$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa File: a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa (raw, json) Hash identifier: AlMbEiS9300IYbI1UD5RkNb6pzYOUB7luDVyVY3tLO8= Subject key identifier: 87:D1:54:03:B3:42:A9:46:79:69:51:09:54:20:FD:E2:2B:67:A1:C8 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584E7634CA98807214C3E5B1E000 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 88 IP address blocks: 192.12.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:ca:98:80:72:14:c3:e5:b1:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=40d7073f-c3dc-4711-ace5-04c602d288bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a5:b6:52:1b:46:5c:22:1f:83:de:97:6e:33: cc:e7:9a:6f:47:76:95:2e:aa:d4:66:93:9d:1e:cc: 86:b2:fc:6e:53:e5:14:04:32:ba:8f:41:4c:1a:57: 76:88:f2:37:81:dd:9d:43:37:17:d6:5e:cc:a1:be: 45:c3:9b:0a:58:76:0c:0c:53:0f:14:9f:60:80:7d: 7a:4c:d2:82:ad:cf:bd:f5:1a:9a:94:e9:60:13:5c: 1e:5b:cc:7e:71:bf:9e:c5:83:f6:84:31:ef:b4:2e: eb:fa:00:89:e5:db:47:a3:5c:b4:8b:7a:91:d7:ad: 8e:8d:ea:e2:90:53:eb:6f:02:17:bf:69:c9:a3:4c: 3a:77:c9:72:dd:3b:53:8a:49:f5:9e:9e:cc:4f:8a: 95:4a:d1:6a:6a:4c:28:7e:12:f2:dd:9e:09:14:9b: 54:f0:b0:2b:0c:84:9d:1a:94:0c:cd:f4:5d:e7:25: 88:8e:c8:42:cc:cd:e9:c5:09:91:44:4f:53:5d:1e: bb:bc:cf:45:90:25:8d:24:42:ae:db:20:c9:e0:dd: c9:41:a0:6d:c8:8d:90:ea:9b:78:5f:07:7c:76:8e: fd:ae:65:f5:84:9a:3e:7c:67:2f:a4:ea:d7:61:07: c4:e5:db:ea:6c:09:85:0a:8b:46:68:a4:bb:02:67: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D1:54:03:B3:42:A9:46:79:69:51:09:54:20:FD:E2:2B:67:A1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/a7046883-d9ee-3efe-bccd-cb6a013b3b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 192.12.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5a:cf:47:22:28:be:ff:a9:53:7d:f8:26:71:8c:90:a7:e0: 58:92:cf:3e:bd:6b:e3:08:41:5e:1f:c6:f8:e4:42:d7:f7:da: 49:d5:82:ef:a5:7a:10:20:d2:8f:ed:87:73:90:7e:b6:02:4b: e6:b0:73:2e:07:7c:75:9c:1d:c5:b0:3b:1a:0e:94:73:36:db: 6a:e3:dc:8d:a1:7f:fd:7d:8f:71:44:b8:f4:8e:09:69:59:41: a3:52:61:8b:45:39:68:e3:7d:ca:5f:25:9b:65:1b:75:94:3f: 87:55:98:14:11:be:3a:ac:e2:96:25:df:93:25:ec:a1:10:69: c4:14:37:9e:54:86:94:3c:b1:01:77:52:21:0e:3d:3b:09:de: c9:a1:9e:4c:f8:04:91:6a:6a:a8:4a:30:9c:a1:ae:77:cd:d1: 29:10:c0:5f:90:b6:a9:62:b3:f1:60:b0:28:a8:f7:a6:92:61: 2f:ef:e3:a7:6f:e9:95:6c:64:14:2c:79:a2:22:9b:cf:7c:5f: 43:b1:27:74:4b:48:64:f6:c0:1a:f3:90:53:85:89:b8:75:d7: 8e:ad:15:9c:00:60:23:a3:b6:05:5b:2f:27:2e:6b:7b:32:d5: 07:20:71:1f:7c:03:8b:06:36:e7:7c:09:d4:3a:4d:30:46:73: 55:3d:7e:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NMqYgHIUw+Wx4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk NDBkNzA3M2YtYzNkYy00NzExLWFjZTUtMDRjNjAyZDI4OGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaW2UhtGXCIfg96XbjPM55pvR3aVLqrUZpOd HsyGsvxuU+UUBDK6j0FMGld2iPI3gd2dQzcX1l7Mob5Fw5sKWHYMDFMPFJ9ggH16 TNKCrc+99RqalOlgE1weW8x+cb+exYP2hDHvtC7r+gCJ5dtHo1y0i3qR162Ojeri kFPrbwIXv2nJo0w6d8ly3TtTikn1np7MT4qVStFqakwofhLy3Z4JFJtU8LArDISd GpQMzfRd5yWIjshCzM3pxQmRRE9TXR67vM9FkCWNJEKu2yDJ4N3JQaBtyI2Q6pt4 Xwd8do79rmX1hJo+fGcvpOrXYQfE5dvqbAmFCotGaKS7AmcJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfRVAOzQqlGeWlRCVQg/eIrZ6HIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvYTcwNDY4ODMtZDllZS0z ZWZlLWJjY2QtY2I2YTAxM2IzYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAw1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdaz0ciKL7/qVN9+CZxjJCn4FiSzz69a+MIQV4fxvjkQtf32knVgu+l ehAg0o/th3OQfrYCS+awcy4HfHWcHcWwOxoOlHM222rj3I2hf/19j3FEuPSOCWlZ QaNSYYtFOWjjfcpfJZtlG3WUP4dVmBQRvjqs4pYl35Ml7KEQacQUN55UhpQ8sQF3 UiEOPTsJ3smhnkz4BJFqaqhKMJyhrnfN0SkQwF+Qtqlis/FgsCio96aSYS/v46dv 6ZVsZBQseaIim898X0OxJ3RLSGT2wBrzkFOFibh1146tFZwAYCOjtgVbLycua3sy 1QcgcR98A4sGNud8CdQ6TTBGc1U9fuA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:57 2026 by rpki-client