$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/9399c7d8-aa78-3811-a49a-d4dc29f99201.roa File: 9399c7d8-aa78-3811-a49a-d4dc29f99201.roa (raw, json) Hash identifier: D168VHQcBOaVQX0LZtiIXuei0ZnWmJTqpATBkIxfO8o= Subject key identifier: B5:C9:06:90:24:9E:6F:18:50:26:CD:BE:73:C5:D4:22:F5:6B:1C:C2 Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945 Certificate serial: 010D0C9F4328584EEA8751F682B1BA0772644000 Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/9399c7d8-aa78-3811-a49a-d4dc29f99201.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 52.119.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:51:f6:82:b1:ba:07:72:64:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=efc6a1d4-bb70-4753-9258-3151ca570c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1a:09:07:99:9a:49:19:4a:23:30:d3:97:d5: 54:c2:e8:ed:53:1b:6b:58:78:4e:14:a0:a7:86:34: 43:c4:07:d7:c5:23:f2:e1:ad:f3:24:c5:b6:89:7c: 61:6b:04:0f:60:fe:87:cf:5d:e6:4e:04:c8:b1:55: 40:f9:0d:ad:66:99:9d:7b:81:cf:98:a2:e1:92:37: 61:73:f7:56:39:d0:dc:f7:bc:a7:99:f4:b3:f7:5f: 81:e8:1a:b6:a6:10:10:09:68:a5:f1:64:fc:98:e8: f1:30:ef:72:df:e6:19:0d:50:53:61:ea:bb:6f:4c: b0:7d:88:2e:2a:9b:a0:52:ff:97:7c:1c:78:40:f2: 64:4b:1c:23:70:93:f1:7c:d5:89:98:28:91:60:53: 19:22:66:b8:d1:72:aa:7a:a9:56:f5:61:f8:f8:75: dc:15:24:ed:d8:09:ec:bf:dc:ee:27:f9:cd:1a:3f: 77:23:90:1f:96:9f:60:23:56:3b:7a:c0:84:fb:a9: a2:ce:54:a8:19:43:ec:20:3c:93:9f:c6:38:dc:0b: 82:5c:fd:91:f0:aa:64:85:70:db:fb:36:9d:f5:db: f4:be:3c:68:8f:fc:1c:9f:be:4b:9b:73:b3:ed:95: 94:6e:16:01:6f:59:1f:b4:7e:ea:d4:de:4b:94:2b: 5f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C9:06:90:24:9E:6F:18:50:26:CD:BE:73:C5:D4:22:F5:6B:1C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/9399c7d8-aa78-3811-a49a-d4dc29f99201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl X509v3 Authority Key Identifier: keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer sbgp-ipAddrBlock: critical IPv4: 52.119.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:86:07:01:fa:67:b2:ae:43:1b:1c:17:e4:2c:e2:db:c5:97: aa:9c:04:87:04:2e:f9:a3:5b:5c:72:a1:23:f4:74:7f:eb:0c: 84:d1:e5:1d:dd:34:0f:71:f8:d7:e2:8c:20:ca:c6:ad:d8:b9: f7:3a:78:1c:18:6b:8a:76:ca:4c:1c:6c:5f:0b:ad:ba:e0:d3: 3b:54:21:e5:a6:ce:95:1a:91:0d:4a:a2:6f:03:ab:e8:fc:0d: 8f:a5:84:d5:11:f7:21:35:9c:3b:7d:96:70:a3:13:2a:07:b3: 90:f2:49:1d:19:48:b8:c8:81:e6:47:31:c3:8d:21:90:bc:1e: e1:56:93:d2:2d:3c:94:81:e2:2f:1c:73:24:cb:b5:94:df:ab: 2e:74:68:91:ca:c6:78:c5:72:e6:87:04:cc:b6:be:81:db:bc: f9:0b:22:20:e8:91:9f:0d:19:ea:ed:28:7e:e5:42:55:99:16: 7c:5e:8c:da:fc:2a:e6:6e:04:c3:01:ae:0e:e7:ff:cf:96:f4: 25:c5:d7:7f:cb:26:5f:da:77:ae:de:7c:b8:78:95:e0:7b:b2: ef:c1:39:c4:46:c9:3f:a8:3e:36:fc:89:6b:75:ae:ec:c7:90: 94:a5:11:87:02:81:d0:e3:66:03:de:22:93:c7:20:79:4f:67: 4d:40:b9:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1H2grG6B3JkQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1 OTQ1MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZWZjNmExZDQtYmI3MC00NzUzLTkyNTgtMzE1MWNhNTcwYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBoJB5maSRlKIzDTl9VUwujtUxtrWHhOFKCn hjRDxAfXxSPy4a3zJMW2iXxhawQPYP6Hz13mTgTIsVVA+Q2tZpmde4HPmKLhkjdh c/dWOdDc97ynmfSz91+B6Bq2phAQCWil8WT8mOjxMO9y3+YZDVBTYeq7b0ywfYgu KpugUv+XfBx4QPJkSxwjcJPxfNWJmCiRYFMZIma40XKqeqlW9WH4+HXcFSTt2Ans v9zuJ/nNGj93I5Aflp9gI1Y7esCE+6mizlSoGUPsIDyTn8Y43AuCXP2R8KpkhXDb +zad9dv0vjxoj/wcn75Lm3Oz7ZWUbhYBb1kftH7q1N5LlCtfUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXJBpAknm8YUCbNvnPF1CL1axzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvOTM5OWM3ZDgtYWE3OC0z ODExLWE0OWEtZDRkYzI5Zjk5MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1 NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy MmEzMTU5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSGBwH6Z7KuQxscF+Qs4tvFl6qcBIcELvmjW1xyoSP0dH/rDITR5R3d NA9x+NfijCDKxq3Yufc6eBwYa4p2ykwcbF8Lrbrg0ztUIeWmzpUakQ1Kom8Dq+j8 DY+lhNUR9yE1nDt9lnCjEyoHs5DySR0ZSLjIgeZHMcONIZC8HuFWk9ItPJSB4i8c cyTLtZTfqy50aJHKxnjFcuaHBMy2voHbvPkLIiDokZ8NGertKH7lQlWZFnxejNr8 KuZuBMMBrg7n/8+W9CXF13/LJl/ad67efLh4leB7su/BOcRGyT+oPjb8iWt1ruzH kJSlEYcCgdDjZgPeIpPHIHlPZ01AuXQ= -----END CERTIFICATE-----Generated at Sun Oct 11 19:04:17 2026 by rpki-client