$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/52df9019-8cd2-3a53-832f-a6ed2737e202.roa File: 52df9019-8cd2-3a53-832f-a6ed2737e202.roa (raw, json) Hash identifier: 4I7OGlBsoosEv2kGuq6M5nkVXWuoRkU5aOO+tfrEC9Y= Subject key identifier: 54:F2:15:C0:7B:E0:D9:FA:A6:5B:28:5A:55:2E:ED:45:32:4C:F0:74 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F2C2256C7C4E9E92503AF1180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/52df9019-8cd2-3a53-832f-a6ed2737e202.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 65.86.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:56:c7:c4:e9:e9:25:03:af:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=5c9de89d-841c-443c-afcc-ba0f74adc973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:81:5b:fe:17:11:5d:64:11:40:58:df:fa: 0d:3f:cb:44:fe:1d:27:37:c1:7a:1e:09:79:b2:a7: 8e:5b:69:86:36:dc:d3:9b:1d:3b:a4:2e:e0:6e:02: bf:6b:64:47:f5:d2:38:ff:4e:d0:a2:61:aa:2e:70: 4b:56:13:0b:37:ab:8d:97:21:60:73:85:c5:48:de: 11:3a:4d:af:30:f8:f9:17:2a:7b:30:d5:90:4c:79: ef:e3:42:1d:04:08:ea:36:da:7d:46:fa:34:46:ff: ce:8a:04:e0:d6:e2:15:b1:b7:9a:6c:59:03:f3:09: fd:b3:53:1b:b2:73:24:de:f0:c1:5e:bd:25:18:e3: 0e:25:a5:7d:e6:e2:df:c6:e5:0e:48:26:f2:97:69: 44:7f:65:a1:1a:14:c8:46:35:af:51:b4:9e:82:3b: 0f:8d:19:10:dc:a8:96:8c:19:7e:61:9f:3a:f9:99: 39:09:3c:ac:73:43:f0:bd:5f:74:91:ee:c7:31:71: f6:89:f5:fb:7a:b4:0d:c9:0a:31:cc:d5:e8:13:fb: 7f:66:1a:9c:e1:17:b9:47:14:de:09:4b:eb:8a:66: 17:94:ea:ad:10:b0:94:cb:e3:04:ed:6b:b8:d2:c2: b7:ed:24:83:f8:c0:da:d5:6d:82:ac:4e:24:c7:b1: 8f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F2:15:C0:7B:E0:D9:FA:A6:5B:28:5A:55:2E:ED:45:32:4C:F0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/52df9019-8cd2-3a53-832f-a6ed2737e202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:b7:18:99:85:03:8e:c5:b3:19:fd:71:ca:f0:68:57:ab:f6: b9:07:3b:19:6d:1a:2f:7a:79:88:d1:84:28:78:7c:32:27:b5: d0:fb:3e:46:14:4d:67:83:40:9c:95:96:e2:4d:15:cb:d7:12: 15:ae:84:85:69:44:43:bb:d5:47:f4:63:01:22:24:a1:32:48: 17:f7:cb:19:1a:dc:6e:e3:dc:e4:94:22:f5:5c:20:32:6d:40: 02:08:57:a7:ad:ca:bf:fd:4c:92:86:e6:ff:ed:91:c0:89:ab: 7f:02:a2:46:20:40:d1:db:39:53:06:07:75:54:4d:25:0e:4c: ae:fb:fe:22:f9:c4:c2:fe:c4:df:2c:8a:d6:84:a5:25:0a:e3: d1:2b:1e:0d:f3:06:b0:20:52:0c:27:20:5c:5d:71:e1:26:42: c4:03:99:42:c9:7a:e4:d6:35:7f:cf:fd:8e:7f:d6:cb:8b:c7: ba:66:a3:1c:6b:df:d5:e1:2a:a1:eb:e6:96:19:d9:e4:e8:34: 9f:53:73:66:66:95:69:e9:d6:2c:9c:51:5e:1b:64:4c:ba:8d: 07:89:70:9e:9d:df:12:1e:ca:b9:61:88:5d:23:33:63:9c:af: 21:54:96:9f:89:28:99:30:80:ad:41:1c:55:69:73:7a:da:ca: 9c:38:62:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIlbHxOnpJQOvEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk NWM5ZGU4OWQtODQxYy00NDNjLWFmY2MtYmEwZjc0YWRjOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthuBW/4XEV1kEUBY3/oNP8tE/h0nN8F6Hgl5 sqeOW2mGNtzTmx07pC7gbgK/a2RH9dI4/07QomGqLnBLVhMLN6uNlyFgc4XFSN4R Ok2vMPj5Fyp7MNWQTHnv40IdBAjqNtp9Rvo0Rv/OigTg1uIVsbeabFkD8wn9s1Mb snMk3vDBXr0lGOMOJaV95uLfxuUOSCbyl2lEf2WhGhTIRjWvUbSegjsPjRkQ3KiW jBl+YZ86+Zk5CTysc0PwvV90ke7HMXH2ifX7erQNyQoxzNXoE/t/Zhqc4Re5RxTe CUvrimYXlOqtELCUy+ME7Wu40sK37SSD+MDa1W2CrE4kx7GPIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTyFcB74Nn6plsoWlUu7UUyTPB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNTJkZjkwMTktOGNkMi0z YTUzLTgzMmYtYTZlZDI3MzdlMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+3GJmFA47Fsxn9ccrwaFer9rkHOxltGi96eYjRhCh4fDIntdD7PkYU TWeDQJyVluJNFcvXEhWuhIVpREO71Uf0YwEiJKEySBf3yxka3G7j3OSUIvVcIDJt QAIIV6etyr/9TJKG5v/tkcCJq38CokYgQNHbOVMGB3VUTSUOTK77/iL5xML+xN8s itaEpSUK49ErHg3zBrAgUgwnIFxdceEmQsQDmULJeuTWNX/P/Y5/1suLx7pmoxxr 39XhKqHr5pYZ2eToNJ9Tc2ZmlWnp1iycUV4bZEy6jQeJcJ6d3xIeyrlhiF0jM2Oc ryFUlp+JKJkwgK1BHFVpc3raypw4Yvg= -----END CERTIFICATE-----Generated at Mon Oct 5 23:00:46 2026 by rpki-client