$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa File: 19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa (raw, json) Hash identifier: MiMJYOYusiru2C3hVsEjzvvPqdNuWGnjoEiGcdsRM4I= Subject key identifier: CC:80:3B:3E:87:99:79:67:A6:D8:DC:7A:45:87:84:3A:97:86:B9:A7 Certificate issuer: /CN=025d9364-6721-4daa-8be7-c5db4f654594 Certificate serial: 010D0C9F4328584E7FFA32DFFC6C8D8C3F0F7980 Authority key identifier: 64:68:76:1E:24:7E:98:5F:BF:33:6F:8A:89:E9:3E:D2:C8:A3:F9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 19905 IP address blocks: 192.52.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/025d9364-6721-4daa-8be7-c5db4f654594.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/025d9364-6721-4daa-8be7-c5db4f654594.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:32:df:fc:6c:8d:8c:3f:0f:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025d9364-6721-4daa-8be7-c5db4f654594 Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=483a2933-1bf4-41ce-b37f-c3f56acdd31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6d:ff:4a:d8:86:9f:c7:b6:d5:98:33:40:bf: f2:a8:98:b1:65:52:47:ad:81:b7:98:93:9e:77:f9: e7:3b:eb:89:30:e6:e0:ff:49:a1:3f:69:67:26:a4: ae:9e:9a:f7:d3:22:b5:76:14:91:6a:b4:f9:bd:ed: 6f:df:b7:b1:4f:3a:68:70:cf:82:5a:8e:13:fa:80: 72:90:13:fb:46:c0:01:aa:f0:07:b9:82:5e:95:bb: 12:d9:14:4a:8b:77:e6:bf:b3:e7:7d:db:9b:b1:f2: b6:17:6d:ba:ac:a9:8f:c5:7f:ce:bc:85:88:9f:95: eb:b1:f4:15:c9:8b:3e:05:37:57:05:27:6d:00:84: 86:94:7f:c8:76:85:ea:da:c5:e2:28:02:74:d7:2e: b7:41:f7:79:7d:4e:19:ea:8e:a9:43:07:bd:9e:94: 2c:b0:70:2d:37:30:70:c7:e6:44:20:f0:3d:4b:02: 1f:6e:c0:a7:28:0b:8e:03:19:32:b9:bc:9f:57:e8: d6:11:e0:d9:a8:5d:3b:e1:ba:0a:63:07:32:28:2e: 4c:cd:76:4c:d2:01:a5:9f:14:db:64:b1:e7:2e:0a: 73:91:76:55:80:2c:63:15:8c:66:4c:34:f6:15:23: ec:a0:1f:a0:f2:2f:d8:2b:b0:54:91:1d:20:0b:7b: b9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:80:3B:3E:87:99:79:67:A6:D8:DC:7A:45:87:84:3A:97:86:B9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/19454ef6-d7b8-3b9d-b301-ac9aac59738d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594/025d9364-6721-4daa-8be7-c5db4f654594.crl X509v3 Authority Key Identifier: keyid:64:68:76:1E:24:7E:98:5F:BF:33:6F:8A:89:E9:3E:D2:C8:A3:F9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/025d9364-6721-4daa-8be7-c5db4f654594.cer sbgp-ipAddrBlock: critical IPv4: 192.52.