$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd34bd7e-ac13-33b7-a1d8-365545eb31f2.roa File: cd34bd7e-ac13-33b7-a1d8-365545eb31f2.roa (raw, json) Hash identifier: RL/9BH2v94PLJ9+JvMP9HMbDcr6t11Q5rlcxHoZmVxA= Subject key identifier: 5F:41:68:5B:DF:A6:03:9C:7C:DC:50:31:F2:38:1E:39:06:83:84:CE Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584F225D20CC3E319317B9D41080 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd34bd7e-ac13-33b7-a1d8-365545eb31f2.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 20454 IP address blocks: 192.240.196.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:20:cc:3e:31:93:17:b9:d4:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=559effb9-4270-4af6-9adf-3b83e3b27a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:c1:78:b8:c5:e1:c9:52:40:04:5c:61:74: 25:38:15:62:03:1c:cb:31:84:ae:45:e1:fb:4d:70: 5c:2d:94:7a:16:ec:2a:d7:35:ea:e5:0d:e5:20:53: 3c:79:35:d8:a0:4b:88:bb:40:59:a0:33:44:9e:ea: eb:aa:6a:e0:e7:1c:71:4c:3c:ff:6d:00:98:58:7a: c2:ca:f8:43:c8:33:d8:2c:eb:14:61:f4:42:dd:88: 72:43:d8:40:2c:ab:8c:e7:36:e2:8a:d9:a1:08:e5: 93:f4:2e:5a:76:28:6d:fd:f6:9b:b8:72:7c:aa:73: a8:60:5b:1b:0e:c0:9b:66:93:8f:0b:bf:66:20:3d: dd:01:ab:c0:74:bb:1f:ab:a7:df:39:26:ef:34:e3: af:b9:ff:ba:fc:74:48:9b:bf:e1:5f:78:d1:4c:0e: 9c:47:f4:a1:73:71:6b:3e:d4:a9:dd:9a:a0:b2:d8: 5c:c9:78:77:e8:4f:aa:d8:82:c4:2c:73:0a:be:a8: 05:9e:b7:9c:a3:08:8b:fa:bc:58:79:fd:e8:f9:6c: 4f:1f:d7:e4:e1:49:23:62:31:c0:80:97:cf:af:29: 9d:1e:70:71:de:ec:5a:d2:51:33:63:a5:89:19:d1: b1:08:96:ec:b0:87:d4:e2:24:3b:06:0e:f5:aa:4f: dd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:68:5B:DF:A6:03:9C:7C:DC:50:31:F2:38:1E:39:06:83:84:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd34bd7e-ac13-33b7-a1d8-365545eb31f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 192.240.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b8:9d:3d:56:b7:bb:3d:11:f7:ce:ef:7b:f7:3c:0f:80:95: 41:bd:84:0e:c7:5a:7d:eb:78:64:24:05:9f:2b:f3:73:48:81: f6:7d:a2:2c:68:71:57:79:05:9a:6f:f0:ef:6d:6a:89:08:24: 8e:be:f1:7d:bc:c0:ee:3c:86:85:aa:65:ca:b5:6b:90:0b:dd: 73:1e:81:1a:90:54:a6:45:1e:79:6d:b7:9c:85:3a:f6:39:a9: 4c:1d:6c:d0:7d:bc:9a:dd:03:5d:ec:10:76:23:b7:3d:04:48: 70:01:9a:82:4b:65:66:2f:a8:06:4d:a8:c0:5f:7d:59:80:1a: 08:fe:2e:85:1e:f7:31:cb:5b:7f:02:a7:0f:3e:06:76:f1:a1: 55:5a:af:d1:51:fd:a2:63:08:ed:b3:7f:3c:97:69:2a:4b:2a: 16:c2:ca:b7:3b:45:9c:11:60:d5:46:ec:03:00:58:f9:95:52: 3e:dc:03:01:dc:76:7e:b7:ac:ef:85:31:f5:fe:dd:95:98:9d: 9f:b9:3f:0c:86:67:1c:aa:f1:ca:f2:24:02:57:bf:ac:32:ed: ab:a2:23:d0:56:cc:5a:40:43:1e:77:59:2c:53:2c:44:5e:2c: 72:6a:fb:c8:92:c3:eb:6c:d9:e5:f8:29:ac:33:e5:30:75:35: bf:d4:9b:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXSDMPjGTF7nUEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NTU5ZWZmYjktNDI3MC00YWY2LTlhZGYtM2I4M2UzYjI3YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFzBeLjF4clSQARcYXQlOBViAxzLMYSuReH7 TXBcLZR6Fuwq1zXq5Q3lIFM8eTXYoEuIu0BZoDNEnurrqmrg5xxxTDz/bQCYWHrC yvhDyDPYLOsUYfRC3YhyQ9hALKuM5zbiitmhCOWT9C5adiht/fabuHJ8qnOoYFsb DsCbZpOPC79mID3dAavAdLsfq6ffOSbvNOOvuf+6/HRIm7/hX3jRTA6cR/Shc3Fr PtSp3ZqgsthcyXh36E+q2ILELHMKvqgFnrecowiL+rxYef3o+WxPH9fk4UkjYjHA gJfPrymdHnBx3uxa0lEzY6WJGdGxCJbssIfU4iQ7Bg71qk/dHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9BaFvfpgOcfNxQMfI4HjkGg4TOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvY2QzNGJkN2UtYWMxMy0z M2I3LWExZDgtMzY1NTQ1ZWIzMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwPDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+4nT1Wt7s9EffO73v3PA+AlUG9hA7HWn3reGQkBZ8r83NIgfZ9oixo cVd5BZpv8O9taokIJI6+8X28wO48hoWqZcq1a5AL3XMegRqQVKZFHnltt5yFOvY5 qUwdbNB9vJrdA13sEHYjtz0ESHABmoJLZWYvqAZNqMBffVmAGgj+LoUe9zHLW38C pw8+BnbxoVVar9FR/aJjCO2zfzyXaSpLKhbCyrc7RZwRYNVG7AMAWPmVUj7cAwHc dn63rO+FMfX+3ZWYnZ+5PwyGZxyq8cryJAJXv6wy7auiI9BWzFpAQx53WSxTLERe LHJq+8iSw+ts2eX4Kawz5TB1Nb/Um0w= -----END CERTIFICATE-----Generated at Wed Sep 23 07:59:08 2026 by rpki-client