$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa File: 9a56588a-a022-38cf-a593-5622658a6eae.roa (raw, json) Hash identifier: z2iaubbKltX/pRL5VBul7wUAp3vSYkTU7JUY9gPTP0s= Subject key identifier: 88:0C:83:75:89:5D:AA:F5:D1:67:CC:54:CD:D0:58:81:E3:B2:BC:61 Certificate issuer: /CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Certificate serial: 010D0C9F4328584F49766A9543F3376FACC47600 Authority key identifier: 68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 207.229.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:6a:95:43:f3:37:6f:ac:c4:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2937e85d-0faa-482f-8402-5735d93234aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:1b:37:16:44:72:4c:76:f0:94:08:77:e5: 51:30:bd:00:6c:74:94:07:b8:f8:6a:ba:c2:a1:38: 74:2a:cd:25:fe:be:cd:f3:93:c2:f6:7d:b4:fe:ec: f3:cd:1f:2e:91:0b:3c:6f:13:16:bd:3a:70:24:55: 22:29:40:4d:38:8a:b2:f0:5a:80:5b:24:b1:e4:98: eb:42:b0:e6:85:c4:05:bc:d3:4b:45:c7:eb:40:8f: 04:85:f2:68:31:d5:b5:00:37:7a:a2:51:14:0a:49: 0d:8a:8b:7d:9c:9e:b8:80:2b:96:fd:9f:71:34:e7: aa:20:fa:90:5b:6d:8e:47:a5:eb:c3:c4:c2:03:8d: 55:5c:73:89:13:9e:1c:5a:d4:0a:d8:44:e7:1a:47: 3c:89:2e:bf:f5:1c:a9:b8:a6:69:45:47:7d:3d:c9: 02:9f:ad:f2:dc:c4:6f:bb:62:36:60:38:78:aa:09: 63:8e:42:98:bf:8d:07:68:81:02:00:92:ec:c7:32: f9:3e:17:ce:89:bb:91:2b:67:58:27:22:85:71:35: e9:a7:78:ab:74:40:a1:a6:3e:04:84:cc:0d:3b:1c: 9c:11:ed:89:3f:04:fb:0e:7d:38:7e:07:12:ca:9e: 21:b1:d1:7d:32:94:5e:40:d2:a3:5e:f6:5c:ce:86: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0C:83:75:89:5D:AA:F5:D1:67:CC:54:CD:D0:58:81:E3:B2:BC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl X509v3 Authority Key Identifier: keyid:68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer sbgp-ipAddrBlock: critical IPv4: 207.229.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b1:18:d1:f0:32:6f:13:a4:b7:a7:49:69:bb:16:84:db:55: f5:8d:35:28:9f:88:13:b0:20:e4:71:65:db:b1:3d:82:8c:0a: 0a:be:f8:0c:e3:dd:78:0a:66:1d:19:95:77:f8:99:16:bb:62: 28:da:2c:9f:9e:b8:f8:c2:aa:d4:91:b4:ae:87:20:25:bc:d5: d1:36:6d:1c:b1:7f:88:5b:a3:82:62:01:db:8b:96:f1:fa:16: e5:af:81:34:c1:19:9c:a3:0e:d8:01:69:45:31:a4:9f:ef:44: 86:4f:20:ee:77:54:e8:ae:31:fe:bc:d3:5b:c5:61:29:73:68: 1b:cc:bd:03:33:7c:53:8c:82:74:da:66:5c:09:b5:88:99:6c: 0d:64:1a:3f:83:c1:f3:2b:21:bd:35:40:74:30:e8:6d:71:ef: 51:e3:29:b0:d3:66:fc:1d:45:69:6d:a9:70:43:9a:3b:01:40: 3e:ad:2e:3b:44:ff:0d:4c:89:c6:9c:e8:05:7b:99:01:fc:30: 72:7d:31:c0:07:94:8a:b6:f0:a2:24:df:f4:08:34:df:ce:cb: 83:4c:51:fa:1f:c0:be:e3:25:cf:5b:c1:2e:0b:b7:a9:7e:24: 3c:ba:5f:1a:2f:a7:21:f7:c5:10:53:03:5d:6d:75:4e:2c:11: e1:5e:1e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdmqVQ/M3b6zEdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyZjNiNDItMmMxOS00MTQxLThkOGEtZmE4NGIzZDZh NDllMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjkzN2U4NWQtMGZhYS00ODJmLTg0MDItNTczNWQ5MzIzNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbcbNxZEckx28JQId+VRML0AbHSUB7j4arrC oTh0Ks0l/r7N85PC9n20/uzzzR8ukQs8bxMWvTpwJFUiKUBNOIqy8FqAWySx5Jjr QrDmhcQFvNNLRcfrQI8EhfJoMdW1ADd6olEUCkkNiot9nJ64gCuW/Z9xNOeqIPqQ W22OR6Xrw8TCA41VXHOJE54cWtQK2ETnGkc8iS6/9RypuKZpRUd9PckCn63y3MRv u2I2YDh4qgljjkKYv40HaIECAJLsxzL5PhfOibuRK2dYJyKFcTXpp3irdEChpj4E hMwNOxycEe2JPwT7Dn04fgcSyp4hsdF9MpReQNKjXvZczoZiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgMg3WJXar10WfMVM3QWIHjsrxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJm M2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0YjNkNmE0OWUvOWE1NjU4OGEtYTAyMi0z OGNmLWE1OTMtNTYyMjY1OGE2ZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUyZjNiNDItMmMxOS00MTQxLThk OGEtZmE4NGIzZDZhNDllL2E1MmYzYjQyLTJjMTktNDE0MS04ZDhhLWZhODRiM2Q2 YTQ5ZS5jcmwwHwYDVR0jBBgwFoAUaFJMWQoxo0Idq3/2fxcNn2S+QUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJmM2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0 YjNkNmE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+V1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABexGNHwMm8TpLenSWm7FoTbVfWNNSifiBOwIORxZduxPYKMCgq++Azj 3XgKZh0ZlXf4mRa7YijaLJ+euPjCqtSRtK6HICW81dE2bRyxf4hbo4JiAduLlvH6 FuWvgTTBGZyjDtgBaUUxpJ/vRIZPIO53VOiuMf6801vFYSlzaBvMvQMzfFOMgnTa ZlwJtYiZbA1kGj+DwfMrIb01QHQw6G1x71HjKbDTZvwdRWltqXBDmjsBQD6tLjtE /w1Micac6AV7mQH8MHJ9McAHlIq28KIk3/QINN/Oy4NMUfofwL7jJc9bwS4Lt6l+ JDy6XxovpyH3xRBTA11tdU4sEeFeHkA= -----END CERTIFICATE-----Generated at Tue Oct 20 22:26:37 2026 by rpki-client