7IY860ay83j31i26sGHB7lj/ Rg7RtfgfgBQxIiRBEER8e5rKZB8KzhE= -----END CERTIFICATE-----Generated at Wed Jul 29 07:21:52 2026 by rpki-client