$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/52ed63d0-c525-3000-be55-0e8fb72d3e5c.roa File: 52ed63d0-c525-3000-be55-0e8fb72d3e5c.roa (raw, json) Hash identifier: ANGA5kVepJflABrtTmsFiR+TSGWp919uKSJeW6OxwP4= Subject key identifier: CE:66:AB:6E:98:CB:C6:5C:4F:22:5F:B0:AF:B9:DF:B7:6E:C7:24:EA Certificate issuer: /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Certificate serial: 010D0C9F4328584EF19F22C77D2AE2FC3D7A3780 Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/52ed63d0-c525-3000-be55-0e8fb72d3e5c.roa Signing time: Mon 24 Aug 2026 13:58:58 +0000 ROA not before: Mon 24 Aug 2026 13:58:58 +0000 ROA not after: Tue 06 Oct 2026 15:05:49 +0000 asID: 402215 IP address blocks: 192.120.199.0/24 maxlen: 24 192.137.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:9f:22:c7:7d:2a:e2:fc:3d:7a:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Validity Not Before: Aug 24 13:58:58 2026 GMT Not After : Oct 6 15:05:49 2026 GMT Subject: CN=440bf191-0585-48dc-9144-184c0c24d452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:8d:42:9c:b6:2f:2d:94:52:6a:e7:48:79: 13:5f:6f:51:4f:3d:b7:01:1a:ca:4b:3a:99:e2:d8: e2:10:54:30:39:b0:8d:86:fd:3e:0a:70:ed:a1:28: fb:d8:28:06:a4:45:ce:49:68:2d:cb:16:71:2c:89: cb:ff:cd:1c:1a:9f:31:f0:0d:59:23:e7:d1:4d:04: 29:f6:a9:41:2f:b8:b2:7d:a7:45:f4:6c:9a:b2:7b: 42:8c:33:3a:01:2e:2c:eb:72:db:20:72:2a:5b:65: 8d:80:69:ba:73:63:ad:d9:9a:a1:4a:2a:38:d1:35: d6:1e:17:a4:af:bb:bd:a9:c1:1e:02:32:9e:f8:14: 92:6d:56:87:2a:f7:23:a5:e6:42:28:60:35:41:11: e0:9f:a3:26:83:26:ca:b0:20:be:a9:f4:b3:0a:2f: a6:f7:c5:db:74:84:61:7f:85:03:9e:eb:f2:29:63: 9d:53:90:ac:c1:00:7e:f1:40:59:e8:ea:29:2e:51: 9c:7e:ef:95:9d:63:33:b2:44:cd:01:de:44:8e:be: 94:1d:12:31:a5:f3:6b:bf:40:87:d0:39:0a:71:eb: 70:74:5f:eb:42:e2:f4:e6:cf:19:96:ed:44:ee:0b: 4f:bb:e2:e1:54:90:d7:61:0a:bd:d4:97:4f:59:dc: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:66:AB:6E:98:CB:C6:5C:4F:22:5F:B0:AF:B9:DF:B7:6E:C7:24:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/52ed63d0-c525-3000-be55-0e8fb72d3e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl X509v3 Authority Key Identifier: keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer sbgp-ipAddrBlock: critical IPv4: 192.120.199.0/24 192.137.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:af:2c:97:68:fd:ee:44:17:70:2d:0a:dd:6a:bb:e4:5a:5b: 46:e7:4f:80:8a:c0:d8:5f:5b:bd:c6:c4:2a:94:88:14:67:10: da:1f:fa:74:22:a6:ee:fd:4e:15:df:20:46:34:d2:a7:de:df: 31:91:8a:41:dd:ed:2f:3a:ca:a2:ba:98:e2:7f:ee:72:d4:9f: f4:2d:cf:81:6b:01:78:79:8e:81:25:2d:60:69:91:be:f0:e8: 1e:05:e1:2d:7c:83:d8:9f:5b:c5:7b:58:3f:39:40:3c:4f:c1: af:e3:56:3d:41:f5:7f:d7:f4:75:0d:81:80:bb:bc:06:aa:73: aa:84:70:aa:65:6b:1a:68:12:02:08:f8:87:92:d1:f0:dc:2a: 81:23:d9:32:49:ed:b4:e8:06:41:ce:48:4b:79:d2:9c:65:82: bd:65:77:56:ea:95:ab:25:48:1c:25:a6:6e:5d:68:07:3b:7a: 63:a5:4a:07:1b:2b:e8:72:74:30:04:42:8f:74:58:ff:be:9b: 58:56:72:24:1c:21:98:76:3e:33:fd:f8:75:7b:e0:cf:54:5f: 41:06:60:45:e2:3f:fb:14:93:81:49:51:20:c4:f5:06:3f:1f: 78:99:1a:cf:27:09:ef:cd:50:f7:6f:ba:48:96:1f:4b:26:ac: 24:a6:48:de -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7xnyLHfSri/D16N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx MDQzMB4XDTI2MDgyNDEzNTg1OFoXDTI2MTAwNjE1MDU0OVowLzEtMCsGA1UEAxMk NDQwYmYxOTEtMDU4NS00OGRjLTkxNDQtMTg0YzBjMjRkNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYONQpy2Ly2UUmrnSHkTX29RTz23ARrKSzqZ 4tjiEFQwObCNhv0+CnDtoSj72CgGpEXOSWgtyxZxLInL/80cGp8x8A1ZI+fRTQQp 9qlBL7iyfadF9GyasntCjDM6AS4s63LbIHIqW2WNgGm6c2Ot2ZqhSio40TXWHhek r7u9qcEeAjKe+BSSbVaHKvcjpeZCKGA1QRHgn6MmgybKsCC+qfSzCi+m98XbdIRh f4UDnuvyKWOdU5CswQB+8UBZ6OopLlGcfu+VnWMzskTNAd5Ejr6UHRIxpfNrv0CH 0DkKcetwdF/rQuL05s8Zlu1E7gtPu+LhVJDXYQq91JdPWdwptQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFM5mq26Yy8ZcTyJfsK+537duxyTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvNTJlZDYzZDAtYzUyNS0z MDAwLWJlNTUtMGU4ZmI3MmQzZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5 MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1 MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi YmJlNTEwNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHjHAwQA wIl6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK6vLJdo/e5EF3AtCt1qu+RaW0bnT4CKwNhfW73GxCqUiBRn ENof+nQipu79ThXfIEY00qfe3zGRikHd7S86yqK6mOJ/7nLUn/Qtz4FrAXh5joEl LWBpkb7w6B4F4S18g9ifW8V7WD85QDxPwa/jVj1B9X/X9HUNgYC7vAaqc6qEcKpl axpoEgII+IeS0fDcKoEj2TJJ7bToBkHOSEt50pxlgr1ld1bqlaslSBwlpm5daAc7 emOlSgcbK+hydDAEQo90WP++m1hWciQcIZh2PjP9+HV74M9UX0EGYEXiP/sUk4FJ USDE9QY/H3iZGs8nCe/NUPdvukiWH0smrCSmSN4= -----END CERTIFICATE-----Generated at Tue Sep 1 03:02:18 2026 by rpki-client