$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9669a53d-339e-36d9-8700-8c5bc3330fdf.roa File: 9669a53d-339e-36d9-8700-8c5bc3330fdf.roa (raw, json) Hash identifier: AgJpOuIBB3tCfLcDeURZ/+IZYvlo8EAKrG0JLWdTCVk= Subject key identifier: CA:A3:A0:05:C7:20:B0:CC:5B:F2:FE:D7:31:12:11:23:1A:B8:36:CD Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584F3CE286968100689832127440 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9669a53d-339e-36d9-8700-8c5bc3330fdf.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 950 IP address blocks: 192.149.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:86:96:81:00:68:98:32:12:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=faf902bc-2b54-4a7d-a9f4-0c1c4b0d63ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:dd:f2:41:12:f1:f0:9b:66:73:a0:34:6c: 62:b5:8c:2c:62:3e:0c:3e:9f:04:2f:6d:f2:22:71: c5:ab:a3:09:62:56:7f:c4:14:2e:31:94:50:c4:ec: be:69:0f:e3:4a:a0:84:72:e9:20:a8:01:c0:e6:70: 87:64:20:5d:0d:59:21:0b:da:30:0c:d3:ee:52:0c: 05:a6:32:a2:a9:11:d1:93:c7:9f:c7:b6:ca:32:85: 34:91:b9:c9:03:4f:2c:82:90:81:8d:84:ea:75:1d: 21:12:dd:1f:44:cb:63:ca:0d:2c:68:92:2d:e6:9b: 44:a8:c6:1d:5f:a7:80:37:20:b0:4b:a0:5a:56:c9: 1e:f9:d7:15:70:bd:12:6d:f3:11:6e:9a:14:95:e7: 31:be:07:6e:91:8a:26:34:65:49:da:bd:6a:a9:c0: f9:27:09:1e:95:bc:d1:bc:2b:e7:91:a9:5e:18:d9: 94:8b:f7:77:2b:4d:36:2a:bc:c7:c3:27:b2:2c:b0: 64:4d:d7:6d:26:b3:dd:db:09:33:6e:14:bd:24:1d: ed:50:e9:57:d6:1b:85:b4:20:83:35:be:5e:e9:6b: a5:4a:5e:1e:04:23:94:32:d3:57:b7:21:9f:3d:33: 2c:28:db:ba:32:e2:94:a9:ef:db:59:9f:ca:fe:45: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A3:A0:05:C7:20:B0:CC:5B:F2:FE:D7:31:12:11:23:1A:B8:36:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9669a53d-339e-36d9-8700-8c5bc3330fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 192.149.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b6:3a:5a:b9:cf:19:8e:86:d2:5c:65:66:97:5e:21:f3:02: 5e:f0:84:c3:e0:62:43:c3:9a:fa:77:e0:34:0a:66:01:b3:c3: c2:0c:31:65:d2:46:c4:b3:76:72:8d:f6:2b:b7:c5:34:c3:ca: 68:60:0b:4e:f5:d9:a1:a1:a5:42:7e:98:f7:70:e2:b6:61:dc: 30:8d:10:74:09:58:3e:4e:b0:de:e8:32:ee:dc:61:93:df:ae: 8d:28:30:8f:0f:90:60:d4:a0:4c:54:ca:e2:de:82:5b:43:5c: f0:9d:78:c1:fd:f7:83:77:02:f5:9c:34:02:1e:51:49:5b:34: fa:2b:c9:81:4f:f5:fe:4b:42:b3:73:e7:dc:09:fb:c8:df:9e: f6:ea:82:b3:b6:b3:a3:7e:f7:4a:5f:87:81:b7:8c:c0:cf:8d: cb:87:49:f6:ba:ce:aa:77:c3:7a:7d:fb:c0:b3:1c:73:cd:fb: 8e:4f:f7:0b:a7:8e:aa:f2:62:b0:1e:bd:15:d5:4f:da:ca:d9: 7a:35:d9:56:9e:4d:6c:dd:50:ab:5f:98:74:c8:f9:44:cb:63: 6e:fd:79:8d:9e:cd:37:12:03:56:c7:3d:62:ab:91:6c:33:e4: 20:2b:2c:bf:27:8c:8a:1e:8d:3b:a5:fd:df:d0:a7:6a:25:8b: 9e:4e:a4:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oaWgQBomDISdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZmFmOTAyYmMtMmI1NC00YTdkLWE5ZjQtMGMxYzRiMGQ2M2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJTd8kES8fCbZnOgNGxitYwsYj4MPp8EL23y InHFq6MJYlZ/xBQuMZRQxOy+aQ/jSqCEcukgqAHA5nCHZCBdDVkhC9owDNPuUgwF pjKiqRHRk8efx7bKMoU0kbnJA08sgpCBjYTqdR0hEt0fRMtjyg0saJIt5ptEqMYd X6eANyCwS6BaVske+dcVcL0SbfMRbpoUlecxvgdukYomNGVJ2r1qqcD5JwkelbzR vCvnkaleGNmUi/d3K002KrzHwyeyLLBkTddtJrPd2wkzbhS9JB3tUOlX1huFtCCD Nb5e6WulSl4eBCOUMtNXtyGfPTMsKNu6MuKUqe/bWZ/K/kUxYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqjoAXHILDMW/L+1zESESMauDbNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOTY2OWE1M2QtMzM5ZS0z NmQ5LTg3MDAtOGM1YmMzMzMwZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm2Olq5zxmOhtJcZWaXXiHzAl7whMPgYkPDmvp34DQKZgGzw8IMMWXS RsSzdnKN9iu3xTTDymhgC0712aGhpUJ+mPdw4rZh3DCNEHQJWD5OsN7oMu7cYZPf ro0oMI8PkGDUoExUyuLegltDXPCdeMH994N3AvWcNAIeUUlbNPoryYFP9f5LQrNz 59wJ+8jfnvbqgrO2s6N+90pfh4G3jMDPjcuHSfa6zqp3w3p9+8CzHHPN+45P9wun jqryYrAevRXVT9rK2Xo12VaeTWzdUKtfmHTI+UTLY279eY2ezTcSA1bHPWKrkWwz 5CArLL8njIoejTul/d/Qp2oli55OpF4= -----END CERTIFICATE-----Generated at Thu Oct 1 13:33:21 2026 by rpki-client