$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa File: 9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa (raw, json) Hash identifier: 8H//jNPEJ13tI4gfZxdiUBk+AwPaFSx3A357UrhK50g= Subject key identifier: 81:D1:D1:F2:3C:EB:24:CB:E4:40:09:95:FF:71:FA:99:D1:66:F6:5A Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F4328584F4973DB4370FDE12D819BEF80 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46154 IP address blocks: 157.52.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:db:43:70:fd:e1:2d:81:9b:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3bd5e7bb-2a31-4436-b9e4-e905e2beb50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:62:40:57:6e:7f:a6:57:bf:2d:4e:b1:2a: bf:ad:a1:ee:d9:f7:ca:5b:e6:f9:b7:cf:9a:d6:93: dd:1c:ce:4b:21:26:92:85:71:82:42:bd:ea:6d:51: de:99:ea:38:9b:8a:7f:15:a1:8b:9d:3a:8b:eb:78: 57:69:db:9c:a6:bc:0a:03:35:fd:98:65:8d:f0:eb: ce:d0:d7:a2:9f:36:3a:31:e6:04:60:24:f1:4b:ca: 17:11:fc:41:33:8c:0c:24:62:bb:c3:ab:f7:ff:0c: 2a:2a:02:f9:2e:a5:ee:97:f9:93:bd:46:a2:e1:a8: bd:b3:b2:bd:f9:d3:75:31:32:ab:f7:2e:42:18:3e: 2c:83:50:d9:a7:e8:66:bc:a7:54:d3:c3:db:4a:2c: 57:1f:2d:47:f9:90:65:e9:29:e1:6e:db:e4:af:61: 48:f4:d1:bc:b8:dc:f6:f4:56:3f:bc:c4:94:83:c9: 67:55:f8:96:e9:3b:95:28:83:f0:20:cb:d5:7b:b6: f8:f6:f4:25:5a:1d:c7:d4:79:d9:ce:4a:21:34:6f: 8d:bc:be:af:a6:b5:4f:0f:85:fc:29:7a:2f:40:43: d7:6f:bf:a1:80:9a:d7:6b:af:4e:ce:72:86:c7:8d: 8f:7d:e7:c6:48:4a:ba:8f:76:93:9e:4d:59:69:ad: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D1:D1:F2:3C:EB:24:CB:E4:40:09:95:FF:71:FA:99:D1:66:F6:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 157.52.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ac:ea:ec:8b:c9:08:62:ff:e5:a2:7e:bc:ac:70:e9:ed:58: 30:f3:be:53:77:bb:ad:57:48:9a:1e:c7:b4:c7:fb:de:af:23: 8e:64:57:eb:f4:ba:94:cd:60:ad:fd:49:90:d1:17:f4:a0:6b: 88:49:f6:df:9c:4f:61:28:5e:ae:8c:38:9c:ca:29:10:d0:6c: 9f:b0:15:33:10:ea:1f:df:7c:14:04:e3:1a:24:46:d6:43:c1: 72:d5:e3:13:dd:b6:4f:12:9e:f1:72:37:e2:14:87:7a:bc:35: fb:ad:8e:be:0d:6d:ea:8d:c5:81:18:e4:7c:01:98:3f:1a:2a: 46:6b:e2:d6:b1:c7:98:33:24:c2:e3:23:a6:57:c7:b8:eb:3d: 9b:f7:b0:3e:c7:ac:31:6c:e3:37:e4:82:42:21:6b:97:42:1a: fd:00:ce:19:af:09:35:f2:f1:c4:a8:c2:28:f1:7f:53:d7:4d: 45:a2:6e:53:70:3d:91:f4:c1:0e:2c:82:59:0d:23:b7:9d:cc: e7:53:89:e6:41:5c:b9:2c:6d:95:ed:c8:60:7b:6e:47:9a:a3: 33:bf:fb:63:1c:0a:ca:c8:07:79:7a:35:56:9d:72:25:7d:20: 08:99:52:3e:b9:48:8a:b3:18:67:bf:e8:70:03:1d:bb:c3:b9: b0:67:a7:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9tDcP3hLYGb74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2JkNWU3YmItMmEzMS00NDM2LWI5ZTQtZTkwNWUyYmViNTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeBiQFduf6ZXvy1OsSq/raHu2ffKW+b5t8+a 1pPdHM5LISaShXGCQr3qbVHemeo4m4p/FaGLnTqL63hXaducprwKAzX9mGWN8OvO 0NeinzY6MeYEYCTxS8oXEfxBM4wMJGK7w6v3/wwqKgL5LqXul/mTvUai4ai9s7K9 +dN1MTKr9y5CGD4sg1DZp+hmvKdU08PbSixXHy1H+ZBl6Snhbtvkr2FI9NG8uNz2 9FY/vMSUg8lnVfiW6TuVKIPwIMvVe7b49vQlWh3H1HnZzkohNG+NvL6vprVPD4X8 KXovQEPXb7+hgJrXa69OznKGx42PfefGSEq6j3aTnk1Zaa1NZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHR0fI86yTL5EAJlf9x+pnRZvZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvOWQ1MWY5NWEtMGMzMy0z YWEzLWI2ZWUtZGIwZmY4NDkxOTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnTQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6s6uyLyQhi/+WifryscOntWDDzvlN3u61XSJoex7TH+96vI45kV+v0 upTNYK39SZDRF/Sga4hJ9t+cT2EoXq6MOJzKKRDQbJ+wFTMQ6h/ffBQE4xokRtZD wXLV4xPdtk8SnvFyN+IUh3q8Nfutjr4NbeqNxYEY5HwBmD8aKkZr4taxx5gzJMLj I6ZXx7jrPZv3sD7HrDFs4zfkgkIha5dCGv0AzhmvCTXy8cSowijxf1PXTUWiblNw PZH0wQ4sglkNI7edzOdTieZBXLksbZXtyGB7bkeaozO/+2McCsrIB3l6NVadciV9 IAiZUj65SIqzGGe/6HADHbvDubBnp/s= -----END CERTIFICATE-----Generated at Tue Sep 29 17:38:45 2026 by rpki-client