$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa File: 9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa (raw, json) Hash identifier: Bcltcsdr0wYSaoYWCILbIRG1onRvDKKqxB66g0OSFNM= Subject key identifier: 12:DD:F1:85:CB:B8:9F:95:AD:D9:70:BF:0D:F6:7B:5A:27:0E:BE:08 Certificate issuer: /CN=052fe149-2c89-4322-a901-3a7f35c17350 Certificate serial: 010D0C9F4328584F4975AA853FEC99E2B89F21C0 Authority key identifier: 50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3477 IP address blocks: 192.111.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:aa:85:3f:ec:99:e2:b8:9f:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052fe149-2c89-4322-a901-3a7f35c17350 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=877acbb1-faea-421c-bbf2-e40234391a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:62:ef:3d:a2:3a:1f:1d:22:85:e0:fa:28:9a: 79:26:bf:58:64:11:be:c7:6a:91:e7:83:44:73:33: e6:0a:6e:55:fa:79:59:07:8b:4d:b2:88:fa:c6:90: be:e5:64:71:b1:50:9d:f5:80:b5:6e:a9:d0:71:90: 53:8e:04:3e:f1:3f:15:ff:ac:06:dc:88:bf:ff:b7: f0:b9:e5:38:c2:90:d8:5c:ab:4d:a4:6b:3f:15:c7: d5:8f:97:b7:67:a3:21:4c:9d:35:9b:dc:7b:0d:dd: 31:93:dd:a6:9c:1c:92:78:1c:79:dc:5e:85:22:58: 06:06:b3:66:86:d8:42:2e:ca:34:b0:42:44:5f:a2: 66:b3:be:53:af:67:58:91:de:86:5a:23:51:30:0e: 36:9d:37:d5:c3:03:7d:95:42:15:ba:5b:8b:7d:de: 49:7d:27:39:83:bd:65:26:41:d3:2a:d1:fc:ca:0f: ad:58:64:1d:e2:c1:5a:4f:68:83:0b:0d:51:c5:dd: e5:4a:4b:70:fd:06:0d:c9:36:a4:06:e0:e4:ee:68: d9:7c:ec:0b:8b:de:35:4c:23:8f:ce:a8:4c:27:65: 3b:86:f5:a8:04:9a:9e:93:9d:6b:4e:26:98:47:2f: 01:0e:12:7a:81:d3:64:e9:5d:e2:6a:de:4f:5a:46: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DD:F1:85:CB:B8:9F:95:AD:D9:70:BF:0D:F6:7B:5A:27:0E:BE:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl X509v3 Authority Key Identifier: keyid:50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer sbgp-ipAddrBlock: critical IPv4: 192.111.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1c:20:09:25:94:13:47:8f:12:a3:88:2b:9b:ef:51:f8:3b: c4:b5:27:9a:03:ae:fd:4e:a3:a0:6d:04:13:73:9b:95:ea:fa: 6d:c1:bf:d0:de:cc:fd:88:ab:a5:fc:cf:a7:d6:06:87:7b:d7: 69:46:11:e9:43:dd:b0:8f:e1:6b:05:c9:9c:39:ee:5d:5a:32: 91:59:dd:c6:57:ce:0d:a4:07:3d:7a:29:2c:d2:97:56:4d:2d: 5e:2c:a7:57:48:dd:4b:c0:f0:5d:42:b6:f1:99:f5:09:94:e4: 2a:75:4a:ca:19:cc:f9:81:10:8e:be:18:ab:c8:56:9b:89:77: 0b:a6:73:f9:7c:69:33:8e:b7:38:e9:73:e7:03:0d:ef:13:65: ff:57:c2:54:26:ea:29:08:cf:62:e5:4b:d1:61:56:b4:48:f7: b4:67:ab:c7:54:23:cf:34:7c:5c:73:c2:0c:1a:6e:df:ab:1a: e4:15:5b:fc:ff:8e:91:ac:b3:b1:17:22:72:51:af:f0:38:2f: 6e:12:f6:57:cd:0e:9e:6f:65:d0:19:3b:6e:07:45:c9:f5:d8: 06:8b:eb:77:e0:4f:4a:7c:d4:18:8f:f0:9a:6b:52:76:10:98: 1f:3b:be:20:3b:70:fc:cb:6f:09:b6:02:f6:a2:d5:23:97:ba: 95:fe:fd:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdaqFP+yZ4rifIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUyZmUxNDktMmM4OS00MzIyLWE5MDEtM2E3ZjM1YzE3 MzUwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODc3YWNiYjEtZmFlYS00MjFjLWJiZjItZTQwMjM0MzkxYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGLvPaI6Hx0iheD6KJp5Jr9YZBG+x2qR54NE czPmCm5V+nlZB4tNsoj6xpC+5WRxsVCd9YC1bqnQcZBTjgQ+8T8V/6wG3Ii//7fw ueU4wpDYXKtNpGs/FcfVj5e3Z6MhTJ01m9x7Dd0xk92mnBySeBx53F6FIlgGBrNm hthCLso0sEJEX6Jms75Tr2dYkd6GWiNRMA42nTfVwwN9lUIVuluLfd5JfSc5g71l JkHTKtH8yg+tWGQd4sFaT2iDCw1Rxd3lSktw/QYNyTakBuDk7mjZfOwLi941TCOP zqhMJ2U7hvWoBJqek51rTiaYRy8BDhJ6gdNk6V3iat5PWkbUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLd8YXLuJ+Vrdlwvw32e1onDr4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wNTJm ZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdmMzVjMTczNTAvOWNkNTU4MGYtNTg1Ny0z N2RlLWIzYzgtMzUzZDBlOWViOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDUyZmUxNDktMmM4OS00MzIyLWE5 MDEtM2E3ZjM1YzE3MzUwLzA1MmZlMTQ5LTJjODktNDMyMi1hOTAxLTNhN2YzNWMx NzM1MC5jcmwwHwYDVR0jBBgwFoAUUCCXEJate6kH2I1KnJA6bvBDuVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wNTJmZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdm MzVjMTczNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG97MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACccIAkllBNHjxKjiCub71H4O8S1J5oDrv1Oo6BtBBNzm5Xq+m3Bv9De zP2Iq6X8z6fWBod712lGEelD3bCP4WsFyZw57l1aMpFZ3cZXzg2kBz16KSzSl1ZN LV4sp1dI3UvA8F1CtvGZ9QmU5Cp1SsoZzPmBEI6+GKvIVpuJdwumc/l8aTOOtzjp c+cDDe8TZf9XwlQm6ikIz2LlS9FhVrRI97Rnq8dUI880fFxzwgwabt+rGuQVW/z/ jpGss7EXInJRr/A4L24S9lfNDp5vZdAZO24HRcn12AaL63fgT0p81BiP8JprUnYQ mB87viA7cPzLbwm2Avai1SOXupX+/ZE= -----END CERTIFICATE-----Generated at Sun Sep 27 07:32:57 2026 by rpki-client