$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/edbaea99-aa77-370f-b495-b6afb9512a4c.roa File: edbaea99-aa77-370f-b495-b6afb9512a4c.roa (raw, json) Hash identifier: do4Bi5Yw6TaC9P5kDVuxzF2m6MFikqHE3g/F0aJ188U= Subject key identifier: 3D:13:B8:68:89:91:99:3F:F2:B4:C9:0A:32:1E:D1:08:CB:0D:BD:41 Certificate issuer: /CN=52ef44c2-b190-4c91-a394-c8a96856e595 Certificate serial: 010D0C9F4328584F655D7B0A8826817BC647B500 Authority key identifier: 15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/edbaea99-aa77-370f-b495-b6afb9512a4c.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 14618 IP address blocks: 207.211.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7b:0a:88:26:81:7b:c6:47:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ef44c2-b190-4c91-a394-c8a96856e595 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=d08cedf5-44de-4bc4-a478-b2a4463e520c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:87:02:00:27:68:58:3c:c9:0e:5a:f8:d0:0d: f2:7a:8f:84:64:d6:12:e3:0b:d1:0c:34:01:19:ec: 6b:b7:44:60:55:82:03:87:4c:af:32:72:c6:a9:31: d9:28:9e:b1:0b:9a:53:cd:e7:95:c4:90:c1:5a:db: 51:b3:a7:a6:4d:16:e8:f9:4f:a3:bb:72:a6:a1:63: 6a:38:db:3e:4f:33:be:ff:a6:19:75:53:68:00:f6: c3:98:dd:19:b0:f7:04:1c:b6:a4:84:28:20:b7:c9: b5:fa:90:9d:2b:db:fe:13:7f:0b:98:90:95:bf:fd: 41:be:6b:96:77:ed:62:42:60:6a:ba:74:de:4e:62: 20:72:49:58:e2:38:1b:d9:22:7d:4d:01:1a:54:8c: 38:b4:19:81:cb:58:f0:1f:f5:47:73:2f:91:0b:5a: 2f:5e:b0:e2:57:c8:c9:c4:dd:cc:92:c0:a2:e3:fb: c7:7e:3a:49:85:23:4a:17:f5:a2:ee:5d:19:aa:6f: d1:e7:da:30:54:5d:4e:68:6b:af:65:e5:1b:fa:2c: 82:78:a3:d8:62:2a:e5:3e:92:a6:a4:a7:40:e9:16: 75:a0:6e:cf:41:16:eb:be:ea:a1:ea:5f:44:a3:5a: 19:d5:4d:20:56:c2:f9:07:05:36:25:bf:6a:7a:4d: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:13:B8:68:89:91:99:3F:F2:B4:C9:0A:32:1E:D1:08:CB:0D:BD:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/edbaea99-aa77-370f-b495-b6afb9512a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595/52ef44c2-b190-4c91-a394-c8a96856e595.crl X509v3 Authority Key Identifier: keyid:15:DF:1A:C7:67:5B:41:C6:5D:2B:A4:9D:82:8C:45:14:89:D2:8C:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52ef44c2-b190-4c91-a394-c8a96856e595.cer sbgp-ipAddrBlock: critical IPv4: 207.211.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9e:bc:d8:96:90:7e:fe:0e:07:b3:75:61:49:b2:9c:77:15: 13:7b:aa:1b:6b:4a:51:18:46:3c:49:12:78:ab:9f:a2:67:a2: 21:b1:cd:c3:d0:de:fd:25:cd:47:55:88:43:37:9f:cb:da:e8: 5b:b8:51:34:45:cc:e0:85:2b:21:ad:e0:38:cb:92:bc:c9:13: c8:0a:4f:cf:63:3f:97:23:ab:68:1c:17:1a:bc:31:ad:90:4b: 30:14:43:68:a8:48:a4:5c:30:52:fc:58:6e:d6:36:a2:9d:b4: 93:da:38:be:1d:be:ca:d9:2b:3c:d2:dd:0c:ae:f2:65:7e:03: f1:13:71:32:98:23:1c:63:02:54:18:3b:4a:58:05:c4:5b:81: 66:4d:23:b2:98:7f:66:26:ef:56:5c:e5:12:96:70:4d:1b:c1: 9d:bb:c6:d0:37:56:2b:68:2e:18:4f:d0:14:ea:e5:2e:80:8b: 26:a8:b1:4c:17:bc:b2:79:d9:7d:05:84:25:fe:71:17:32:37: c2:0d:92:96:eb:29:1d:c5:79:79:9c:09:1b:71:ef:fe:14:1b: f9:a1:22:78:d0:20:c3:46:94:93:d7:33:b4:88:bb:0b:d2:77: 12:7e:bd:9d:96:cc:60:72:43:da:dd:3c:bc:eb:d8:3b:ae:89: bd:93:fa:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXsKiCaBe8ZHtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlZjQ0YzItYjE5MC00YzkxLWEzOTQtYzhhOTY4NTZl NTk1MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZDA4Y2VkZjUtNDRkZS00YmM0LWE0NzgtYjJhNDQ2M2U1MjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4cCACdoWDzJDlr40A3yeo+EZNYS4wvRDDQB Gexrt0RgVYIDh0yvMnLGqTHZKJ6xC5pTzeeVxJDBWttRs6emTRbo+U+ju3KmoWNq ONs+TzO+/6YZdVNoAPbDmN0ZsPcEHLakhCggt8m1+pCdK9v+E38LmJCVv/1BvmuW d+1iQmBqunTeTmIgcklY4jgb2SJ9TQEaVIw4tBmBy1jwH/VHcy+RC1ovXrDiV8jJ xN3MksCi4/vHfjpJhSNKF/Wi7l0Zqm/R59owVF1OaGuvZeUb+iyCeKPYYirlPpKm pKdA6RZ1oG7PQRbrvuqh6l9Eo1oZ1U0gVsL5BwU2Jb9qek2yDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0TuGiJkZk/8rTJCjIe0QjLDb1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmVm NDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5Njg1NmU1OTUvZWRiYWVhOTktYWE3Ny0z NzBmLWI0OTUtYjZhZmI5NTEyYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlZjQ0YzItYjE5MC00YzkxLWEz OTQtYzhhOTY4NTZlNTk1LzUyZWY0NGMyLWIxOTAtNGM5MS1hMzk0LWM4YTk2ODU2 ZTU5NS5jcmwwHwYDVR0jBBgwFoAUFd8ax2dbQcZdK6SdgoxFFInSjBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmVmNDRjMi1iMTkwLTRjOTEtYTM5NC1jOGE5 Njg1NmU1OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz9PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuevNiWkH7+DgezdWFJspx3FRN7qhtrSlEYRjxJEnirn6JnoiGxzcPQ 3v0lzUdViEM3n8va6Fu4UTRFzOCFKyGt4DjLkrzJE8gKT89jP5cjq2gcFxq8Ma2Q SzAUQ2ioSKRcMFL8WG7WNqKdtJPaOL4dvsrZKzzS3Qyu8mV+A/ETcTKYIxxjAlQY O0pYBcRbgWZNI7KYf2Ym71Zc5RKWcE0bwZ27xtA3VitoLhhP0BTq5S6AiyaosUwX vLJ52X0FhCX+cRcyN8INkpbrKR3FeXmcCRtx7/4UG/mhInjQIMNGlJPXM7SIuwvS dxJ+vZ2WzGByQ9rdPLzr2Duuib2T+kI= -----END CERTIFICATE-----Generated at Tue Oct 6 04:04:04 2026 by rpki-client