$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0ae7e89e-c4c8-3282-98a9-7f46af805675.roa File: 0ae7e89e-c4c8-3282-98a9-7f46af805675.roa (raw, json) Hash identifier: ocLmkK0u5FU1C4SRbZf1nIoM6VLLVZ3QMDHN5rv+/28= Subject key identifier: 6F:A1:F3:37:8D:92:64:36:21:BF:F4:00:FC:EC:F9:C4:9F:19:9C:8C Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584DFD3B29EC6BD791D41AC6ADB0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0ae7e89e-c4c8-3282-98a9-7f46af805675.roa Signing time: Fri 29 May 2026 01:00:10 +0000 ROA not before: Fri 29 May 2026 01:00:10 +0000 ROA not after: Thu 27 Aug 2026 01:00:10 +0000 asID: 20454 IP address blocks: 192.240.202.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fd:3b:29:ec:6b:d7:91:d4:1a:c6:ad:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 29 01:00:10 2026 GMT Not After : Aug 27 01:00:10 2026 GMT Subject: CN=54e25575-4713-4717-90c0-dbe58aedc05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ce:e8:d9:22:8a:b6:55:09:ca:27:64:91:a6: 76:29:66:db:d9:2b:13:9d:d3:74:2a:21:4f:15:19: 49:ce:48:7c:7e:c3:a4:58:3b:be:62:39:97:cd:20: f2:30:d2:19:cc:f0:90:a0:d1:5e:b6:15:d7:a8:52: 6d:79:ce:02:f8:dc:8d:5f:82:33:09:20:6d:36:27: e1:33:09:eb:a4:48:c8:1d:c2:1c:42:0b:53:62:67: 6b:db:32:15:16:03:2c:3b:d5:31:9d:ae:7c:fc:e3: 0a:af:42:0a:96:0a:45:6d:7f:a6:57:24:f8:ac:ae: 23:f8:27:de:38:e8:c2:4c:96:f2:7c:b6:42:98:1d: dc:e7:84:70:3b:e1:4f:ec:33:83:5a:69:e8:96:a7: be:57:7e:fe:f0:03:d5:de:37:32:de:6e:9a:09:8d: 6b:08:f5:5c:c0:c7:2c:1f:20:83:20:85:fc:df:ba: 65:db:8d:6c:dc:aa:1c:74:d0:b0:96:68:cc:90:48: ae:3c:75:fd:49:73:38:f1:9e:e7:84:3a:44:87:5f: 62:b9:e6:1e:35:8f:61:47:73:a3:ee:0d:b3:5a:d5: 03:ec:bc:05:f0:79:05:a6:5e:c4:f4:d7:65:bb:4c: a0:8c:b8:40:92:90:13:2b:eb:d8:18:53:09:1b:73: 0a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A1:F3:37:8D:92:64:36:21:BF:F4:00:FC:EC:F9:C4:9F:19:9C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0ae7e89e-c4c8-3282-98a9-7f46af805675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 192.240.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:03:a4:37:5c:42:5a:be:10:6e:c3:b3:b3:ce:bb:70:88:fe: b2:1f:18:a9:01:f0:b6:9c:4e:d3:16:38:de:37:b9:db:f9:b1: 08:01:27:68:ab:34:c2:f9:21:a2:2c:2c:cc:c3:5c:b1:e2:14: 69:aa:e4:8d:a4:11:cd:2d:c5:8c:53:f1:bf:c1:5f:fc:b2:e6: ac:73:31:7e:66:1f:ea:16:d0:d5:af:44:51:f5:d1:e6:4c:24: 15:63:7e:48:67:84:20:9d:ee:da:43:ef:0b:68:51:2e:59:85: 63:36:7d:b8:4c:53:9a:0e:7e:b8:7d:b9:63:e2:cb:11:2c:60: f5:75:21:88:42:3c:b8:fb:a7:be:91:37:ee:3a:d3:f6:47:a9: 8e:4c:6f:70:94:ea:78:3e:f1:e6:44:b6:ad:da:6d:56:06:bc: 79:e5:40:f5:47:7e:a2:21:54:54:80:57:7c:7e:cc:dd:0c:bc: 6d:e9:c7:71:61:8b:e3:26:04:89:ec:0e:ed:46:97:de:12:fd: a5:b5:8d:0b:31:f7:fc:02:ab:f3:6d:24:cb:f0:7a:63:d9:81: 17:f8:f1:d9:89:13:07:6b:45:3b:cf:6c:b1:2a:bb:a2:82:ae: 2e:40:c6:92:b9:0c:8d:23:ec:3b:04:00:8b:6a:da:fc:13:39: c2:f3:32:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE39Oynsa9eR1BrGrbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDUyOTAxMDAxMFoXDTI2MDgyNzAxMDAxMFowLzEtMCsGA1UEAxMk NTRlMjU1NzUtNDcxMy00NzE3LTkwYzAtZGJlNThhZWRjMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM7o2SKKtlUJyidkkaZ2KWbb2SsTndN0KiFP FRlJzkh8fsOkWDu+YjmXzSDyMNIZzPCQoNFethXXqFJtec4C+NyNX4IzCSBtNifh MwnrpEjIHcIcQgtTYmdr2zIVFgMsO9Uxna58/OMKr0IKlgpFbX+mVyT4rK4j+Cfe OOjCTJbyfLZCmB3c54RwO+FP7DODWmnolqe+V37+8APV3jcy3m6aCY1rCPVcwMcs HyCDIIX837pl241s3KocdNCwlmjMkEiuPHX9SXM48Z7nhDpEh19iueYeNY9hR3Oj 7g2zWtUD7LwF8HkFpl7E9Ndlu0ygjLhAkpATK+vYGFMJG3MKBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+h8zeNkmQ2Ib/0APzs+cSfGZyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMGFlN2U4OWUtYzRjOC0z MjgyLTk4YTktN2Y0NmFmODA1Njc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPDKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwDpDdcQlq+EG7Ds7POu3CI/rIfGKkB8LacTtMWON43udv5sQgBJ2ir NML5IaIsLMzDXLHiFGmq5I2kEc0txYxT8b/BX/yy5qxzMX5mH+oW0NWvRFH10eZM JBVjfkhnhCCd7tpD7wtoUS5ZhWM2fbhMU5oOfrh9uWPiyxEsYPV1IYhCPLj7p76R N+460/ZHqY5Mb3CU6ng+8eZEtq3abVYGvHnlQPVHfqIhVFSAV3x+zN0MvG3px3Fh i+MmBInsDu1Gl94S/aW1jQsx9/wCq/NtJMvwemPZgRf48dmJEwdrRTvPbLEqu6KC ri5AxpK5DI0j7DsEAItq2vwTOcLzMvA= -----END CERTIFICATE-----Generated at Sat Jun 13 09:22:42 2026 by rpki-client