$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa File: bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa (raw, json) Hash identifier: yXhZLeEqfzzr/mS6CdSnYDjAoq6SXKQfgNhIy7y3NxM= Subject key identifier: 2B:56:5F:25:00:D2:3D:46:EA:22:B6:E6:32:70:07:FC:B4:DD:2F:A5 Certificate issuer: /CN=2b52814e-343c-46a0-bf89-2e9064856503 Certificate serial: 010D0C9F4328584F3CE2807A03539CD978C63440 Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 16276 IP address blocks: 192.30.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:80:7a:03:53:9c:d9:78:c6:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=8acbee7a-0c2e-4464-bc2d-d05938f86d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:48:e4:d0:18:32:37:89:f7:1e:e6:5a:a0: a5:d2:0f:c3:39:e3:b1:8b:30:37:ff:7f:2b:af:b8: b4:e3:5a:f1:dd:3a:3e:df:67:4d:c7:a6:b5:97:3a: a2:ff:22:bc:27:b1:f1:8a:ab:86:02:27:7b:3e:ef: ff:6e:12:2d:85:3d:77:46:43:2e:1c:55:4e:42:a3: 3d:d0:f1:b1:49:29:d5:03:ba:2a:4c:df:b6:b7:a9: d6:ff:2a:0e:8b:3d:e5:f6:6e:36:1f:8d:e4:f8:dd: d0:72:e8:37:d9:ad:fd:d1:55:f6:54:da:66:7b:cd: 9c:79:9c:a5:bf:d3:0e:08:2c:f8:9a:1a:43:53:9a: 48:d4:96:9c:17:ec:d0:bd:09:cf:f4:9b:0d:bd:e4: 43:71:a5:91:43:a1:8c:b0:82:3a:c7:0f:5f:9d:ca: c9:50:9d:75:e3:df:0e:89:c9:a0:98:c3:a2:55:ff: a5:97:29:08:5e:fe:dd:65:64:ba:4a:0e:da:40:83: ec:cf:34:74:be:5f:a8:02:0c:b7:23:da:43:23:c5: 3b:47:92:d9:b8:0e:4c:89:64:9d:73:e5:38:e3:b8: ed:c2:4c:c7:f7:ab:d8:be:4d:de:62:aa:85:04:b8: 89:6d:a2:dd:b3:02:5c:02:0d:ab:7a:71:cd:3d:da: 8c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:56:5F:25:00:D2:3D:46:EA:22:B6:E6:32:70:07:FC:B4:DD:2F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl X509v3 Authority Key Identifier: keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer sbgp-ipAddrBlock: critical IPv4: 192.30.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:d0:e0:84:5a:5c:38:53:6b:72:bd:66:1a:02:ea:47:c3:04: c8:f2:55:20:c4:45:98:17:c8:1e:6a:cd:da:c4:35:40:9d:1d: 4e:60:9b:15:0e:03:40:eb:1f:65:07:38:80:be:ce:2f:1c:90: 12:6c:df:02:fe:a1:89:ff:fd:ff:03:54:74:c6:2e:0a:96:de: e3:17:49:8a:c0:96:45:93:f2:e4:24:ff:f9:02:8f:f0:00:49: 49:42:af:77:86:9b:67:40:be:83:fc:0f:f2:76:d1:ff:e0:5c: 20:77:f7:9f:14:1a:d8:fe:2d:f3:07:65:dc:a1:cd:16:5e:fa: 40:ed:8f:44:ff:1e:b3:e0:94:06:2f:52:b4:a2:07:d2:c3:52: e5:1c:9e:af:f3:d0:96:4c:61:23:a6:9d:14:e4:d9:bc:52:d3: fe:48:bf:d9:1a:c5:a3:ff:7b:36:0a:32:9b:6b:b7:3f:99:c3: 85:59:33:84:fc:6e:1f:1f:d2:8b:8b:a1:b0:2c:22:a5:0e:f2: 6b:0f:80:1e:0c:26:bb:45:c4:80:0b:fe:e3:a9:ee:df:2b:70: eb:44:bb:3a:14:96:9b:47:ad:df:c5:0b:2c:e3:a5:fb:9f:53: 3c:e0:ca:01:81:22:8f:90:f1:2b:9c:e4:9d:2e:cf:df:30:65: 97:db:ea:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oB6A1Oc2XjGNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1MjgxNGUtMzQzYy00NmEwLWJmODktMmU5MDY0ODU2 NTAzMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OGFjYmVlN2EtMGMyZS00NDY0LWJjMmQtZDA1OTM4Zjg2ZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleZI5NAYMjeJ9x7mWqCl0g/DOeOxizA3/38r r7i041rx3To+32dNx6a1lzqi/yK8J7HxiquGAid7Pu//bhIthT13RkMuHFVOQqM9 0PGxSSnVA7oqTN+2t6nW/yoOiz3l9m42H43k+N3Qcug32a390VX2VNpme82ceZyl v9MOCCz4mhpDU5pI1JacF+zQvQnP9JsNveRDcaWRQ6GMsII6xw9fncrJUJ11498O icmgmMOiVf+llykIXv7dZWS6Sg7aQIPszzR0vl+oAgy3I9pDI8U7R5LZuA5MiWSd c+U447jtwkzH96vYvk3eYqqFBLiJbaLdswJcAg2renHNPdqMfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtWXyUA0j1G6iK25jJwB/y03S+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUy ODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkwNjQ4NTY1MDMvYmRhYmM2YWMtNDc4MS0z ODRmLWE0NzMtY2YyNmMwZmZkYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmI1MjgxNGUtMzQzYy00NmEwLWJm ODktMmU5MDY0ODU2NTAzLzJiNTI4MTRlLTM0M2MtNDZhMC1iZjg5LTJlOTA2NDg1 NjUwMy5jcmwwHwYDVR0jBBgwFoAU6dRwuiGQ7tcv2d+VxyZ/OvYvKE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUyODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkw NjQ4NTY1MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPQ4IRaXDhTa3K9ZhoC6kfDBMjyVSDERZgXyB5qzdrENUCdHU5gmxUO A0DrH2UHOIC+zi8ckBJs3wL+oYn//f8DVHTGLgqW3uMXSYrAlkWT8uQk//kCj/AA SUlCr3eGm2dAvoP8D/J20f/gXCB3958UGtj+LfMHZdyhzRZe+kDtj0T/HrPglAYv UrSiB9LDUuUcnq/z0JZMYSOmnRTk2bxS0/5Iv9kaxaP/ezYKMptrtz+Zw4VZM4T8 bh8f0ouLobAsIqUO8msPgB4MJrtFxIAL/uOp7t8rcOtEuzoUlptHrd/FCyzjpfuf UzzgygGBIo+Q8Suc5J0uz98wZZfb6vA= -----END CERTIFICATE-----Generated at Tue Sep 22 20:04:16 2026 by rpki-client