$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa File: 19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa (raw, json) Hash identifier: kHwsw1blfSF5txxOd5GowZF/gft+cxxdLvMdpH0uFEM= Subject key identifier: 2C:72:5D:99:87:32:F3:E6:28:E1:F7:EE:88:CA:AD:3C:BE:77:88:11 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584EBB11BF5792368D8B86B0BB80 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 5645 IP address blocks: 192.252.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:bf:57:92:36:8d:8b:86:b0:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=b21c0bf6-fa59-46e1-a8d9-9febaa09683f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3a:dc:6e:63:e8:6f:bb:71:d3:ab:93:58:5c: aa:53:4d:5a:48:9d:21:87:75:9c:a3:ac:2e:96:65: 06:10:cd:54:c7:60:9c:c1:d6:ef:03:e1:32:89:35: d5:6c:6b:94:40:5a:f4:89:50:dd:a6:b3:44:f8:1e: c0:82:a3:df:93:dd:c3:2b:1f:2e:e5:9d:ac:a8:cb: 50:1a:7a:e1:1f:8e:3a:8b:94:fa:bd:d2:ad:e6:a3: 15:ad:8d:a4:44:b7:c8:2a:e0:46:6a:dc:e4:c5:30: 03:ce:d1:19:b7:3b:af:b5:1b:74:df:a3:6b:f4:b4: c7:3f:70:fc:6a:58:f6:13:7d:cf:a3:aa:91:80:a4: 5b:be:2c:73:51:3a:ed:41:69:c4:6c:13:17:ce:3e: 1a:d3:3d:71:87:de:02:1e:44:9a:e4:6d:45:e5:d3: 57:ff:2a:73:9c:70:8e:2f:bd:d4:38:3d:70:f7:c4: 12:a7:a2:92:01:f7:8d:27:cd:72:72:03:4b:5c:09: ae:1b:ba:ad:a6:0f:6a:fb:72:11:c9:02:b4:12:4a: 90:1a:cd:fc:89:60:5c:e4:e9:03:a8:fe:96:89:68: 6c:0a:e3:77:97:c9:f3:f2:4e:12:d1:d0:56:f9:16: 81:0c:aa:bf:11:0a:d6:83:4f:30:22:cb:d6:22:c7: 06:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:72:5D:99:87:32:F3:E6:28:E1:F7:EE:88:CA:AD:3C:BE:77:88:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 192.252.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cc:14:84:30:65:ee:b3:d5:fb:77:01:b1:09:d7:35:93:f5: 3f:c9:99:00:c1:83:1c:8d:f7:75:2b:72:8c:c7:09:2b:3e:2f: df:01:b2:42:12:26:a5:2e:66:90:00:69:54:24:e6:61:a8:37: e1:1b:5d:be:e2:7c:4f:46:6b:9e:24:cf:b4:73:58:02:04:bd: 91:fa:06:06:83:01:af:fb:f3:8d:33:15:fa:87:99:3d:f2:51: 4a:24:a7:97:89:bd:88:99:31:87:e9:1a:ef:30:b1:a6:72:ab: 20:98:b3:88:c5:1d:d4:af:e6:2c:4e:d0:fa:43:55:e6:3e:85: 29:6d:58:ae:a0:bd:85:29:98:51:9f:42:09:12:4b:43:b4:4c: 2d:36:9e:89:c3:a1:e2:fa:b2:09:a7:0e:a0:dc:8c:6c:6c:e1: 52:2a:de:28:35:60:ec:91:b5:8b:8c:8a:0a:d4:30:b6:59:b1: b5:b5:dc:5c:15:7b:c6:03:e1:2c:dd:f3:8e:a9:c3:0a:f3:6f: bb:27:9e:64:32:17:51:88:e4:0e:b8:c5:d3:c0:52:e4:5e:38: 8b:40:7a:37:9e:95:85:98:dc:84:08:d8:6b:11:6c:b2:d7:a3: 68:14:c6:ba:22:dd:5a:be:dc:8d:7f:8c:11:c6:bd:35:33:49: 36:51:3e:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Eb9XkjaNi4awu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YjIxYzBiZjYtZmE1OS00NmUxLWE4ZDktOWZlYmFhMDk2ODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTrcbmPob7tx06uTWFyqU01aSJ0hh3Wco6wu lmUGEM1Ux2CcwdbvA+EyiTXVbGuUQFr0iVDdprNE+B7AgqPfk93DKx8u5Z2sqMtQ GnrhH446i5T6vdKt5qMVrY2kRLfIKuBGatzkxTADztEZtzuvtRt036Nr9LTHP3D8 alj2E33Po6qRgKRbvixzUTrtQWnEbBMXzj4a0z1xh94CHkSa5G1F5dNX/ypznHCO L73UOD1w98QSp6KSAfeNJ81ycgNLXAmuG7qtpg9q+3IRyQK0EkqQGs38iWBc5OkD qP6WiWhsCuN3l8nz8k4S0dBW+RaBDKq/EQrWg08wIsvWIscG5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxyXZmHMvPmKOH37ojKrTy+d4gRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMTljNWZhMGEtNGM5NC0z Y2ZlLWE5MTAtOGRlZmZiYWJkYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXMFIQwZe6z1ft3AbEJ1zWT9T/JmQDBgxyN93UrcozHCSs+L98BskIS JqUuZpAAaVQk5mGoN+EbXb7ifE9Ga54kz7RzWAIEvZH6BgaDAa/7840zFfqHmT3y UUokp5eJvYiZMYfpGu8wsaZyqyCYs4jFHdSv5ixO0PpDVeY+hSltWK6gvYUpmFGf QgkSS0O0TC02nonDoeL6sgmnDqDcjGxs4VIq3ig1YOyRtYuMigrUMLZZsbW13FwV e8YD4Szd846pwwrzb7snnmQyF1GI5A64xdPAUuReOItAejeelYWY3IQI2GsRbLLX o2gUxroi3Vq+3I1/jBHGvTUzSTZRPnU= -----END CERTIFICATE-----Generated at Wed Sep 2 17:55:30 2026 by rpki-client