$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa File: 8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa (raw, json) Hash identifier: XgwwEPWxbKRmRKVUM/okaAno0Jhdok3CUYonDaP6JYI= Subject key identifier: 8A:36:90:C3:EF:E7:5E:1B:A2:AF:1D:5F:25:E6:A0:FE:24:D4:DA:06 Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584EC372B24D19A9F8BA096D7CA0 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 26548 IP address blocks: 172.111.48.0/24 maxlen: 24 199.253.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:b2:4d:19:a9:f8:ba:09:6d:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=f20e92cc-efe0-4a09-8098-ca551f1001ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:b7:c4:7a:17:0c:16:1b:fe:47:a0:df:1f: 66:14:97:88:dc:5d:e7:a9:03:b9:c8:0c:dd:c4:02: 5f:3c:18:b9:c5:87:01:40:38:af:b7:19:09:58:8c: 64:ef:43:41:07:96:6d:c8:f9:f9:0d:85:95:ed:d9: 7f:37:c2:36:14:fd:5c:9f:5b:9d:5f:2f:0b:75:3d: 96:8e:20:54:09:6e:03:db:ce:49:c4:aa:ff:cb:22: 30:99:0f:27:4d:15:55:12:8c:e6:c8:dc:74:38:f1: 45:ef:1c:e7:0d:30:c0:0c:f5:a6:14:39:b4:6b:17: 85:b8:5f:37:19:c9:69:b7:01:87:68:91:9d:78:fc: c3:98:51:59:8d:03:8a:4e:01:34:ed:9e:08:10:d1: 77:5a:98:49:42:fc:69:89:27:d4:61:eb:14:2f:32: a7:e0:43:ed:18:41:79:36:f1:1f:4b:ea:f2:3f:b1: bd:0d:c8:40:bc:01:9f:b6:26:ad:4c:a6:49:40:bd: 2b:8f:49:f8:cc:01:fd:bc:65:9e:ff:50:0f:16:d9: c6:c4:a8:b1:57:5d:2e:b4:06:fd:bf:ca:1d:de:7e: 8c:0e:05:42:20:d5:c6:b6:ca:18:ce:0e:09:42:a8: 52:f0:a7:5d:0c:0a:c5:b0:52:92:39:b8:86:79:58: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:36:90:C3:EF:E7:5E:1B:A2:AF:1D:5F:25:E6:A0:FE:24:D4:DA:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8a920efd-ab5d-35cb-9eba-1a26e89d7014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.48.0/24 199.253.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:86:8f:bd:7c:f9:35:7c:4d:b0:ea:43:bd:0d:1e:1b:aa:da: b2:f3:6f:c2:20:7b:cb:f4:66:bb:2d:81:6c:e9:a2:51:06:f8: d4:ed:09:79:84:26:3a:4a:da:ed:50:1c:e0:cf:f9:b9:42:21: 4f:d8:63:98:d2:a9:74:78:f5:bd:eb:a1:72:b1:20:22:6a:3d: 79:3c:97:39:3b:42:26:e9:87:a4:e1:e8:1f:b6:22:81:44:06: bc:6b:43:85:d4:36:aa:73:f3:1a:73:37:16:f0:e9:98:8e:10: 6f:32:69:c1:8a:77:27:7b:16:bd:cb:ec:2f:5f:b3:b7:c3:1e: 66:51:e1:d0:7a:5d:19:b3:14:43:7a:d9:05:bf:76:75:cd:cf: 54:5c:89:1d:e4:ad:c3:a2:3b:75:8e:79:2b:79:3a:5f:2e:cf: 35:c0:80:2c:7c:70:76:62:5f:46:ea:3e:59:f6:21:4c:ad:bf: 84:1d:5a:90:de:1d:f7:da:2d:13:47:8d:e5:f8:6e:da:6a:da: b8:14:1b:e4:63:91:d7:50:93:f0:e9:b0:4f:6e:13:71:a4:a5: 22:28:63:c1:77:47:42:be:df:b3:08:8e:14:3b:6c:40:1d:49: c6:e5:4d:56:64:b1:6c:11:fe:54:f6:c3:d8:39:2f:36:0e:e6: a6:29:84:b4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7DcrJNGan4ugltfKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZjIwZTkyY2MtZWZlMC00YTA5LTgwOTgtY2E1NTFmMTAwMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8q3xHoXDBYb/keg3x9mFJeI3F3nqQO5yAzd xAJfPBi5xYcBQDivtxkJWIxk70NBB5ZtyPn5DYWV7dl/N8I2FP1cn1udXy8LdT2W jiBUCW4D285JxKr/yyIwmQ8nTRVVEozmyNx0OPFF7xznDTDADPWmFDm0axeFuF83 GclptwGHaJGdePzDmFFZjQOKTgE07Z4IENF3WphJQvxpiSfUYesULzKn4EPtGEF5 NvEfS+ryP7G9DchAvAGftiatTKZJQL0rj0n4zAH9vGWe/1APFtnGxKixV10utAb9 v8od3n6MDgVCINXGtsoYzg4JQqhS8KddDArFsFKSObiGeVgBDQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIo2kMPv514boq8dXyXmoP4k1NoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvOGE5MjBlZmQtYWI1ZC0z NWNiLTllYmEtMWEyNmU4OWQ3MDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArG8wAwQA x/0eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABqGj718+TV8TbDqQ70NHhuq2rLzb8Ige8v0ZrstgWzpolEG +NTtCXmEJjpK2u1QHODP+blCIU/YY5jSqXR49b3roXKxICJqPXk8lzk7Qibph6Th 6B+2IoFEBrxrQ4XUNqpz8xpzNxbw6ZiOEG8yacGKdyd7Fr3L7C9fs7fDHmZR4dB6 XRmzFEN62QW/dnXNz1RciR3krcOiO3WOeSt5Ol8uzzXAgCx8cHZiX0bqPln2IUyt v4QdWpDeHffaLRNHjeX4btpq2rgUG+RjkddQk/DpsE9uE3GkpSIoY8F3R0K+37MI jhQ7bEAdScblTVZksWwR/lT2w9g5LzYO5qYphLQ= -----END CERTIFICATE-----Generated at Sat Sep 5 05:23:16 2026 by rpki-client