$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa File: 2511b1ae-2332-3985-bdcc-82984672479d.roa (raw, json) Hash identifier: ueUOc9LYZ5rLvEGqhPyw0G4FznkYi2KvfdJNpNHSDaQ= Subject key identifier: 21:6D:F2:B5:88:02:3B:41:1F:82:73:5A:4F:0F:5F:16:8F:05:80:E2 Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584ECD371D6FADB7E59B85533060 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 16509 IP address blocks: 192.152.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:1d:6f:ad:b7:e5:9b:85:53:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=4cb97b4c-52d2-4405-b36b-f8f9b7b82379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:c5:b9:e1:22:77:66:9e:e4:68:8b:ed:05: 28:24:4f:b0:75:9a:84:2c:6c:70:25:55:91:80:97: 5a:0a:1c:81:24:6f:8b:51:5c:97:55:de:b2:ff:6a: 7e:01:37:e1:fe:8c:f3:1a:1d:a9:79:a1:4c:6d:1a: 01:13:44:82:2f:c3:13:b6:7b:86:ed:e3:27:89:75: e3:1f:cd:9c:51:5f:2b:23:51:0e:9c:06:78:2c:f8: 1c:38:24:90:46:76:c2:de:53:50:ca:b7:80:b5:92: 14:a3:d0:67:ff:4f:bd:bd:b2:54:d0:81:21:84:4e: 7d:c7:7c:7f:e6:37:86:81:71:bd:55:39:c0:1e:38: d4:d6:f5:f6:65:f0:c3:ff:e9:42:64:8e:8e:8a:69: e5:ab:72:2b:66:27:f5:6b:96:60:07:e7:d9:30:f6: 9b:16:22:99:23:35:36:97:56:38:55:69:9e:f5:a9: c6:84:93:25:51:b8:21:02:fa:15:59:77:41:11:d0: f0:b6:87:cb:4c:fe:f6:a5:b6:6e:7d:41:d6:6b:f7: 43:01:2e:f6:53:6f:09:9e:dc:2f:98:fa:c9:99:d9: 6f:38:30:ad:14:16:26:d4:9f:2f:9c:ba:d3:44:6c: 04:80:84:42:b2:56:ca:ab:35:46:e6:91:87:6f:47: c0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6D:F2:B5:88:02:3B:41:1F:82:73:5A:4F:0F:5F:16:8F:05:80:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/2511b1ae-2332-3985-bdcc-82984672479d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: 192.152.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1f:ad:60:fb:df:fd:74:2f:ab:b8:5c:31:b7:9a:da:67:dd: aa:d9:47:5b:9a:ee:fc:03:2e:81:04:ce:df:10:8b:70:8a:2c: ed:e9:cc:0a:01:5e:07:61:8a:52:da:87:b1:49:3e:0f:79:bb: 49:af:66:f0:1c:54:d2:87:ad:ff:4b:ed:f4:94:89:f3:a5:7a: 67:c6:7b:5c:ea:3a:f1:94:c8:e0:e7:1f:d6:01:f9:0b:21:fc: eb:c7:c3:f0:ef:3b:a5:0f:15:83:b6:a6:56:05:43:49:b2:53: 35:b7:05:fe:a0:b1:2a:a2:ea:2e:70:44:1c:98:01:c2:33:9b: f1:06:f7:10:02:1d:57:4e:69:df:7a:d5:a0:08:fb:2c:14:d0: 4a:03:9f:b0:ac:37:5b:82:77:29:2b:c7:aa:07:a8:04:58:a7: 3c:b5:5e:a6:87:2a:4d:c3:53:c1:74:77:a8:e1:68:b1:7c:e1: e1:cb:0b:b8:a6:39:f1:12:6d:fe:52:b5:33:2a:c6:56:54:dc: 4b:84:38:5f:c6:89:d5:3b:ae:2e:ad:d1:ec:c6:ea:35:63:5f: 3c:45:66:0c:57:f5:f1:21:d2:32:e1:42:c1:2f:34:80:64:74: 66:c9:07:a9:8b:b3:ef:26:fc:89:b8:c8:f8:12:e3:21:12:30: ff:7f:80:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNx1vrbflm4VTMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NGNiOTdiNGMtNTJkMi00NDA1LWIzNmItZjhmOWI3YjgyMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUzFueEid2ae5GiL7QUoJE+wdZqELGxwJVWR gJdaChyBJG+LUVyXVd6y/2p+ATfh/ozzGh2peaFMbRoBE0SCL8MTtnuG7eMniXXj H82cUV8rI1EOnAZ4LPgcOCSQRnbC3lNQyreAtZIUo9Bn/0+9vbJU0IEhhE59x3x/ 5jeGgXG9VTnAHjjU1vX2ZfDD/+lCZI6Oimnlq3IrZif1a5ZgB+fZMPabFiKZIzU2 l1Y4VWme9anGhJMlUbghAvoVWXdBEdDwtofLTP72pbZufUHWa/dDAS72U28Jntwv mPrJmdlvODCtFBYm1J8vnLrTRGwEgIRCslbKqzVG5pGHb0fAfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFt8rWIAjtBH4JzWk8PXxaPBYDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvMjUxMWIxYWUtMjMzMi0z OTg1LWJkY2MtODI5ODQ2NzI0NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgfrWD73/10L6u4XDG3mtpn3arZR1ua7vwDLoEEzt8Qi3CKLO3pzAoB XgdhilLah7FJPg95u0mvZvAcVNKHrf9L7fSUifOlemfGe1zqOvGUyODnH9YB+Qsh /OvHw/DvO6UPFYO2plYFQ0myUzW3Bf6gsSqi6i5wRByYAcIzm/EG9xACHVdOad96 1aAI+ywU0EoDn7CsN1uCdykrx6oHqARYpzy1XqaHKk3DU8F0d6jhaLF84eHLC7im OfESbf5StTMqxlZU3EuEOF/GidU7ri6t0ezG6jVjXzxFZgxX9fEh0jLhQsEvNIBk dGbJB6mLs+8m/Im4yPgS4yESMP9/gMc= -----END CERTIFICATE-----Generated at Thu Aug 13 12:53:53 2026 by rpki-client