$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa File: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (raw, json) Hash identifier: ci4M33OiNvIwW+ANH39myMDykjhbzaxBlYBkASOmLE4= Subject key identifier: B5:F5:CF:87:5A:90:03:58:38:C5:9E:BB:19:86:DA:F1:6A:D4:1E:6B Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F4328584EC0A727ABF84B612513C57140 Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 54334 IP address blocks: 52.119.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:27:ab:f8:4b:61:25:13:c5:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=2d6ecc7a-77f0-4744-bed3-904751e435ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:88:5a:93:34:e5:81:76:38:c3:27:24:b1:16: 13:b6:f7:6f:5f:c7:52:92:b0:68:d8:99:ab:95:8c: fe:ac:f9:24:65:48:23:66:b9:2d:3a:46:59:b0:2f: e1:f8:3a:69:6e:b5:49:ce:59:bd:4b:99:70:bd:d0: 24:f5:7a:15:d2:06:36:71:90:6d:c2:0a:47:ea:93: e7:29:df:d2:3c:f9:9f:ed:9e:00:af:8d:24:61:20: 8d:9a:75:23:5d:04:4d:15:20:42:a9:e0:57:af:39: eb:4d:7f:60:78:69:b4:4c:cc:4d:84:55:7a:96:e6: e1:16:b8:4f:98:6b:65:ed:29:92:80:71:3a:17:96: 1a:08:5b:dd:0d:b6:e3:70:31:e9:8f:2f:2c:18:53: 72:ff:87:bf:fe:c4:92:fb:e3:f5:a7:aa:1a:67:df: 7a:12:a9:ab:b6:3e:29:67:b1:db:bc:70:54:51:12: c8:19:ae:ff:02:cc:eb:ce:1a:39:9c:de:fa:b9:a0: d4:50:6f:c7:94:b0:e3:74:8c:e4:15:06:f5:f0:3a: 36:6f:c5:09:9e:15:31:20:b6:66:6c:ee:c6:76:a0: ba:54:8a:7d:af:6a:41:96:9e:67:ab:f9:6f:d0:18: 47:93:fe:ed:f6:e9:17:72:26:5e:80:e0:db:b1:65: 7e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F5:CF:87:5A:90:03:58:38:C5:9E:BB:19:86:DA:F1:6A:D4:1E:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: 52.119.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fb:f9:5d:10:aa:c1:4a:ad:dc:12:3f:21:45:f4:e6:a7:50: 88:fb:6b:d0:f8:12:dd:a0:8b:6d:3f:0e:fc:0a:e2:76:ab:e8: 17:85:c5:f1:dc:dc:c4:a2:d7:05:eb:e2:98:e8:11:a3:89:9e: 52:57:ac:6b:37:1f:cc:3b:4f:89:16:1e:e3:32:c9:3e:2f:e2: d2:d3:df:8c:58:b0:71:ed:ce:a9:60:fb:bd:7d:20:6f:e9:3b: 6b:5a:03:7d:73:30:67:5c:a8:63:40:de:20:ca:57:10:d2:97: f3:b1:e7:99:05:f0:7b:14:86:4b:f1:9f:e8:cf:47:03:05:52: 9c:0b:97:d5:95:56:59:68:e8:61:e1:f9:7b:7f:ba:38:45:f2: f5:c0:6c:c5:79:2e:ae:74:95:5c:54:b4:5c:94:1f:a2:47:3a: e8:d6:43:1a:42:04:ca:ee:06:25:ea:fa:01:71:9a:df:91:c3: 40:fb:24:af:99:b1:81:df:73:6c:ab:85:4e:c4:5b:d2:89:2a: 8a:7d:0a:33:6c:8c:98:4f:70:fa:50:e2:eb:fc:42:c4:7d:3e: c4:4e:12:1e:5d:67:c8:1a:bb:49:14:53:90:3b:74:59:60:9f: a9:2d:f7:5a:88:d1:ac:06:02:cc:aa:d2:37:55:a4:6a:fd:0a: b4:8c:68:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apyer+EthJRPFcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk MmQ2ZWNjN2EtNzdmMC00NzQ0LWJlZDMtOTA0NzUxZTQzNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhohakzTlgXY4wycksRYTtvdvX8dSkrBo2Jmr lYz+rPkkZUgjZrktOkZZsC/h+DppbrVJzlm9S5lwvdAk9XoV0gY2cZBtwgpH6pPn Kd/SPPmf7Z4Ar40kYSCNmnUjXQRNFSBCqeBXrznrTX9geGm0TMxNhFV6lubhFrhP mGtl7SmSgHE6F5YaCFvdDbbjcDHpjy8sGFNy/4e//sSS++P1p6oaZ996Eqmrtj4p Z7HbvHBUURLIGa7/Aszrzho5nN76uaDUUG/HlLDjdIzkFQb18Do2b8UJnhUxILZm bO7GdqC6VIp9r2pBlp5nq/lv0BhHk/7t9ukXciZegODbsWV+yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLX1z4dakANYOMWeuxmG2vFq1B5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvYmY5YThlMTctOGE4Zi0z ODlhLTgwYjQtOGFiZjgyYTg1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT7+V0QqsFKrdwSPyFF9OanUIj7a9D4Et2gi20/DvwK4nar6BeFxfHc 3MSi1wXr4pjoEaOJnlJXrGs3H8w7T4kWHuMyyT4v4tLT34xYsHHtzqlg+719IG/p O2taA31zMGdcqGNA3iDKVxDSl/Ox55kF8HsUhkvxn+jPRwMFUpwLl9WVVllo6GHh +Xt/ujhF8vXAbMV5Lq50lVxUtFyUH6JHOujWQxpCBMruBiXq+gFxmt+Rw0D7JK+Z sYHfc2yrhU7EW9KJKop9CjNsjJhPcPpQ4uv8QsR9PsROEh5dZ8gau0kUU5A7dFlg n6kt91qI0awGAsyq0jdVpGr9CrSMaGY= -----END CERTIFICATE-----Generated at Thu Aug 27 16:53:43 2026 by rpki-client