$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa File: 52823a9b-61d5-38a1-8207-fbf196df3766.roa (raw, json) Hash identifier: NJlmBntW9LndJXjf4CVItw61VgP84JHdD5MZFSWTggc= Subject key identifier: A6:50:92:4B:A2:49:D9:F8:3A:32:D4:C8:A0:39:A4:32:C9:BD:D4:A6 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584E9384F7F9B4B714608E638000 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 21947 IP address blocks: 192.225.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:f7:f9:b4:b7:14:60:8e:63:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=d947bcd9-d3ae-4be8-96f1-029c3ba76d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:de:c8:f3:4d:ec:94:1b:0a:47:7f:97:7c:4b: 78:5a:77:d4:cd:33:c0:88:1a:03:de:65:b5:4c:ea: 0c:51:1b:c1:94:b9:b6:24:0f:39:64:ad:15:38:7d: bc:33:e5:7f:25:50:85:60:dc:f9:78:12:d9:73:62: 62:98:4a:89:e3:1b:5c:e1:4e:91:bb:ed:aa:df:cd: b2:7f:54:0b:fb:4f:92:bd:b3:1e:e2:75:f4:e5:ac: 69:46:75:a6:6c:a1:ce:f1:c9:bb:3b:bf:fe:39:44: 1e:34:3c:93:b5:fb:ea:bf:bf:fe:3b:44:8d:34:13: 47:f9:3a:72:76:c9:c8:4b:02:a1:69:86:fc:a9:f9: f1:59:76:12:ad:73:f5:e0:0b:08:13:8f:63:5a:15: 58:49:7a:cf:d7:a6:7f:dc:89:7e:41:f7:c3:8f:93: 4b:bf:fb:ac:cd:e7:0c:7d:3a:16:22:e0:8d:31:09: 65:ad:fd:b4:26:45:8c:b6:42:b5:24:09:18:7f:c7: bc:3e:af:f0:4d:5d:d2:1e:b4:77:17:04:03:e1:c7: 2e:71:5c:a3:27:37:98:11:9e:9d:88:fa:1f:e1:d8: 32:8d:26:6e:41:34:fe:41:48:c5:d5:a9:a8:1e:f2: 5d:2e:87:99:0a:68:78:1b:34:01:14:9b:d1:16:7b: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:50:92:4B:A2:49:D9:F8:3A:32:D4:C8:A0:39:A4:32:C9:BD:D4:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 192.225.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:91:a4:2d:a4:e9:10:81:92:94:2b:ac:8c:d4:ff:0b:d5:08: 63:f2:7a:85:ea:48:0e:ea:95:5f:20:2e:9a:b2:80:40:98:9d: 32:11:a1:93:5e:0c:f1:4b:e0:f9:1b:87:a7:4f:74:c0:fb:a3: 86:5a:0c:c4:7d:b8:5c:78:f3:1f:37:89:43:97:37:26:89:10: 75:d9:66:3f:0f:b2:a0:d0:26:ea:3a:7b:95:42:30:41:0d:6c: 70:ce:70:ea:8a:cb:f4:d7:19:7f:bf:f3:b8:51:d2:8b:db:2f: 3f:98:06:c3:70:c5:f3:9b:51:5a:72:80:54:d4:b7:5d:74:4e: a8:bc:fc:ed:e4:01:42:0c:fe:c7:f3:cb:4e:df:af:d0:4e:48: 1b:5f:37:59:b9:e7:aa:fd:e8:6f:bc:f0:d3:87:08:89:f6:8d: c6:1c:66:59:0d:3b:21:04:a8:9a:42:1c:af:0f:0f:37:4e:a7: 10:8f:10:4a:9c:e1:21:a5:50:18:bd:e9:60:02:54:90:18:5a: 47:a5:e9:0b:ee:95:44:cc:0e:07:e6:b7:c4:12:87:c2:78:66: e7:9e:c3:74:fc:04:5a:a0:52:28:86:ea:b3:e9:9d:f8:30:08: b0:6c:a9:03:27:ab:ab:b0:c5:63:6d:f5:fe:e9:53:9b:54:3d: 3b:dc:03:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPf5tLcUYI5jgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk ZDk0N2JjZDktZDNhZS00YmU4LTk2ZjEtMDI5YzNiYTc2ZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd7I803slBsKR3+XfEt4WnfUzTPAiBoD3mW1 TOoMURvBlLm2JA85ZK0VOH28M+V/JVCFYNz5eBLZc2JimEqJ4xtc4U6Ru+2q382y f1QL+0+SvbMe4nX05axpRnWmbKHO8cm7O7/+OUQeNDyTtfvqv7/+O0SNNBNH+Tpy dsnISwKhaYb8qfnxWXYSrXP14AsIE49jWhVYSXrP16Z/3Il+QffDj5NLv/uszecM fToWIuCNMQllrf20JkWMtkK1JAkYf8e8Pq/wTV3SHrR3FwQD4ccucVyjJzeYEZ6d iPof4dgyjSZuQTT+QUjF1amoHvJdLoeZCmh4GzQBFJvRFnv51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZQkkuiSdn4OjLUyKA5pDLJvdSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvNTI4MjNhOWItNjFkNS0z OGExLTgyMDctZmJmMTk2ZGYzNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwOGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImRpC2k6RCBkpQrrIzU/wvVCGPyeoXqSA7qlV8gLpqygECYnTIRoZNe DPFL4Pkbh6dPdMD7o4ZaDMR9uFx48x83iUOXNyaJEHXZZj8PsqDQJuo6e5VCMEEN bHDOcOqKy/TXGX+/87hR0ovbLz+YBsNwxfObUVpygFTUt110Tqi8/O3kAUIM/sfz y07fr9BOSBtfN1m556r96G+88NOHCIn2jcYcZlkNOyEEqJpCHK8PDzdOpxCPEEqc 4SGlUBi96WACVJAYWkel6QvulUTMDgfmt8QSh8J4Zueew3T8BFqgUiiG6rPpnfgw CLBsqQMnq6uwxWNt9f7pU5tUPTvcA4k= -----END CERTIFICATE-----Generated at Fri Jul 24 08:30:58 2026 by rpki-client