$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997/509a489e-8366-3ae4-81b1-994da037ae7e.roa File: 509a489e-8366-3ae4-81b1-994da037ae7e.roa (raw, json) Hash identifier: TNqBgwrYsWDYmMHm3Bi3JERUdI+DGPj4eN+Bg1z/wYw= Subject key identifier: 26:FC:28:60:49:2A:41:B8:77:70:77:A5:2D:E3:88:D4:40:AD:C2:B9 Certificate issuer: /CN=9d7690aa-afcb-478c-bf49-5bc20314d997 Certificate serial: 010D0C9F4328584F9A10DD4196C57AC030B66380 Authority key identifier: B8:A4:77:FC:9E:DA:8A:11:81:99:F9:97:1C:47:43:8D:4A:FC:EB:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997/509a489e-8366-3ae4-81b1-994da037ae7e.roa Signing time: Fri 23 Oct 2026 22:03:55 +0000 ROA not before: Fri 23 Oct 2026 22:03:55 +0000 ROA not after: Thu 21 Jan 2027 23:03:55 +0000 asID: 397434 IP address blocks: 52.119.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997/9d7690aa-afcb-478c-bf49-5bc20314d997.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997/9d7690aa-afcb-478c-bf49-5bc20314d997.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:10:dd:41:96:c5:7a:c0:30:b6:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d7690aa-afcb-478c-bf49-5bc20314d997 Validity Not Before: Oct 23 22:03:55 2026 GMT Not After : Jan 21 23:03:55 2027 GMT Subject: CN=152e7da1-dc2f-4b0c-8054-0d270554839d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:31:d1:b3:46:c7:73:de:e1:ca:1f:54:07:d1: 4c:2d:38:9d:1a:fc:b6:ae:a3:29:11:df:f5:f1:60: d7:9a:03:a6:56:94:65:a5:dc:ce:0b:6c:19:7b:17: 76:15:83:74:18:1f:94:11:65:cc:72:3a:72:7f:19: 40:c8:1f:4d:40:35:ed:2b:ac:aa:33:28:43:27:96: f9:3e:04:4e:84:d4:9b:2d:93:2b:91:5f:bd:7e:e0: 3e:e3:a0:60:55:94:04:24:e1:3c:17:ff:d4:de:1b: 8a:a6:9f:db:ae:70:f8:ce:77:e6:ff:d5:75:e8:c0: f8:19:b9:51:ab:e8:43:3f:f2:1f:75:9d:7a:1e:7e: 64:23:3c:d5:f7:e3:ee:72:93:27:78:99:89:08:1e: 7c:64:a8:eb:c0:fa:95:48:cf:27:46:f3:e8:1b:dc: a2:51:60:00:20:7d:a3:7e:0c:35:1d:b7:f0:1d:8e: 57:30:5a:29:e9:ae:89:00:b9:57:40:25:60:a0:1a: f2:52:f5:6e:4f:3d:55:39:72:81:0a:41:40:92:02: cb:34:7f:08:1f:6a:fc:0e:93:d0:aa:80:03:22:3c: f5:5f:ef:4f:49:9d:4c:4b:38:e5:5d:99:2e:ef:0d: 86:92:35:fb:99:c2:e2:bd:16:44:65:17:20:77:71: 34:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FC:28:60:49:2A:41:B8:77:70:77:A5:2D:E3:88:D4:40:AD:C2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997/509a489e-8366-3ae4-81b1-994da037ae7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997/9d7690aa-afcb-478c-bf49-5bc20314d997.crl X509v3 Authority Key Identifier: keyid:B8:A4:77:FC:9E:DA:8A:11:81:99:F9:97:1C:47:43:8D:4A:FC:EB:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9d7690aa-afcb-478c-bf49-5bc20314d997.cer sbgp-ipAddrBlock: critical IPv4: 52.119.