$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/bd9c3699-932b-37f6-81bf-240c62fb0057.roa File: bd9c3699-932b-37f6-81bf-240c62fb0057.roa (raw, json) Hash identifier: XVgBLS4diNxyBao52X6v4ySrk/sX1HMurC2qgVXv5ok= Subject key identifier: 23:71:F5:96:88:B2:79:D6:60:4D:C6:77:DE:28:F8:02:2C:AC:57:BF Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584CFB9EF10B264EC0956EDC9580 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/bd9c3699-932b-37f6-81bf-240c62fb0057.roa Signing time: Wed 25 Feb 2026 18:22:47 +0000 ROA not before: Wed 25 Feb 2026 18:22:47 +0000 ROA not after: Tue 26 May 2026 17:22:47 +0000 asID: 19437 IP address blocks: 192.240.200.0/24 maxlen: 32 192.240.201.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:9e:f1:0b:26:4e:c0:95:6e:dc:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Feb 25 18:22:47 2026 GMT Not After : May 26 17:22:47 2026 GMT Subject: CN=312e5733-2426-4526-a0c3-e3ee4e9f02c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:df:29:bc:09:06:d0:ac:6c:fe:eb:f0:82: e5:57:eb:38:65:2e:0a:63:c5:8a:37:56:30:6e:44: 36:21:18:07:22:6f:75:e1:6c:ab:8c:8d:1a:bf:80: 55:95:e6:7c:a8:5b:db:e6:05:de:c3:e0:ec:1b:c6: f4:1e:fb:4f:4f:7c:b8:9e:bc:62:76:8b:90:5f:15: 41:6d:60:37:bb:69:60:15:23:db:4b:2b:8c:1e:07: 74:d6:05:f2:0f:b9:6f:40:73:58:f6:28:f5:12:58: ec:87:1d:6f:48:ad:61:9d:48:a3:04:25:a1:2a:08: 6f:3b:fd:e0:50:88:8e:ea:6a:05:ad:f2:6a:ab:a9: b0:6b:b7:1c:db:0f:05:c8:bd:e9:9a:49:d6:2b:cc: c0:b4:c9:55:72:02:a6:43:89:05:ab:33:04:ba:97: 10:2b:5f:e9:62:76:c0:8a:9d:dc:7e:09:ac:8c:ed: 53:1f:bf:d6:11:f0:02:71:4f:a7:4b:0e:c2:65:ac: 70:d8:a3:7e:eb:87:26:97:39:76:33:f3:a2:8a:57: 7b:ed:c9:17:7d:50:e2:71:be:0b:7c:f3:df:cf:23: 55:72:27:3f:96:e5:bb:35:4f:89:c8:8f:82:2b:70: f1:69:76:5d:cd:1c:c8:e1:83:bc:46:17:a1:75:48: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:71:F5:96:88:B2:79:D6:60:4D:C6:77:DE:28:F8:02:2C:AC:57:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/bd9c3699-932b-37f6-81bf-240c62fb0057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 192.240.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:29:42:a5:65:6f:d2:22:92:09:64:c8:eb:6a:17:65:f4:61: 75:db:55:2f:ec:b0:9f:9f:6a:a5:8b:87:04:fb:b6:3e:c1:f1: ef:21:2b:16:fb:a6:1e:9b:3a:cb:f7:1a:c1:21:6d:16:6e:7c: b8:80:92:4e:ee:8f:19:bd:f4:7a:92:3a:a4:1c:9e:aa:ed:97: 8d:5a:db:f8:dd:52:8a:01:98:aa:24:fd:34:3e:41:20:72:cb: e1:7c:80:d6:81:79:9d:b1:27:f0:5a:27:d1:4a:44:7a:ed:ae: f1:20:17:77:5b:8c:0f:e1:2f:cc:3c:9b:ce:51:b1:f2:6a:89: 06:c1:f1:23:db:ec:4e:bd:df:c6:23:30:d0:c1:bd:5f:b3:a4: 9f:40:e3:50:23:ef:cd:09:d5:a8:ea:f4:8e:ec:c2:af:fb:9f: 9c:23:b2:9c:54:4b:20:a5:d9:82:ba:39:8b:2f:84:44:e9:e2: c6:87:ac:09:48:37:10:8a:fe:99:54:04:a9:fd:f2:80:e0:56: 9e:cc:9c:c5:3d:70:3f:19:19:f9:f3:4e:2b:f5:45:a5:cd:30: f1:b5:5a:c0:e4:11:fb:77:f4:6a:98:99:9e:52:35:15:aa:64: 0f:a0:84:a0:e2:35:5f:3e:d0:0c:ce:56:3c:33:0c:c8:e1:a7: 95:91:1a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7nvELJk7AlW7clYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDIyNTE4MjI0N1oXDTI2MDUyNjE3MjI0N1owLzEtMCsGA1UEAxMk MzEyZTU3MzMtMjQyNi00NTI2LWEwYzMtZTNlZTRlOWYwMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGjfKbwJBtCsbP7r8ILlV+s4ZS4KY8WKN1Yw bkQ2IRgHIm914WyrjI0av4BVleZ8qFvb5gXew+DsG8b0HvtPT3y4nrxidouQXxVB bWA3u2lgFSPbSyuMHgd01gXyD7lvQHNY9ij1Eljshx1vSK1hnUijBCWhKghvO/3g UIiO6moFrfJqq6mwa7cc2w8FyL3pmknWK8zAtMlVcgKmQ4kFqzMEupcQK1/pYnbA ip3cfgmsjO1TH7/WEfACcU+nSw7CZaxw2KN+64cmlzl2M/Oiild77ckXfVDicb4L fPPfzyNVcic/luW7NU+JyI+CK3DxaXZdzRzI4YO8RhehdUjaywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNx9ZaIsnnWYE3Gd94o+AIsrFe/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYmQ5YzM2OTktOTMyYi0z N2Y2LTgxYmYtMjQwYzYyZmIwMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwPDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIpQqVlb9IikglkyOtqF2X0YXXbVS/ssJ+faqWLhwT7tj7B8e8hKxb7 ph6bOsv3GsEhbRZufLiAkk7ujxm99HqSOqQcnqrtl41a2/jdUooBmKok/TQ+QSBy y+F8gNaBeZ2xJ/BaJ9FKRHrtrvEgF3dbjA/hL8w8m85RsfJqiQbB8SPb7E6938Yj MNDBvV+zpJ9A41Aj780J1ajq9I7swq/7n5wjspxUSyCl2YK6OYsvhETp4saHrAlI NxCK/plUBKn98oDgVp7MnMU9cD8ZGfnzTiv1RaXNMPG1WsDkEft39GqYmZ5SNRWq ZA+ghKDiNV8+0AzOVjwzDMjhp5WRGm8= -----END CERTIFICATE-----Generated at Mon Mar 2 00:48:56 2026 by rpki-client