$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/24b85252-04e1-3fd2-b188-843b7481b99e.roa File: 24b85252-04e1-3fd2-b188-843b7481b99e.roa (raw, json) Hash identifier: vnFANNLKGMU+ZtM5Z+5LgJxdBwdmEX838mCbvcZB2fk= Subject key identifier: 1C:1F:7A:17:D2:E5:B5:1D:C5:9E:D1:1E:44:21:7B:28:AE:BE:C9:31 Certificate issuer: /CN=1111aa78-6e1e-4e22-9796-bcefdfe4c0bc Certificate serial: 010D0C9F4328584FCF915C21D391AF6518E7C380 Authority key identifier: 60:1A:73:12:2D:65:12:49:96:32:4E:81:15:6F:4C:5A:13:F8:CB:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/24b85252-04e1-3fd2-b188-843b7481b99e.roa Signing time: Thu 12 Nov 2026 02:00:12 +0000 ROA not before: Thu 12 Nov 2026 02:00:12 +0000 ROA not after: Wed 10 Feb 2027 02:00:12 +0000 asID: 402127 IP address blocks: 199.245.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cf:91:5c:21:d3:91:af:65:18:e7:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1111aa78-6e1e-4e22-9796-bcefdfe4c0bc Validity Not Before: Nov 12 02:00:12 2026 GMT Not After : Feb 10 02:00:12 2027 GMT Subject: CN=fc96e886-cbcb-4987-bbf0-322c0dfae2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:83:1d:27:97:32:f1:4e:a1:78:af:50:cb:21: 2d:16:d8:ac:78:e4:1a:71:14:34:73:aa:65:77:3e: a2:c6:5f:86:0e:c0:36:cf:75:b0:bb:5d:78:97:09: 52:2e:26:59:ac:7d:23:f9:74:83:d0:1a:91:67:81: 31:6b:e8:d6:a7:b1:d4:cb:b0:7f:c1:c5:34:2a:85: b6:9d:ca:b8:c0:a4:c4:cf:c3:b1:74:ff:fb:88:9b: 2b:9c:5b:a6:88:bd:64:30:7d:3f:93:2f:bf:59:cd: 85:d6:2a:dd:90:9a:41:f4:a0:08:d8:50:5d:22:0c: 86:a2:23:d9:f6:0e:25:71:d0:8d:d4:a1:81:a0:9f: 5f:1a:58:9c:4e:29:41:e2:2f:a7:00:fa:aa:ca:c7: 84:ac:64:6c:0f:5e:c9:a8:72:02:06:3f:05:64:c7: 08:95:ee:64:c7:a9:59:d8:80:85:3c:0e:dd:06:a1: c2:cf:58:3c:cd:66:39:e8:3b:b7:1c:2d:3f:03:07: 33:99:b4:b7:05:b9:ff:a5:4e:19:23:c5:35:1e:a1: f1:ac:5d:32:0f:a2:e1:b2:7a:f7:64:87:db:b9:7b: 42:25:61:52:8e:d4:11:9f:07:f1:18:40:20:01:e2: 59:33:ab:a1:2f:a1:d5:cb:c9:f4:af:9f:b1:2f:a5: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1F:7A:17:D2:E5:B5:1D:C5:9E:D1:1E:44:21:7B:28:AE:BE:C9:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/24b85252-04e1-3fd2-b188-843b7481b99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.crl X509v3 Authority Key Identifier: keyid:60:1A:73:12:2D:65:12:49:96:32:4E:81:15:6F:4C:5A:13:F8:CB:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer sbgp-ipAddrBlock: critical IPv4: 199.245.