$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/9399c7d8-aa78-3811-a49a-d4dc29f99201.roa File: 9399c7d8-aa78-3811-a49a-d4dc29f99201.roa (raw, json) Hash identifier: hDXvkK++WlyIIJRa7jIkLGQFb6grm/HjVRh1Ke8x2EM= Subject key identifier: 81:FE:00:86:E0:1E:BB:95:22:9F:2B:DC:A8:D8:81:1E:19:8A:FD:49 Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945 Certificate serial: 010D0C9F4328584E482482E992728CE4F26AC200 Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/9399c7d8-aa78-3811-a49a-d4dc29f99201.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 52.119.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:82:e9:92:72:8c:e4:f2:6a:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=ce18996a-340f-4810-8404-bc08eda86af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:e3:ca:34:b4:52:a7:f0:0d:c9:30:f3:02: 1f:53:06:8b:7d:75:b7:83:c2:be:07:ff:f2:30:a1: e1:ca:3e:69:25:b8:36:43:8a:9c:86:a3:d4:de:84: 2d:a0:55:e6:d8:67:cd:b1:7c:e2:3e:b4:11:db:d7: 15:97:e9:33:44:7c:88:80:23:7a:46:df:5f:67:99: 01:16:63:a8:fa:86:2e:22:76:83:13:81:f0:67:6f: 92:3d:59:df:b0:da:df:f1:b0:06:d6:2d:d8:c1:d4: 90:10:ce:29:12:9d:2b:29:e6:40:84:3d:a3:c3:11: 7b:31:49:69:2f:ee:53:40:57:ed:22:58:7d:30:71: a0:b1:1f:a3:33:e2:66:99:1b:60:02:e4:0f:4d:f2: ad:51:9b:46:eb:28:5b:c4:da:ac:af:ff:ad:dc:ff: 60:cd:f8:d4:aa:ea:37:62:9c:98:ae:83:89:02:0a: f7:ea:1c:26:d9:16:16:10:20:02:08:d0:ae:9e:81: 47:8a:be:4d:60:b5:4a:bd:fb:73:59:15:b5:47:70: 6c:6e:c7:8f:bd:c1:2a:bf:c4:52:f9:8f:c0:9b:a5: 12:98:63:55:19:e8:31:7a:70:76:47:a2:e3:c7:63: a2:53:34:75:2d:6a:d7:32:37:e2:f1:65:fc:94:9c: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FE:00:86:E0:1E:BB:95:22:9F:2B:DC:A8:D8:81:1E:19:8A:FD:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/9399c7d8-aa78-3811-a49a-d4dc29f99201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl X509v3 Authority Key Identifier: keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer sbgp-ipAddrBlock: critical IPv4: 52.119.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b7:32:6f:f9:74:53:81:c3:45:3e:7c:47:3d:61:3e:2f:b2: c7:53:cc:f9:83:c2:ca:ed:ea:65:21:9b:56:15:6c:8e:23:44: 64:4e:5e:c2:b1:24:0e:fb:03:41:5e:88:bd:ba:52:d2:7d:37: 6d:f2:85:68:f8:e6:c9:15:9b:f5:ad:98:3c:79:72:2a:78:04: 0a:2f:27:3b:59:06:4d:03:50:32:f7:7a:3a:9a:70:01:70:be: 97:00:e7:cc:68:3a:99:0d:c6:ab:14:f1:df:4b:51:8d:8f:2a: c1:46:55:bf:59:41:15:11:a3:49:dc:59:e0:52:42:01:b3:e2: 8b:44:98:f4:1a:75:bf:a9:a9:56:8b:fa:83:b2:4c:6f:30:54: 0c:26:9e:03:7b:df:ae:2c:8d:40:c2:50:88:3b:ef:63:b0:2f: 27:78:b5:d2:36:1b:0f:6c:c8:23:fa:6c:9a:52:3e:7d:59:1e: 65:03:97:64:41:41:42:c7:28:d1:91:31:ca:3f:62:54:c7:e1: d4:98:1f:18:c8:6f:ea:16:24:62:a7:4a:63:f4:b4:e6:90:68: 54:38:18:0b:f6:00:00:30:ca:2b:f1:78:4c:35:e6:1a:f4:3c: 13:3e:bf:15:0d:09:d2:f2:53:76:4e:3b:8a:08:a9:5a:ca:d3: 2e:fe:c1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJILpknKM5PJqwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1 OTQ1MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk Y2UxODk5NmEtMzQwZi00ODEwLTg0MDQtYmMwOGVkYTg2YWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyrjyjS0UqfwDckw8wIfUwaLfXW3g8K+B//y MKHhyj5pJbg2Q4qchqPU3oQtoFXm2GfNsXziPrQR29cVl+kzRHyIgCN6Rt9fZ5kB FmOo+oYuInaDE4HwZ2+SPVnfsNrf8bAG1i3YwdSQEM4pEp0rKeZAhD2jwxF7MUlp L+5TQFftIlh9MHGgsR+jM+JmmRtgAuQPTfKtUZtG6yhbxNqsr/+t3P9gzfjUquo3 YpyYroOJAgr36hwm2RYWECACCNCunoFHir5NYLVKvftzWRW1R3BsbsePvcEqv8RS +Y/Am6USmGNVGegxenB2R6Ljx2OiUzR1LWrXMjfi8WX8lJwOEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIH+AIbgHruVIp8r3KjYgR4Ziv1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvOTM5OWM3ZDgtYWE3OC0z ODExLWE0OWEtZDRkYzI5Zjk5MjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1 NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy MmEzMTU5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS3Mm/5dFOBw0U+fEc9YT4vssdTzPmDwsrt6mUhm1YVbI4jRGROXsKx JA77A0FeiL26UtJ9N23yhWj45skVm/WtmDx5cip4BAovJztZBk0DUDL3ejqacAFw vpcA58xoOpkNxqsU8d9LUY2PKsFGVb9ZQRURo0ncWeBSQgGz4otEmPQadb+pqVaL +oOyTG8wVAwmngN7364sjUDCUIg772OwLyd4tdI2Gw9syCP6bJpSPn1ZHmUDl2RB QULHKNGRMco/YlTH4dSYHxjIb+oWJGKnSmP0tOaQaFQ4GAv2AAAwyivxeEw15hr0 PBM+vxUNCdLyU3ZOO4oIqVrK0y7+wSA= -----END CERTIFICATE-----Generated at Mon Jul 6 20:24:16 2026 by rpki-client