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:44:6f:51:e1:ce:b5:87:dd:a9:a6:c9:fa:06:a3:f6:2d:0f: 42:75:3c:90:77:01:49:bd:52:c4:b5:3e:8a:35:c9:a8:c6:67: 8e:fb:27:ce:1e:42:93:e6:d2:dc:9e:79:be:a9:0e:87:01:76: a6:d3:c8:18:31:a6:09:ca:06:37:d3:2c:4e:71:68:af:47:b6: 32:c5:fd:7a:1f:7f:a3:3a:e9:c8:b3:8e:0a:07:e3:be:88:6c: e9:bd:a9:26:f9:c8:3d:c9:4d:43:53:04:bf:6a:fd:53:c1:08: c1:6f:66:9d:f4:43:9b:3a:ac:0b:3c:29:bc:53:9f:83:6a:68: 08:e7:47:f8:90:92:66:ca:78:a1:55:d9:0b:15:b8:5b:21:87: a9:7d:df:8c:9f:84:6e:02:a5:67:87:94:34:73:f7:1d:c8:18: ea:5c:13:39:2c:32:a0:ef:53:66:89:4e:93:a3:92:c1:cb:86: 52:d9:0a:37:a8:43:27:d5:95:ca:28:e1:52:b2:47:47:03:89: 44:90:11:6a:92:5a:f8:5c:39:7e:02:b2:ab:0c:e0:29:0c:03: 5d:af:dc:c7:ac:c6:16:c5:18:3d:06:e6:51:d0:0b:20:1c:bc: 98:e1:ea:cf:08:d1:64:33:6f:f7:a6:63:7e:f2:14:da:de:44: 52:dd:6a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jLf/GyNjD8PeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI1ZDkzNjQtNjcyMS00ZGFhLThiZTctYzVkYjRmNjU0 NTk0MB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk NDgzYTI5MzMtMWJmNC00MWNlLWIzN2YtYzNmNTZhY2RkMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn23/StiGn8e21ZgzQL/yqJixZVJHrYG3mJOe d/nnO+uJMObg/0mhP2lnJqSunpr30yK1dhSRarT5ve1v37exTzpocM+CWo4T+oBy kBP7RsABqvAHuYJelbsS2RRKi3fmv7PnfdubsfK2F226rKmPxX/OvIWIn5XrsfQV yYs+BTdXBSdtAISGlH/IdoXq2sXiKAJ01y63Qfd5fU4Z6o6pQwe9npQssHAtNzBw x+ZEIPA9SwIfbsCnKAuOAxkyubyfV+jWEeDZqF074boKYwcyKC5MzXZM0gGlnxTb ZLHnLgpzkXZVgCxjFYxmTDT2FSPsoB+g8i/YK7BUkR0gC3u5AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyAOz6HmXlnptjcekWHhDqXhrmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMjVk OTM2NC02NzIxLTRkYWEtOGJlNy1jNWRiNGY2NTQ1OTQvMTk0NTRlZjYtZDdiOC0z YjlkLWIzMDEtYWM5YWFjNTk3MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDI1ZDkzNjQtNjcyMS00ZGFhLThi ZTctYzVkYjRmNjU0NTk0LzAyNWQ5MzY0LTY3MjEtNGRhYS04YmU3LWM1ZGI0ZjY1 NDU5NC5jcmwwHwYDVR0jBBgwFoAUZGh2HiR+mF+/M2+Kiek+0sij+WEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMjVkOTM2NC02NzIxLTRkYWEtOGJlNy1jNWRi NGY2NTQ1OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDSiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtEb1HhzrWH3ammyfoGo/YtD0J1PJB3AUm9UsS1Poo1yajGZ477J84e QpPm0tyeeb6pDocBdqbTyBgxpgnKBjfTLE5xaK9HtjLF/Xoff6M66cizjgoH476I bOm9qSb5yD3JTUNTBL9q/VPBCMFvZp30Q5s6rAs8KbxTn4NqaAjnR/iQkmbKeKFV 2QsVuFshh6l934yfhG4CpWeHlDRz9x3IGOpcEzksMqDvU2aJTpOjksHLhlLZCjeo QyfVlcoo4VKyR0cDiUSQEWqSWvhcOX4CsqsM4CkMA12v3MesxhbFGD0G5lHQCyAc vJjh6s8I0WQzb/emY37yFNreRFLdasE= -----END CERTIFICATE-----Generated at Thu Jul 23 23:25:44 2026 by rpki-client