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3d:74:3f:e2:24:2a:e8:50:49:e3:ee:0d:0d:32:1b:a2:09: 27:cb:75:5b:52:c2:8d:31:de:48:68:0d:ea:b4:f7:f9:31:65: 32:e3:bf:d5:c8:9d:e2:23:e8:91:71:43:ae:99:d1:d1:ba:02: 52:47:fb:d2:f2:56:f6:36:04:e5:fa:22:db:bb:53:33:4e:85: b5:cf:6c:1c:ce:52:df:40:97:06:eb:bd:af:80:2e:4b:b0:f9: 5b:3f:a7:42:f6:2e:1f:8e:d4:63:df:ac:f7:e1:74:ef:da:16: 2c:0f:71:8c:a1:66:fa:6d:13:24:a0:c3:44:e8:e0:cf:66:86: 3f:b3:55:aa:88:14:fa:dd:1d:5d:66:0a:53:d1:45:aa:e5:13: 34:cf:fa:33:6c:34:16:43:68:27:2e:d9:be:7d:ff:c5:46:c7: 34:bf:c3:09:99:e7:42:91:c2:03:58:30:e5:9a:8a:7f:27:20: 5e:cb:77:f7:87:1e:4f:c2:3b:99:19:9a:c8:b5:df:06:53:ac: c0:b0:b1:1d:99:f4:3d:f5:80:d7:bb:bb:3a:69:bc:68:23:b0: f0:eb:25:ce:98:7a:11:56:c6:97:d4:b6:9c:b8:29:33:59:8e: c6:7b:dc:a4:e3:56:3c:e8:91:3c:2c:d4:3a:81:4e:8b:61:7d: 68:40:06:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/PkVwh05GvZRjnw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExMWFhNzgtNmUxZS00ZTIyLTk3OTYtYmNlZmRmZTRj MGJjMB4XDTI2MTExMjAyMDAxMloXDTI3MDIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZmM5NmU4ODYtY2JjYi00OTg3LWJiZjAtMzIyYzBkZmFlMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoMdJ5cy8U6heK9QyyEtFtiseOQacRQ0c6pl dz6ixl+GDsA2z3Wwu114lwlSLiZZrH0j+XSD0BqRZ4Exa+jWp7HUy7B/wcU0KoW2 ncq4wKTEz8OxdP/7iJsrnFumiL1kMH0/ky+/Wc2F1irdkJpB9KAI2FBdIgyGoiPZ 9g4lcdCN1KGBoJ9fGlicTilB4i+nAPqqyseErGRsD17JqHICBj8FZMcIle5kx6lZ 2ICFPA7dBqHCz1g8zWY56Du3HC0/AwczmbS3Bbn/pU4ZI8U1HqHxrF0yD6Lhsnr3 ZIfbuXtCJWFSjtQRnwfxGEAgAeJZM6uhL6HVy8n0r5+xL6UR3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwfehfS5bUdxZ7RHkQheyiuvskxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xMTEx YWE3OC02ZTFlLTRlMjItOTc5Ni1iY2VmZGZlNGMwYmMvMjRiODUyNTItMDRlMS0z ZmQyLWIxODgtODQzYjc0ODFiOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMTExMWFhNzgtNmUxZS00ZTIyLTk3 OTYtYmNlZmRmZTRjMGJjLzExMTFhYTc4LTZlMWUtNGUyMi05Nzk2LWJjZWZkZmU0 YzBiYy5jcmwwHwYDVR0jBBgwFoAUYBpzEi1lEkmWMk6BFW9MWhP4y58wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xMTExYWE3OC02ZTFlLTRlMjItOTc5Ni1iY2Vm ZGZlNGMwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI9dD/iJCroUEnj7g0NMhuiCSfLdVtSwo0x3khoDeq09/kxZTLjv9XI neIj6JFxQ66Z0dG6AlJH+9LyVvY2BOX6Itu7UzNOhbXPbBzOUt9Alwbrva+ALkuw +Vs/p0L2Lh+O1GPfrPfhdO/aFiwPcYyhZvptEySgw0To4M9mhj+zVaqIFPrdHV1m ClPRRarlEzTP+jNsNBZDaCcu2b59/8VGxzS/wwmZ50KRwgNYMOWain8nIF7Ld/eH Hk/CO5kZmsi13wZTrMCwsR2Z9D31gNe7uzppvGgjsPDrJc6YehFWxpfUtpy4KTNZ jsZ73KTjVjzokTws1DqBTothfWhABrI= -----END CERTIFICATE-----Generated at Sun Nov 15 20:57:16 2026 by rpki-client