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:65:2d:de:66:30:d6:1b:36:77:b2:f6:37:24:8b:74:34:e2: c0:e9:c7:be:fb:bb:87:4b:e1:24:ac:69:26:ae:5d:da:06:87: 92:d6:0c:aa:5d:40:86:60:f6:df:8b:f1:fe:ff:ae:53:22:ca: 35:20:e5:c1:a5:71:f0:0a:22:71:9a:83:c7:32:fb:c8:29:17: 1f:a5:09:f9:b4:92:8a:b4:22:59:62:ea:07:9d:2f:56:25:64: ee:e7:6b:e0:ad:47:7c:7a:91:17:c2:49:34:35:aa:f6:59:10: 0b:3a:af:86:8d:be:bc:da:85:35:1c:9d:ca:13:21:3e:3a:4a: 3e:79:64:48:80:84:ee:45:05:62:f0:b0:35:67:db:37:74:6c: 67:3a:37:8d:75:ba:f4:7d:fa:bb:c7:c5:30:14:3a:df:67:ae: 7a:78:a3:a1:ab:bc:67:30:e9:84:33:fb:b9:5d:d9:f7:6e:8a: 9a:ac:1e:14:54:77:a5:59:59:e8:ac:ef:72:3e:cf:91:71:ef: 0e:42:2b:26:9e:d4:f1:71:7a:98:22:c5:54:53:87:3b:b4:0f: 59:d3:07:9e:44:59:ab:09:e2:26:1e:93:af:60:d1:d6:93:7f: d5:9d:9a:de:64:f3:8d:70:e1:2a:eb:1b:f7:eb:0c:d9:d8:c0: 6a:e2:56:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aEN1BlsV6wDC2Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ3NjkwYWEtYWZjYi00NzhjLWJmNDktNWJjMjAzMTRk OTk3MB4XDTI2MTAyMzIyMDM1NVoXDTI3MDEyMTIzMDM1NVowLzEtMCsGA1UEAxMk MTUyZTdkYTEtZGMyZi00YjBjLTgwNTQtMGQyNzA1NTQ4MzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzHRs0bHc97hyh9UB9FMLTidGvy2rqMpEd/1 8WDXmgOmVpRlpdzOC2wZexd2FYN0GB+UEWXMcjpyfxlAyB9NQDXtK6yqMyhDJ5b5 PgROhNSbLZMrkV+9fuA+46BgVZQEJOE8F//U3huKpp/brnD4znfm/9V16MD4GblR q+hDP/IfdZ16Hn5kIzzV9+PucpMneJmJCB58ZKjrwPqVSM8nRvPoG9yiUWAAIH2j fgw1HbfwHY5XMFop6a6JALlXQCVgoBryUvVuTz1VOXKBCkFAkgLLNH8IH2r8DpPQ qoADIjz1X+9PSZ1MSzjlXZku7w2GkjX7mcLivRZEZRcgd3E0wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCb8KGBJKkG4d3B3pS3jiNRArcK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85ZDc2 OTBhYS1hZmNiLTQ3OGMtYmY0OS01YmMyMDMxNGQ5OTcvNTA5YTQ4OWUtODM2Ni0z YWU0LTgxYjEtOTk0ZGEwMzdhZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOWQ3NjkwYWEtYWZjYi00NzhjLWJm NDktNWJjMjAzMTRkOTk3LzlkNzY5MGFhLWFmY2ItNDc4Yy1iZjQ5LTViYzIwMzE0 ZDk5Ny5jcmwwHwYDVR0jBBgwFoAUuKR3/J7aihGBmfmXHEdDjUr869wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS85ZDc2OTBhYS1hZmNiLTQ3OGMtYmY0OS01YmMy MDMxNGQ5OTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRlLd5mMNYbNney9jcki3Q04sDpx777u4dL4SSsaSauXdoGh5LWDKpd QIZg9t+L8f7/rlMiyjUg5cGlcfAKInGag8cy+8gpFx+lCfm0koq0Illi6gedL1Yl ZO7na+CtR3x6kRfCSTQ1qvZZEAs6r4aNvrzahTUcncoTIT46Sj55ZEiAhO5FBWLw sDVn2zd0bGc6N411uvR9+rvHxTAUOt9nrnp4o6GrvGcw6YQz+7ld2fduipqsHhRU d6VZWeis73I+z5Fx7w5CKyae1PFxepgixVRThzu0D1nTB55EWasJ4iYek69g0daT f9Wdmt5k841w4SrrG/frDNnYwGriVsQ= -----END CERTIFICATE-----Generated at Sun Nov 1 17:33:00 2026 by rpki-client