$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa File: 9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa (raw, json) Hash identifier: aEk3VPA53EDHjZ+PLtbv6Y768q1hC7VziPIFtHrEphs= Subject key identifier: 14:5A:E6:54:EB:EE:F0:F5:32:6A:B3:F0:E1:60:FD:D7:CC:44:7E:61 Certificate issuer: /CN=052fe149-2c89-4322-a901-3a7f35c17350 Certificate serial: 010D0C9F4328584D1B1A0DC5D6FFE9687F245380 Authority key identifier: 50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 3477 IP address blocks: 192.111.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:0d:c5:d6:ff:e9:68:7f:24:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052fe149-2c89-4322-a901-3a7f35c17350 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=8d7a4e94-a1c8-493c-9297-08b84be39e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:7b:fa:24:6a:41:58:e2:5c:f8:5a:3a:09: ca:b0:c1:3a:02:2c:a9:06:ea:5e:12:fe:4c:91:bb: 9d:72:c2:0b:63:f0:94:c8:42:ba:f6:52:18:b2:da: bb:7e:69:2b:e3:00:a2:d8:e7:03:40:7c:18:2c:60: 71:65:08:61:b1:ce:f1:02:b3:aa:c6:eb:f2:7d:0c: 46:22:69:4d:9d:ba:98:03:1f:35:3b:e8:a0:a3:f1: 44:ea:32:dc:ad:9c:d6:4c:46:8b:5c:74:5f:c4:c5: 60:5b:8a:07:4a:29:2c:24:26:aa:19:76:4b:03:64: 84:64:7f:94:67:03:90:aa:5d:83:d6:ac:e9:6c:22: 83:7a:87:6c:56:8c:97:d4:61:c7:22:b2:20:68:8c: d7:f8:df:43:cb:dc:1e:6f:46:61:2c:3f:31:7b:63: 52:01:2a:c9:3a:aa:d6:14:30:83:c8:2e:e9:ec:10: bb:24:b3:62:16:b4:44:78:21:8f:6c:c7:16:56:51: a8:64:4c:d0:1d:a9:0f:76:a0:0f:b0:19:64:78:db: 23:88:1d:de:f0:fb:40:a8:62:c2:3f:13:00:eb:ac: 25:93:7e:97:40:7b:26:16:55:70:b0:1f:41:96:99: a3:54:b4:5d:36:67:9c:46:33:0e:90:ec:0f:ac:02: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5A:E6:54:EB:EE:F0:F5:32:6A:B3:F0:E1:60:FD:D7:CC:44:7E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl X509v3 Authority Key Identifier: keyid:50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer sbgp-ipAddrBlock: critical IPv4: 192.111.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:70:7d:c8:22:64:ae:71:0e:99:88:d8:89:7f:8f:2e:5a:e2: 3b:d1:fe:0f:23:31:ab:f7:18:d2:b2:8f:59:87:85:20:d2:da: e6:7c:d0:4a:32:4e:4c:4a:ce:9a:03:0b:a5:ae:c4:a3:2e:55: ca:da:33:e7:89:c6:a8:27:07:2f:c3:7c:62:99:ae:51:e7:0d: 68:a4:fc:22:7d:1b:af:03:bc:f1:61:32:97:a3:ce:39:f3:50: 5c:8a:06:08:b7:4e:87:e1:e7:08:b6:7e:37:45:ff:9c:6a:2f: 71:69:b0:ef:d9:92:56:43:1e:5c:65:72:bb:02:26:07:30:ee: 80:6a:ad:3f:1c:2d:78:9d:48:24:f7:3a:15:3d:50:d2:f5:87: 48:8a:19:83:38:d8:23:10:6f:15:a7:09:34:50:fc:81:fe:16: 60:17:5a:c7:bd:b1:29:38:92:7c:46:a6:0e:ae:33:4f:53:07: ea:95:f8:b5:31:e4:64:42:42:07:8d:d3:92:51:26:21:b1:84: a2:95:f3:36:b6:16:2b:02:13:7f:0e:f4:fa:d7:e1:e3:8f:97: e1:11:77:e5:79:ac:3d:49:b1:c3:b3:86:b0:0c:e3:ee:18:56: 3f:3c:c9:06:d9:c4:95:72:01:4d:05:62:5a:39:36:6b:a5:84: 6b:1e:db:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGg3F1v/paH8kU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUyZmUxNDktMmM4OS00MzIyLWE5MDEtM2E3ZjM1YzE3 MzUwMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk OGQ3YTRlOTQtYTFjOC00OTNjLTkyOTctMDhiODRiZTM5ZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZZ7+iRqQVjiXPhaOgnKsME6AiypBupeEv5M kbudcsILY/CUyEK69lIYstq7fmkr4wCi2OcDQHwYLGBxZQhhsc7xArOqxuvyfQxG ImlNnbqYAx81O+igo/FE6jLcrZzWTEaLXHRfxMVgW4oHSiksJCaqGXZLA2SEZH+U ZwOQql2D1qzpbCKDeodsVoyX1GHHIrIgaIzX+N9Dy9web0ZhLD8xe2NSASrJOqrW FDCDyC7p7BC7JLNiFrREeCGPbMcWVlGoZEzQHakPdqAPsBlkeNsjiB3e8PtAqGLC PxMA66wlk36XQHsmFlVwsB9BlpmjVLRdNmecRjMOkOwPrALaEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRa5lTr7vD1Mmqz8OFg/dfMRH5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wNTJm ZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdmMzVjMTczNTAvOWNkNTU4MGYtNTg1Ny0z N2RlLWIzYzgtMzUzZDBlOWViOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDUyZmUxNDktMmM4OS00MzIyLWE5 MDEtM2E3ZjM1YzE3MzUwLzA1MmZlMTQ5LTJjODktNDMyMi1hOTAxLTNhN2YzNWMx NzM1MC5jcmwwHwYDVR0jBBgwFoAUUCCXEJate6kH2I1KnJA6bvBDuVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wNTJmZTE0OS0yYzg5LTQzMjItYTkwMS0zYTdm MzVjMTczNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG97MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlwfcgiZK5xDpmI2Il/jy5a4jvR/g8jMav3GNKyj1mHhSDS2uZ80Eoy TkxKzpoDC6WuxKMuVcraM+eJxqgnBy/DfGKZrlHnDWik/CJ9G68DvPFhMpejzjnz UFyKBgi3Tofh5wi2fjdF/5xqL3FpsO/ZklZDHlxlcrsCJgcw7oBqrT8cLXidSCT3 OhU9UNL1h0iKGYM42CMQbxWnCTRQ/IH+FmAXWse9sSk4knxGpg6uM09TB+qV+LUx 5GRCQgeN05JRJiGxhKKV8za2FisCE38O9PrX4eOPl+ERd+V5rD1JscOzhrAM4+4Y Vj88yQbZxJVyAU0FYlo5NmulhGse20Q= -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:32 2026 by rpki-client