$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/9add62de-669d-3d7e-be33-15ab7450ee19.roa File: 9add62de-669d-3d7e-be33-15ab7450ee19.roa (raw, json) Hash identifier: lJw5al4MCFYCC/xxV0pio18WK6AYm3lRJIVX836i8n8= Subject key identifier: 68:92:B4:26:CE:6B:DB:29:8F:CF:F2:B8:E8:13:AC:6F:19:4D:99:10 Certificate issuer: /CN=ea47eec1-be54-4200-af9d-4d45bdead50c Certificate serial: 010D0C9F4328584E9EB0198D5AA55A873EEE5A80 Authority key identifier: 5E:0D:09:8D:07:4E:E6:D3:FD:2E:E3:F4:93:D1:43:48:60:73:64:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/9add62de-669d-3d7e-be33-15ab7450ee19.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 30688 IP address blocks: 192.245.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/ea47eec1-be54-4200-af9d-4d45bdead50c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/ea47eec1-be54-4200-af9d-4d45bdead50c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:19:8d:5a:a5:5a:87:3e:ee:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea47eec1-be54-4200-af9d-4d45bdead50c Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=aa40d403-e2e4-4147-b8bd-e3b5273adaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:a9:8c:4d:05:f6:a1:17:83:0f:ad:19:c1: d7:aa:e2:d0:e5:7a:6a:a2:dc:a3:02:d6:e3:4b:50: bb:8e:74:b1:50:32:fe:8e:91:79:17:68:12:0b:19: c6:e3:61:59:05:ac:58:c9:29:a1:ae:3f:c4:74:05: 39:9d:aa:89:36:db:01:a5:12:59:6d:82:65:09:db: 0f:b8:cd:6e:59:72:3d:a7:f5:42:d8:ce:93:1e:24: 2e:2a:ad:03:cf:bd:7d:c9:f1:11:ca:79:c6:6a:95: 9c:ee:d4:1d:39:d2:76:1b:ba:d9:81:f9:7a:97:0b: a0:55:c7:89:a8:ba:05:dc:d9:9b:41:ac:c6:46:05: 5c:36:60:c9:48:59:ff:98:d2:bf:19:07:74:cd:ae: 03:61:88:fa:f9:4c:67:d9:9e:51:6d:df:13:49:41: f2:c8:93:39:cb:4e:5c:94:a5:36:2a:2b:0f:02:5e: 44:ef:eb:36:76:3f:a5:82:9a:47:66:98:01:c0:10: 98:bc:44:17:43:b6:76:2e:43:31:f3:1f:89:4a:e0: 7c:91:67:d5:ba:e1:a9:d0:ae:15:aa:d6:32:b3:f8: a5:e8:81:b8:a7:15:b8:25:8e:61:02:f7:79:66:76: 95:42:81:04:94:f2:fe:3d:48:f7:d0:4f:30:05:27: e4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:92:B4:26:CE:6B:DB:29:8F:CF:F2:B8:E8:13:AC:6F:19:4D:99:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/9add62de-669d-3d7e-be33-15ab7450ee19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/ea47eec1-be54-4200-af9d-4d45bdead50c.crl X509v3 Authority Key Identifier: keyid:5E:0D:09:8D:07:4E:E6:D3:FD:2E:E3:F4:93:D1:43:48:60:73:64:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c.cer sbgp-ipAddrBlock: critical IPv4: 192.245.