$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa File: ebc74e11-a225-3c40-a976-f2047dc2fdea.roa (raw, json) Hash identifier: T0F+EOsAJvgEvMYIwnUHSeag0A5ZIW4tdx4yzhCLDug= Subject key identifier: 26:3F:E0:71:11:1F:A1:71:46:D5:19:99:40:1C:6E:59:13:CF:D2:0D Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Certificate serial: 010D0C9F4328584EA787D46B96B58526DE74B3E0 Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14041 IP address blocks: 192.43.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:d4:6b:96:b5:85:26:de:74:b3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b55601f1-5179-4a09-a68a-5ff45966b1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:64:ca:2f:fe:af:8b:08:39:b3:88:1c:2c: 7a:9c:43:b2:dc:da:7c:ec:af:95:fe:d8:d8:f8:2d: 35:d6:e8:67:df:32:0d:f8:b2:1b:d3:74:8d:dc:15: d7:d2:ca:b6:a4:5e:09:9f:c4:16:03:60:a6:c7:90: 38:74:18:80:42:46:6d:ec:09:9b:76:dc:c1:40:d4: 22:fb:a3:ee:0f:4c:ac:3c:0e:a5:10:50:2c:15:55: 9e:88:39:06:6c:23:56:f0:5f:fd:bc:34:61:cc:25: 48:3d:5a:f5:44:c7:1b:22:88:80:43:f0:9d:c1:09: 55:63:4f:f3:53:b5:12:db:5b:26:16:41:56:0a:58: f2:f7:0a:2d:89:f0:36:19:3b:bd:04:7d:3f:dd:97: 9b:4c:fd:6a:a3:e9:f5:bd:ba:e4:93:9a:90:b7:8e: 13:df:4f:87:04:ab:ee:4d:db:65:13:fc:4b:51:b7: 5a:df:2c:40:4a:35:8d:ab:85:80:2c:e8:ef:3c:c2: 6e:aa:72:8a:0c:d0:e2:5a:25:40:55:39:38:26:99: cb:04:02:a6:a6:d2:cc:0a:da:e4:79:a8:2c:0b:07: d8:fe:b7:ba:b1:41:1a:54:82:37:21:d7:30:93:60: 99:33:eb:55:3c:2b:e1:c8:0a:80:b0:4a:26:25:bc: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3F:E0:71:11:1F:A1:71:46:D5:19:99:40:1C:6E:59:13:CF:D2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl X509v3 Authority Key Identifier: keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer sbgp-ipAddrBlock: critical IPv4: 192.43.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:da:88:67:73:d6:e4:aa:77:19:a5:2f:81:48:c6:f8:56:d3: 29:55:13:02:29:2b:e3:87:f2:28:50:dd:b9:c7:06:73:48:1c: 1c:ba:2b:66:b3:31:04:d1:10:a7:1a:c6:2d:1f:21:3d:f4:96: a1:ca:0a:5d:7c:ed:7c:8e:20:74:5b:6f:d3:95:4a:31:91:cd: c0:69:9c:1f:e7:b9:7e:19:4d:c7:51:6c:91:66:ad:27:63:68: 3b:f5:6c:fe:a0:0d:0b:69:7d:2f:f6:e6:c2:cc:89:5b:19:93: 13:0d:8c:3b:91:c4:35:aa:86:72:f7:88:7e:1b:38:72:2a:62: fa:b3:e4:a3:90:38:01:a2:c6:95:44:3e:75:61:0b:39:a0:9d: 89:ad:e9:d2:fc:f5:9c:84:de:95:fd:aa:32:2d:1a:36:40:d8: 89:0f:07:87:97:ae:32:0d:61:63:d7:2e:ac:a7:f3:8d:b0:4d: ac:ae:b0:9d:e6:8b:6f:18:c8:ae:07:f5:8b:dd:00:95:f5:cd: 1a:d7:5c:a1:37:a4:19:b1:20:f1:98:c1:71:cf:8c:8d:8a:39: 74:08:99:5d:ce:46:4d:69:7a:c9:da:cf:8a:06:20:b9:6c:99: ca:a1:2d:b1:3a:c3:b0:29:a0:35:8c:98:71:2d:cd:89:41:61: df:f6:0c:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9RrlrWFJt50s+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQxNGFmYzEtZDhlZC00ZDNmLThmNWItZmY3MmU1N2Y2 OTljMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjU1NjAxZjEtNTE3OS00YTA5LWE2OGEtNWZmNDU5NjZiMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqpkyi/+r4sIObOIHCx6nEOy3Np87K+V/tjY +C011uhn3zIN+LIb03SN3BXX0sq2pF4Jn8QWA2Cmx5A4dBiAQkZt7AmbdtzBQNQi +6PuD0ysPA6lEFAsFVWeiDkGbCNW8F/9vDRhzCVIPVr1RMcbIoiAQ/CdwQlVY0/z U7US21smFkFWCljy9wotifA2GTu9BH0/3ZebTP1qo+n1vbrkk5qQt44T30+HBKvu TdtlE/xLUbda3yxASjWNq4WALOjvPMJuqnKKDNDiWiVAVTk4JpnLBAKmptLMCtrk eagsCwfY/re6sUEaVII3Idcwk2CZM+tVPCvhyAqAsEomJbxnQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCY/4HERH6FxRtUZmUAcblkTz9INMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0 YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcyZTU3ZjY5OWMvZWJjNzRlMTEtYTIyNS0z YzQwLWE5NzYtZjIwNDdkYzJmZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjQxNGFmYzEtZDhlZC00ZDNmLThm NWItZmY3MmU1N2Y2OTljL2I0MTRhZmMxLWQ4ZWQtNGQzZi04ZjViLWZmNzJlNTdm Njk5Yy5jcmwwHwYDVR0jBBgwFoAUhBguY2PD+Xr9/NlWufJqnoLLWNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcy ZTU3ZjY5OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCvZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzaiGdz1uSqdxmlL4FIxvhW0ylVEwIpK+OH8ihQ3bnHBnNIHBy6K2az MQTREKcaxi0fIT30lqHKCl187XyOIHRbb9OVSjGRzcBpnB/nuX4ZTcdRbJFmrSdj aDv1bP6gDQtpfS/25sLMiVsZkxMNjDuRxDWqhnL3iH4bOHIqYvqz5KOQOAGixpVE PnVhCzmgnYmt6dL89ZyE3pX9qjItGjZA2IkPB4eXrjINYWPXLqyn842wTayusJ3m i28YyK4H9YvdAJX1zRrXXKE3pBmxIPGYwXHPjI2KOXQImV3ORk1pesnaz4oGILls mcqhLbE6w7ApoDWMmHEtzYlBYd/2DAQ= -----END CERTIFICATE-----Generated at Wed Jul 29 03:57:30 2026 by rpki-client