$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/a52f9df3-b1c1-3662-acb4-828e83a64aef.roa File: a52f9df3-b1c1-3662-acb4-828e83a64aef.roa (raw, json) Hash identifier: 8lFiEG6xJra4wC/uqfws0AK3Byp9r1zkPo/7Eyt0G8w= Subject key identifier: D8:5A:67:32:7A:FD:56:13:5B:FC:CF:E7:15:9B:49:18:BE:BD:74:77 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584F23C28944EFC018DFFB244600 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/a52f9df3-b1c1-3662-acb4-828e83a64aef.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 5650 IP address blocks: 216.158.192.0/24 maxlen: 24 216.158.194.0/24 maxlen: 24 216.158.208.0/24 maxlen: 24 216.158.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:89:44:ef:c0:18:df:fb:24:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=f93233ed-ef51-4fb5-bb1f-fd1e0dbe8f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ad:8e:a8:99:ef:ce:ad:da:50:c3:73:b7:ea: 90:20:af:88:2a:fb:1c:51:65:03:08:a5:c5:22:1b: be:d7:91:8e:15:79:8c:cb:5e:0a:e5:b7:aa:cb:ec: cd:db:18:9f:64:ef:be:b6:5a:36:f8:47:74:82:6a: 00:e0:03:9c:d9:97:75:cd:d3:ed:d1:a4:77:d5:bd: 27:1d:2e:2b:07:63:53:1f:eb:cb:84:f1:7a:03:a3: 6e:d2:fd:5a:0c:78:1e:b7:90:f7:bd:d4:8e:d4:05: 5d:c2:94:a8:99:86:18:51:37:91:5e:ae:81:f5:19: 76:4f:ba:f1:a1:c0:55:21:e5:69:6f:3c:5a:8b:bd: e0:e8:b8:5a:19:7a:0a:88:4e:4d:54:3b:90:21:d1: 24:d0:14:81:a8:e3:5c:f7:47:2a:9f:84:ee:6c:90: ae:eb:e3:82:ac:85:3f:eb:4e:41:13:44:60:7f:24: 79:ed:18:04:0d:76:0f:c2:1b:84:06:d9:fa:aa:c2: ad:5c:ba:c8:70:65:73:0e:bf:21:e3:39:e5:74:cc: 2e:29:5f:8b:34:9a:17:02:a1:46:8f:c3:7d:38:57: e4:57:b9:d1:f7:95:cb:26:f2:51:d5:84:ee:f2:98: 12:01:01:0e:b8:94:49:41:d9:37:03:06:aa:6d:3d: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5A:67:32:7A:FD:56:13:5B:FC:CF:E7:15:9B:49:18:BE:BD:74:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/a52f9df3-b1c1-3662-acb4-828e83a64aef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 216.158.192.0/24 216.158.194.0/24 216.158.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:79:94:60:6d:4a:b3:9a:98:c1:92:e0:c1:4a:89:8f:0b:df: 7b:dd:e3:2e:de:73:a4:0f:f2:4b:6e:6a:88:7a:54:71:78:6c: 2d:6c:9b:a5:35:ff:69:01:44:75:e6:f2:e9:1f:04:30:fe:db: 3a:9a:8a:07:e2:6b:16:00:8b:c8:92:df:2c:1b:d6:3e:9e:73: c8:c6:0b:2b:90:f2:00:ce:25:6e:25:bf:da:c8:b6:f9:f5:36: 57:89:a7:16:de:31:12:2e:28:ea:b4:1e:47:75:e2:71:a7:5e: f8:39:48:a3:82:2b:3c:66:8d:8d:ab:5c:a7:01:b8:88:75:46: 6b:f7:49:da:f0:83:39:a2:69:66:61:e7:e7:2d:c5:fb:62:d0: f9:a7:7a:96:08:ea:53:cd:e7:cd:9e:15:e2:eb:65:5c:ab:55: 99:4c:eb:1a:61:cc:d7:21:cf:92:5d:41:09:60:4b:4d:28:13: 7c:3a:72:fb:50:e6:6a:e0:22:60:3b:dd:49:ca:c2:47:a1:b2: 0a:ac:2f:a0:76:ed:e3:76:c1:a1:a8:8d:5d:a4:bd:d7:7e:2f: df:42:18:87:99:b6:4e:87:be:b9:d9:d1:43:2b:57:a9:f9:b0: 37:8a:eb:bf:2c:52:a3:1d:64:64:e3:16:f3:32:42:f1:d2:0d: a3:11:91:81 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8jwolE78AY3/skRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjkzMjMzZWQtZWY1MS00ZmI1LWJiMWYtZmQxZTBkYmU4Zjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK2OqJnvzq3aUMNzt+qQIK+IKvscUWUDCKXF Ihu+15GOFXmMy14K5beqy+zN2xifZO++tlo2+Ed0gmoA4AOc2Zd1zdPt0aR31b0n HS4rB2NTH+vLhPF6A6Nu0v1aDHget5D3vdSO1AVdwpSomYYYUTeRXq6B9Rl2T7rx ocBVIeVpbzxai73g6LhaGXoKiE5NVDuQIdEk0BSBqONc90cqn4TubJCu6+OCrIU/ 605BE0RgfyR57RgEDXYPwhuEBtn6qsKtXLrIcGVzDr8h4znldMwuKV+LNJoXAqFG j8N9OFfkV7nR95XLJvJR1YTu8pgSAQEOuJRJQdk3AwaqbT02gQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNhaZzJ6/VYTW/zP5xWbSRi+vXR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvYTUyZjlkZjMtYjFjMS0z NjYyLWFjYjQtODI4ZTgzYTY0YWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2J7AAwQA 2J7CAwQB2J7QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJJ5lGBtSrOamMGS4MFKiY8L33vd4y7ec6QP8ktu aoh6VHF4bC1sm6U1/2kBRHXm8ukfBDD+2zqaigfiaxYAi8iS3ywb1j6ec8jGCyuQ 8gDOJW4lv9rItvn1NleJpxbeMRIuKOq0Hkd14nGnXvg5SKOCKzxmjY2rXKcBuIh1 Rmv3SdrwgzmiaWZh5+ctxfti0PmnepYI6lPN582eFeLrZVyrVZlM6xphzNchz5Jd QQlgS00oE3w6cvtQ5mrgImA73UnKwkehsgqsL6B27eN2waGojV2kvdd+L99CGIeZ tk6HvrnZ0UMrV6n5sDeK678sUqMdZGTjFvMyQvHSDaMRkYE= -----END CERTIFICATE-----Generated at Mon Sep 28 00:11:40 2026 by rpki-client