$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa File: 9d8b4a39-d907-3704-bc98-36248d887277.roa (raw, json) Hash identifier: tjklOu9KG4suoL8RICn6koz6O04tvKyVa4xU581IGdY= Subject key identifier: 6C:C7:5E:6A:82:9C:BB:D0:75:84:7F:10:22:9E:61:2E:1D:54:6B:21 Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Certificate serial: 010D0C9F4328584EA78F2BBDA455859A96B16F80 Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46970 IP address blocks: 192.189.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:2b:bd:a4:55:85:9a:96:b1:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c2ebd934-5406-489c-9186-8d4d0d126801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:0c:a7:b6:65:28:a0:95:5c:d3:e5:f3:0c: 1f:f5:d5:0f:5e:49:01:33:0f:cd:96:00:45:a7:9f: 51:7c:74:a0:70:92:66:ef:90:fd:23:a9:5d:7e:63: 1f:f4:b5:df:4d:60:b5:4a:11:f9:83:0b:6f:f1:92: 7b:e6:13:46:19:e9:69:68:85:5a:42:45:2f:d9:d6: fe:e2:f7:ff:93:6b:c0:a7:ab:20:55:36:ef:d0:29: 59:17:1c:8a:e6:46:76:b5:43:bc:55:30:89:70:81: 30:33:f5:bd:77:48:de:4f:68:d6:ff:63:fe:f3:8e: 72:8e:59:fd:29:7c:dc:de:09:71:bc:ee:1b:3a:92: 47:ba:e6:30:8f:52:11:9f:d3:b0:56:57:33:b9:13: 51:45:a8:69:5d:17:63:d8:f6:84:03:2f:3c:35:ef: c6:d5:28:31:90:cc:57:83:c4:7c:d8:32:4f:46:37: 3b:a3:21:fa:01:72:0b:98:01:1b:93:9b:a4:64:08: 81:31:94:3b:fd:fb:51:43:8b:4c:12:35:e7:98:1b: 09:f4:07:fa:04:db:13:52:96:d6:23:0a:6e:4c:68: 3f:6f:5a:07:91:b3:b7:d0:86:10:41:6d:d6:3f:29: b6:df:35:1d:df:fd:05:3e:a7:bd:8d:06:f0:ec:d1: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C7:5E:6A:82:9C:BB:D0:75:84:7F:10:22:9E:61:2E:1D:54:6B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/9d8b4a39-d907-3704-bc98-36248d887277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl X509v3 Authority Key Identifier: keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer sbgp-ipAddrBlock: critical IPv4: 192.189.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:48:34:29:06:f3:f2:ce:3d:c2:13:13:c6:b7:9f:8b:62:b9: 29:64:d1:b6:5b:4a:51:23:7b:d5:00:e1:7b:d4:a5:c9:8f:8e: 51:e4:a2:ac:4b:38:1f:40:0f:54:6b:2d:16:0b:72:58:50:79: fe:de:cd:13:25:3f:95:b8:97:1c:f5:23:1e:ca:47:a4:63:f5: ee:3c:00:d6:a0:4a:56:39:9b:2d:25:88:53:8e:ed:77:c5:78: 6b:70:94:43:da:81:72:33:42:70:0e:c4:55:53:b4:d8:f7:77: d5:2e:f3:f8:c4:b5:9c:b4:16:26:d1:1e:b9:53:57:7c:eb:6c: 9a:1d:2b:4f:18:d3:67:0f:45:61:25:1d:ff:0d:29:4d:05:af: bc:55:1c:90:4f:4c:44:45:bf:73:62:9d:89:25:1a:f7:f2:38: bf:59:60:b2:3e:54:05:33:7b:c9:25:8c:9d:e4:58:55:66:9b: 29:f7:6c:f2:fc:e6:11:40:a6:4f:e0:26:14:eb:10:84:64:61: fe:f3:7b:b5:a3:ae:e6:34:1d:ff:8c:2e:db:1b:c7:fd:3e:2f: 43:18:34:97:4e:c5:94:75:03:2e:a7:30:d2:77:c5:dc:a8:2c: 85:a2:c3:ec:08:8b:c3:1c:21:08:c3:09:9e:7e:09:b2:04:e5: 40:db:ab:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njyu9pFWFmpaxb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3YzQtNDljZC00ODIxLWIxZjItNThkMzUwMjhi MGVkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzJlYmQ5MzQtNTQwNi00ODljLTkxODYtOGQ0ZDBkMTI2ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaUMp7ZlKKCVXNPl8wwf9dUPXkkBMw/NlgBF p59RfHSgcJJm75D9I6ldfmMf9LXfTWC1ShH5gwtv8ZJ75hNGGelpaIVaQkUv2db+ 4vf/k2vAp6sgVTbv0ClZFxyK5kZ2tUO8VTCJcIEwM/W9d0jeT2jW/2P+845yjln9 KXzc3glxvO4bOpJHuuYwj1IRn9OwVlczuRNRRahpXRdj2PaEAy88Ne/G1SgxkMxX g8R82DJPRjc7oyH6AXILmAEbk5ukZAiBMZQ7/ftRQ4tMEjXnmBsJ9Af6BNsTUpbW IwpuTGg/b1oHkbO30IYQQW3WPym23zUd3/0FPqe9jQbw7NHbXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzHXmqCnLvQdYR/ECKeYS4dVGshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Njhh NzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAyOGIwZWQvOWQ4YjRhMzktZDkwNy0z NzA0LWJjOTgtMzYyNDhkODg3Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODY4YTc3YzQtNDljZC00ODIxLWIx ZjItNThkMzUwMjhiMGVkLzg2OGE3N2M0LTQ5Y2QtNDgyMS1iMWYyLTU4ZDM1MDI4 YjBlZC5jcmwwHwYDVR0jBBgwFoAUohnw63pfJLsgWQPIq44oAMhWrAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQz NTAyOGIwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJINCkG8/LOPcITE8a3n4tiuSlk0bZbSlEje9UA4XvUpcmPjlHkoqxL OB9AD1RrLRYLclhQef7ezRMlP5W4lxz1Ix7KR6Rj9e48ANagSlY5my0liFOO7XfF eGtwlEPagXIzQnAOxFVTtNj3d9Uu8/jEtZy0FibRHrlTV3zrbJodK08Y02cPRWEl Hf8NKU0Fr7xVHJBPTERFv3NinYklGvfyOL9ZYLI+VAUze8kljJ3kWFVmmyn3bPL8 5hFApk/gJhTrEIRkYf7ze7WjruY0Hf+MLtsbx/0+L0MYNJdOxZR1Ay6nMNJ3xdyo LIWiw+wIi8McIQjDCZ5+CbIE5UDbqzc= -----END CERTIFICATE-----Generated at Wed Jul 29 12:29:18 2026 by rpki-client