$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa File: acc5bd5d-5f68-3673-813c-63c52d3a1683.roa (raw, json) Hash identifier: k23zc2YgYapHhlTXvqoBbwhzOdwqv5P746CJqnWOQhM= Subject key identifier: C9:A5:4C:FE:31:22:DE:7F:47:66:7E:59:9A:CB:6D:10:6F:FE:BE:63 Certificate issuer: /CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Certificate serial: 010D0C9F4328584F4975649A2A9075F34F286B00 Authority key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21521 IP address blocks: 192.252.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:64:9a:2a:90:75:f3:4f:28:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0e676341-1fe3-421e-8b29-c193fab9a62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e7:b7:6c:f7:db:aa:d1:73:db:92:7f:ff:ac: f7:6d:c9:8f:8a:19:45:d1:aa:9b:2e:05:04:b2:8d: b3:12:93:4e:06:21:d3:d0:99:a3:eb:66:c3:36:5a: 70:6b:c7:6d:6a:e9:5b:09:46:17:2f:77:a7:b1:2f: 1f:5f:6e:bc:64:75:22:1b:50:fb:9a:63:31:ec:ca: 8b:11:be:c1:c9:7f:72:13:e9:d6:61:97:a1:8a:fb: f3:fd:e9:92:b7:cb:86:ab:f9:a8:25:23:80:85:82: 56:e3:d9:3d:a6:6c:22:5e:ae:b2:c1:a8:81:2a:25: b7:4d:90:4a:51:78:e1:91:04:7e:07:92:40:01:d5: e5:86:75:a5:ca:23:6f:29:a3:52:4c:7a:72:16:10: 36:b9:ab:47:1b:55:04:98:6d:24:b3:b3:fd:49:d7: 30:bf:28:c0:e1:dc:55:b1:2f:29:d0:5b:9d:91:4c: 25:9f:74:b0:95:de:2d:03:da:df:1b:a0:0f:8e:99: 45:cd:da:7d:80:2a:98:de:db:8a:cf:c2:8c:29:fb: 37:7c:bb:7c:19:7f:ee:33:51:0a:8d:73:42:ed:91: 80:60:01:9a:77:f4:b1:c7:e4:bd:74:39:55:2e:ac: d5:80:5a:42:ab:b5:cc:3c:f8:74:83:32:5d:d4:16: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A5:4C:FE:31:22:DE:7F:47:66:7E:59:9A:CB:6D:10:6F:FE:BE:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl X509v3 Authority Key Identifier: keyid:8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer sbgp-ipAddrBlock: critical IPv4: 192.252.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:8a:fa:72:50:9b:e9:cb:d1:ab:5e:e9:39:40:b3:6b:76:cc: 8a:0a:7a:17:b1:b7:aa:56:45:d5:27:44:ad:9a:06:36:63:71: da:60:33:7c:e0:0f:d0:67:7f:c1:f6:d0:0c:b5:5e:5a:bf:51: 84:a8:21:71:32:4b:6d:54:d9:e2:ba:66:60:ac:42:38:b5:e7: bd:7a:3b:e2:ce:81:de:19:e8:26:03:ba:71:8d:69:61:bd:c5: 51:cb:47:c1:d3:66:dd:cd:e5:04:b7:3b:8f:9c:b9:66:0f:ce: ac:80:db:3d:d5:61:a5:9d:58:7d:d2:92:e0:3f:d3:68:7f:98: 3f:02:df:60:19:e1:1a:39:8d:bf:c0:b0:e1:39:3d:72:4b:ae: a5:30:6f:32:76:44:48:27:89:52:d9:60:6d:ac:e9:09:90:1c: f5:e5:14:cf:dc:38:45:ce:7d:78:8d:0d:ca:f4:57:26:4e:5c: 1f:f6:df:32:b9:c6:a3:b5:cd:12:31:fc:18:3c:a3:e1:ab:aa: 25:38:dc:99:22:a8:74:c4:80:e3:15:b6:63:4f:1f:a1:fc:c3: 8d:09:70:d5:95:7a:72:8d:82:9d:87:04:f0:84:ef:b6:51:d6: 9a:32:34:a9:17:18:a2:86:ff:f0:ab:4c:64:49:fb:32:68:11: 4b:28:45:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdWSaKpB1808oawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJjOTQ1OTItNzNlOS00NTJlLWFkODgtYWFmYzhlM2Vl N2E1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGU2NzYzNDEtMWZlMy00MjFlLThiMjktYzE5M2ZhYjlhNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+e3bPfbqtFz25J//6z3bcmPihlF0aqbLgUE so2zEpNOBiHT0Jmj62bDNlpwa8dtaulbCUYXL3ensS8fX268ZHUiG1D7mmMx7MqL Eb7ByX9yE+nWYZehivvz/emSt8uGq/moJSOAhYJW49k9pmwiXq6ywaiBKiW3TZBK UXjhkQR+B5JAAdXlhnWlyiNvKaNSTHpyFhA2uatHG1UEmG0ks7P9SdcwvyjA4dxV sS8p0FudkUwln3Swld4tA9rfG6APjplFzdp9gCqY3tuKz8KMKfs3fLt8GX/uM1EK jXNC7ZGAYAGad/Sxx+S9dDlVLqzVgFpCq7XMPPh0gzJd1BZAxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmlTP4xIt5/R2Z+WZrLbRBv/r5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMmM5 NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUzZWU3YTUvYWNjNWJkNWQtNWY2OC0z NjczLTgxM2MtNjNjNTJkM2ExNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjJjOTQ1OTItNzNlOS00NTJlLWFk ODgtYWFmYzhlM2VlN2E1L2IyYzk0NTkyLTczZTktNDUyZS1hZDg4LWFhZmM4ZTNl ZTdhNS5jcmwwHwYDVR0jBBgwFoAUi1izm4Qm8HXsOYvA8T1AHv13TxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZj OGUzZWU3YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSK+nJQm+nL0ate6TlAs2t2zIoKehext6pWRdUnRK2aBjZjcdpgM3zg D9Bnf8H20Ay1Xlq/UYSoIXEyS21U2eK6ZmCsQji15716O+LOgd4Z6CYDunGNaWG9 xVHLR8HTZt3N5QS3O4+cuWYPzqyA2z3VYaWdWH3SkuA/02h/mD8C32AZ4Ro5jb/A sOE5PXJLrqUwbzJ2REgniVLZYG2s6QmQHPXlFM/cOEXOfXiNDcr0VyZOXB/23zK5 xqO1zRIx/Bg8o+GrqiU43JkiqHTEgOMVtmNPH6H8w40JcNWVenKNgp2HBPCE77ZR 1poyNKkXGKKG//CrTGRJ+zJoEUsoRXg= -----END CERTIFICATE-----Generated at Mon Nov 2 06:52:11 2026 by rpki-client