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:44:9f:97:24:d2:9a:2d:36:7d:af:be:59:01:63:de:70:43: a9:1b:aa:c3:09:02:84:cd:38:20:f9:0f:3a:61:a9:7f:7e:07: 3b:8a:26:e9:35:17:0e:59:14:f6:2c:68:2a:a7:81:89:85:bf: 28:1e:35:65:70:f5:7c:74:d8:c4:9d:0b:ec:87:9f:1c:29:dc: 10:f8:f0:1d:a4:c0:0f:bb:26:c5:b8:07:68:17:17:dc:d1:e7: f0:3c:fb:22:c7:6c:35:09:5e:41:d9:9b:0b:94:d2:3d:a5:dc: c7:32:d4:76:23:c8:25:88:98:58:b3:c6:62:bc:07:1f:67:94: fd:c3:4e:97:1e:e3:26:4c:26:64:03:31:19:9f:78:a4:66:e0: f9:d0:fd:26:87:08:5d:c9:19:08:6b:77:99:4d:fc:75:be:5a: c1:39:4e:54:4e:88:8c:5c:27:95:8e:22:9b:cc:c5:34:36:46: fe:24:99:b0:51:be:f5:ba:2e:c0:e0:50:ea:04:e1:0a:6e:ac: 2e:d8:b6:91:3e:92:7c:0a:fd:91:b6:45:4e:f6:12:18:8f:3d: 5a:24:46:46:a8:35:e5:6c:93:ad:bf:08:ea:ab:07:4e:63:7f: ae:41:68:b8:76:b6:38:59:95:39:1b:c9:12:3d:fd:94:a2:22: 3a:47:35:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esBmNWqVahz7uWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE0N2VlYzEtYmU1NC00MjAwLWFmOWQtNGQ0NWJkZWFk NTBjMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk YWE0MGQ0MDMtZTJlNC00MTQ3LWI4YmQtZTNiNTI3M2FkYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4OpjE0F9qEXgw+tGcHXquLQ5XpqotyjAtbj S1C7jnSxUDL+jpF5F2gSCxnG42FZBaxYySmhrj/EdAU5naqJNtsBpRJZbYJlCdsP uM1uWXI9p/VC2M6THiQuKq0Dz719yfERynnGapWc7tQdOdJ2G7rZgfl6lwugVceJ qLoF3NmbQazGRgVcNmDJSFn/mNK/GQd0za4DYYj6+Uxn2Z5Rbd8TSUHyyJM5y05c lKU2KisPAl5E7+s2dj+lgppHZpgBwBCYvEQXQ7Z2LkMx8x+JSuB8kWfVuuGp0K4V qtYys/il6IG4pxW4JY5hAvd5ZnaVQoEElPL+PUj30E8wBSfkMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiStCbOa9spj8/yuOgTrG8ZTZkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9lYTQ3 ZWVjMS1iZTU0LTQyMDAtYWY5ZC00ZDQ1YmRlYWQ1MGMvOWFkZDYyZGUtNjY5ZC0z ZDdlLWJlMzMtMTVhYjc0NTBlZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZWE0N2VlYzEtYmU1NC00MjAwLWFm OWQtNGQ0NWJkZWFkNTBjL2VhNDdlZWMxLWJlNTQtNDIwMC1hZjlkLTRkNDViZGVh ZDUwYy5jcmwwHwYDVR0jBBgwFoAUXg0JjQdO5tP9LuP0k9FDSGBzZAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9lYTQ3ZWVjMS1iZTU0LTQyMDAtYWY5ZC00ZDQ1 YmRlYWQ1MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPU9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClEn5ck0potNn2vvlkBY95wQ6kbqsMJAoTNOCD5DzphqX9+BzuKJuk1 Fw5ZFPYsaCqngYmFvygeNWVw9Xx02MSdC+yHnxwp3BD48B2kwA+7JsW4B2gXF9zR 5/A8+yLHbDUJXkHZmwuU0j2l3Mcy1HYjyCWImFizxmK8Bx9nlP3DTpce4yZMJmQD MRmfeKRm4PnQ/SaHCF3JGQhrd5lN/HW+WsE5TlROiIxcJ5WOIpvMxTQ2Rv4kmbBR vvW6LsDgUOoE4QpurC7YtpE+knwK/ZG2RU72EhiPPVokRkaoNeVsk62/COqrB05j f65BaLh2tjhZlTkbyRI9/ZSiIjpHNRs= -----END CERTIFICATE-----Generated at Wed Jul 29 00:30:36 2026 by rpki-client