$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa File: cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa (raw, json) Hash identifier: iws2Kt1zDXeU42PqjUAluhY8+XxpZEl2ExfELJn7vl8= Subject key identifier: B2:C3:D7:74:2D:DB:20:56:84:B7:B0:9C:0F:B6:1B:37:2A:00:1F:30 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584ECD3727B1A3AC64B97DA27300 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 40948 IP address blocks: 192.232.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:27:b1:a3:ac:64:b9:7d:a2:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=41922a30-94b0-47b0-95b5-41824e5c3d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2f:2b:13:0e:b1:c9:5a:7a:c3:ae:76:af:da: a1:ee:f2:3f:7d:79:76:74:d3:65:b8:ae:8a:9f:38: 00:9c:67:ad:e2:df:20:e0:a2:a9:83:4c:b8:47:ea: ad:9f:68:b7:05:a5:f5:22:f9:63:16:93:07:75:1f: 64:03:ac:30:0a:88:5b:95:87:0b:4b:de:e6:42:17: 9d:fe:88:79:9c:66:d6:6e:cc:7e:9f:d7:2e:05:6d: 87:90:fc:e5:d8:0a:57:97:72:32:c3:d8:d1:75:a2: 7f:a3:03:5c:25:22:6f:c1:d8:7a:8e:57:87:79:99: ef:ee:ed:37:9b:9e:ed:ad:0d:bb:bb:d1:1e:3d:ea: 5d:0a:7b:cb:9c:c5:99:2d:f1:e6:81:ca:15:f9:e9: 4b:19:5d:64:d6:17:8e:e1:7f:df:08:33:ff:80:bb: 1d:4e:82:5e:ca:b7:d7:cd:9b:32:9d:01:cc:86:02: 7a:3c:5e:37:10:78:7b:4a:7c:01:5a:9f:87:24:8f: b2:c7:f6:02:b4:37:92:f3:d2:19:a2:41:2e:7f:54: d2:02:95:b0:d8:b3:bc:a1:01:31:ae:6a:f8:b2:fa: 34:60:30:67:7c:2e:e9:1b:18:7f:ed:a4:58:f9:ec: c5:4e:9c:d8:f0:e1:87:71:6f:8a:8f:bb:44:68:37: 23:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C3:D7:74:2D:DB:20:56:84:B7:B0:9C:0F:B6:1B:37:2A:00:1F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 192.232.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:82:2f:40:36:89:ea:b2:b4:e2:22:5c:bf:d0:88:0f:31:64: 08:96:9e:b3:49:e3:56:8b:3f:cc:ce:f4:eb:da:3f:fc:89:5f: 50:8c:27:5e:59:e7:9f:ac:c0:35:44:e4:47:ae:fc:dc:3e:12: 17:66:cb:fb:35:eb:e8:63:6a:b5:f1:65:3d:d1:a2:04:e3:dc: 6f:93:b2:4f:0a:3f:32:ae:79:9a:07:0c:f2:c5:b9:92:f0:ef: 28:cc:b1:a0:98:09:5c:9d:e7:66:3b:05:c8:15:e7:6d:dd:e1: 39:ab:48:d0:9d:e8:88:25:d6:97:27:3a:a0:72:80:77:3c:e2: 33:5b:51:db:71:d2:55:e0:b5:c5:8e:21:9b:c4:c0:0f:79:7b: 8d:5c:d9:6c:7b:67:f1:02:23:f6:4f:ab:17:21:28:ea:74:ee: 48:c9:a0:b4:1e:be:2e:bc:e6:a7:3c:43:72:96:16:9e:12:4f: 28:38:09:61:48:64:53:62:59:ae:52:d9:e0:60:72:96:fe:59: c6:ec:e8:27:42:70:bf:c1:76:20:c2:b5:94:3c:e2:c9:64:72: ce:ee:e9:be:e8:3f:52:83:57:b7:f6:5e:66:2c:44:40:b0:ae: c7:de:16:7b:d6:27:d3:bd:fe:e2:7a:ea:4f:fd:e6:a0:01:8a: c0:da:3f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyexo6xkuX2icwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NDE5MjJhMzAtOTRiMC00N2IwLTk1YjUtNDE4MjRlNWMzZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy8rEw6xyVp6w652r9qh7vI/fXl2dNNluK6K nzgAnGet4t8g4KKpg0y4R+qtn2i3BaX1IvljFpMHdR9kA6wwCohblYcLS97mQhed /oh5nGbWbsx+n9cuBW2HkPzl2ApXl3Iyw9jRdaJ/owNcJSJvwdh6jleHeZnv7u03 m57trQ27u9EePepdCnvLnMWZLfHmgcoV+elLGV1k1heO4X/fCDP/gLsdToJeyrfX zZsynQHMhgJ6PF43EHh7SnwBWp+HJI+yx/YCtDeS89IZokEuf1TSApWw2LO8oQEx rmr4svo0YDBnfC7pGxh/7aRY+ezFTpzY8OGHcW+Kj7tEaDcjpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLD13Qt2yBWhLewnA+2GzcqAB8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2YyN2ViNWYtYWE2NS0z MGE4LWI3MWUtMTg4OWY1MGJlMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCCL0A2ieqytOIiXL/QiA8xZAiWnrNJ41aLP8zO9OvaP/yJX1CMJ15Z 55+swDVE5Eeu/Nw+Ehdmy/s16+hjarXxZT3RogTj3G+Tsk8KPzKueZoHDPLFuZLw 7yjMsaCYCVyd52Y7BcgV523d4TmrSNCd6Igl1pcnOqBygHc84jNbUdtx0lXgtcWO IZvEwA95e41c2Wx7Z/ECI/ZPqxchKOp07kjJoLQevi685qc8Q3KWFp4STyg4CWFI ZFNiWa5S2eBgcpb+Wcbs6CdCcL/BdiDCtZQ84slkcs7u6b7oP1KDV7f2XmYsRECw rsfeFnvWJ9O9/uJ66k/95qABisDaP7w= -----END CERTIFICATE-----Generated at Tue Sep 22 19:12:58 2026 by rpki-client