$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa File: 3d97d649-dd61-39e8-94b1-2e5a345cf305.roa (raw, json) Hash identifier: ZA1KNVSjbhCaAih6fjLqbGouiD/eTJD549fQyW/9gcw= Subject key identifier: 72:9A:BA:AC:4B:D9:FE:84:94:DF:06:72:45:12:FD:87:AC:C8:7C:E8 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584F71ED9C5DC72A52AD4CEBD3C0 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 11775 IP address blocks: 192.149.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9c:5d:c7:2a:52:ad:4c:eb:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=f8fe2141-71f0-4611-a86d-b2c3bcaa875f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:07:08:f5:5c:a2:3c:b6:09:30:3c:d0:09: 72:97:1b:f7:e5:e5:f6:e8:8a:d2:91:04:30:98:66: 6c:5d:7d:f4:e0:8f:44:26:6b:a8:7c:b0:9e:87:4f: 45:20:90:28:7d:9e:23:3a:93:65:7f:44:a1:46:f3: 55:0c:3f:1b:0e:8a:52:a9:64:e5:eb:b7:e6:1a:69: 8e:3c:e6:b4:df:94:b6:9e:6c:8e:d4:fd:db:d4:58: fb:4a:cd:ab:09:e1:03:46:c4:14:30:e5:68:27:c0: f5:0e:91:1b:5f:65:85:53:01:be:72:2e:52:5e:6e: 6c:49:aa:70:87:19:47:66:29:52:3d:08:fa:f3:36: 6f:89:70:c9:cd:b8:74:5f:dc:6b:fe:89:f5:20:82: 15:d3:85:7a:47:34:2e:b7:3b:b1:a4:96:c6:ab:60: e6:70:80:06:32:4d:6c:bd:bb:b7:84:7e:d8:44:5c: 58:49:ab:ba:56:4d:a9:ef:f3:5a:6f:02:0e:59:89: 4e:d8:69:01:47:4d:c8:96:ba:f2:2e:62:57:df:99: c0:e9:57:1b:2b:17:d0:1c:64:b7:52:ca:a1:4f:ed: 70:39:d7:46:88:43:8e:a9:80:ce:df:b7:67:bc:e6: 40:45:1f:a1:ca:18:1c:11:81:f6:1b:a9:67:97:1c: 08:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9A:BA:AC:4B:D9:FE:84:94:DF:06:72:45:12:FD:87:AC:C8:7C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 192.149.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b6:f5:e7:b0:50:2b:62:ce:85:31:b7:db:0d:4c:10:a2:f9: 2d:ab:8a:dd:9c:24:72:80:56:f4:59:8d:32:1d:5d:26:6f:1f: 21:d6:d7:cc:70:21:cd:42:a6:e7:b3:b2:88:71:62:a1:db:d4: 46:99:15:ce:c3:cd:9c:eb:ef:d8:cf:d1:73:6e:f1:46:f4:bf: dc:80:35:48:4e:60:24:5c:fc:cf:46:d3:ae:39:31:0e:87:68: 34:a7:be:ec:f4:ca:38:5c:94:55:d8:de:d2:19:3d:19:ea:e4: 55:d5:3c:5f:5a:7e:44:12:34:b3:8e:e3:9c:ad:20:40:70:e1: b1:4b:5a:10:77:d8:90:6e:37:2b:40:1c:a2:64:89:d5:ea:6f: e5:ad:2d:67:45:06:96:de:cc:ab:a2:f0:63:fa:49:f3:56:f8: f3:46:1f:03:6b:6a:37:fa:84:02:98:a6:8e:7c:5e:6c:66:ac: 7d:ae:af:83:f9:ff:69:7b:21:24:20:b5:76:14:4e:40:68:a4: 23:f6:86:4a:3a:65:80:4c:00:c0:bd:7a:2e:04:67:16:2f:a2: 97:94:2d:33:d6:c1:6a:a7:e3:e6:9d:ae:08:42:bd:57:9f:22: 9b:ad:d2:d0:26:ec:a7:1b:43:21:c1:e0:2f:be:70:ad:b4:50: a4:31:fa:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ZxdxypSrUzr08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZjhmZTIxNDEtNzFmMC00NjExLWE4NmQtYjJjM2JjYWE4NzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9gHCPVcojy2CTA80Alylxv35eX26IrSkQQw mGZsXX304I9EJmuofLCeh09FIJAofZ4jOpNlf0ShRvNVDD8bDopSqWTl67fmGmmO POa035S2nmyO1P3b1Fj7Ss2rCeEDRsQUMOVoJ8D1DpEbX2WFUwG+ci5SXm5sSapw hxlHZilSPQj68zZviXDJzbh0X9xr/on1IIIV04V6RzQutzuxpJbGq2DmcIAGMk1s vbu3hH7YRFxYSau6Vk2p7/NabwIOWYlO2GkBR03IlrryLmJX35nA6VcbKxfQHGS3 UsqhT+1wOddGiEOOqYDO37dnvOZARR+hyhgcEYH2G6lnlxwIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKauqxL2f6ElN8GckUS/YesyHzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvM2Q5N2Q2NDktZGQ2MS0z OWU4LTk0YjEtMmU1YTM0NWNmMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu29eewUCtizoUxt9sNTBCi+S2rit2cJHKAVvRZjTIdXSZvHyHW18xw Ic1CpuezsohxYqHb1EaZFc7DzZzr79jP0XNu8Ub0v9yANUhOYCRc/M9G0645MQ6H aDSnvuz0yjhclFXY3tIZPRnq5FXVPF9afkQSNLOO45ytIEBw4bFLWhB32JBuNytA HKJkidXqb+WtLWdFBpbezKui8GP6SfNW+PNGHwNrajf6hAKYpo58XmxmrH2ur4P5 /2l7ISQgtXYUTkBopCP2hko6ZYBMAMC9ei4EZxYvopeULTPWwWqn4+adrghCvVef Iput0tAm7KcbQyHB4C++cK20UKQx+jc= -----END CERTIFICATE-----Generated at Wed Oct 14 04:06:34 2026 by rpki-client