$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/d70badcf-7e6b-36a1-8425-5f1badcafdd5.roa File: d70badcf-7e6b-36a1-8425-5f1badcafdd5.roa (raw, json) Hash identifier: HDcdgnM+mS8s/IrfQiBybKyq6p9nPRApsbYEOsx1Xtk= Subject key identifier: B9:45:94:52:7A:F7:F4:E7:CD:DA:5D:0E:9D:23:70:32:F4:68:FC:98 Certificate issuer: /CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Certificate serial: 010D0C9F4328584E69A4B6CDCD552B3D2CD9F380 Authority key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/d70badcf-7e6b-36a1-8425-5f1badcafdd5.roa Signing time: Mon 06 Jul 2026 21:00:13 +0000 ROA not before: Mon 06 Jul 2026 21:00:13 +0000 ROA not after: Sun 04 Oct 2026 21:00:13 +0000 asID: 25816 IP address blocks: 192.245.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:a4:b6:cd:cd:55:2b:3d:2c:d9:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2 Validity Not Before: Jul 6 21:00:13 2026 GMT Not After : Oct 4 21:00:13 2026 GMT Subject: CN=9aae5290-50f1-4dfc-92a6-2d8adb2bf1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:42:fa:a3:71:75:ed:4e:8f:d8:f8:eb:8c:6d: 50:87:67:da:db:6d:7a:5a:82:2e:41:69:a7:f4:58: da:e9:c2:d9:a6:21:be:93:9e:38:78:70:6c:c2:d1: 52:6a:c1:98:98:34:58:6b:de:ab:54:4e:93:9c:f6: 88:d5:1b:ed:59:b1:79:e6:26:96:4d:5b:8b:4b:ae: f9:8c:37:c6:24:25:e8:13:49:19:b4:a9:49:45:be: fa:de:94:49:18:0c:cd:7a:67:a3:2c:ab:40:5d:33: 16:c7:4a:c5:cf:7c:bc:28:cd:ec:e3:3c:de:80:f5: 49:42:6b:44:ed:22:96:29:ba:65:6a:b6:c2:a4:fa: 75:54:78:a3:86:8e:c7:9b:26:20:4f:74:ad:6f:b7: 28:d7:16:c3:8e:26:41:c9:4d:76:95:a0:1b:a4:00: 3d:7a:b1:da:95:03:3b:7f:83:30:4f:c2:e1:d2:8b: 7f:be:ee:03:33:af:97:c0:9c:d7:ea:da:59:41:61: 1b:2d:8d:a9:5c:28:47:d3:21:31:d0:c6:0f:c6:0f: 22:ac:32:72:60:94:93:3c:fa:67:1f:4c:c3:01:92: 5d:38:a7:98:0c:07:15:1a:55:fc:57:4d:3d:bf:86: 94:72:61:a6:29:57:d2:a2:6c:c5:3f:c0:86:34:fe: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:45:94:52:7A:F7:F4:E7:CD:DA:5D:0E:9D:23:70:32:F4:68:FC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/d70badcf-7e6b-36a1-8425-5f1badcafdd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl X509v3 Authority Key Identifier: keyid:D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer sbgp-ipAddrBlock: critical IPv4: 192.245.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e4:2b:14:5a:72:fc:65:28:42:0c:1c:d7:ee:a4:e8:e3:b8:78: 41:49:4c:2e:ef:70:bf:5f:8d:4e:44:4d:5c:c8:57:a2:c5:d6: 9a:e0:ca:45:ed:51:a7:43:c2:22:61:f5:3d:80:f1:4a:d4:12: a7:08:ff:2f:13:65:bb:a7:3c:c5:29:cd:1e:7e:f5:0f:78:0e: 49:00:4d:29:11:c0:94:6d:0c:c1:e5:3c:5e:30:92:aa:b2:b4: 69:d0:4f:71:e8:f0:42:aa:83:b7:e8:fe:95:d8:15:99:99:18: bd:99:2f:b0:8d:9e:d7:be:1d:da:e4:2e:5d:37:ca:04:58:c6: 1c:c0:11:ce:13:be:0f:14:55:a3:f6:86:1e:50:b7:a4:a9:ff: 9b:41:90:00:6a:2a:e9:2f:b6:ba:11:7b:50:33:a4:ec:78:15: 85:8e:95:e7:2e:61:91:22:50:fa:e8:5d:4c:81:bd:2a:22:43: 77:ab:f1:28:6e:52:5d:69:43:1f:1a:1c:3e:09:9b:95:7c:f7: b2:bc:13:0a:b6:65:f9:e7:a2:08:fc:5d:f3:68:6c:ec:50:18: 6a:d7:15:fd:5c:4b:50:cb:1b:e3:79:76:0f:08:d0:b4:cb:b9: 3e:d8:90:08:f2:7b:11:01:e3:7e:f0:ab:ff:6f:5e:46:16:de: 64:9a:0c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ppLbNzVUrPSzZ84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBmYjZlZmUtZGJjMS00NWE4LWIyNjYtY2E3MmY3ZTA3 OWMyMB4XDTI2MDcwNjIxMDAxM1oXDTI2MTAwNDIxMDAxM1owLzEtMCsGA1UEAxMk OWFhZTUyOTAtNTBmMS00ZGZjLTkyYTYtMmQ4YWRiMmJmMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikL6o3F17U6P2PjrjG1Qh2fa2216WoIuQWmn 9Fja6cLZpiG+k544eHBswtFSasGYmDRYa96rVE6TnPaI1RvtWbF55iaWTVuLS675 jDfGJCXoE0kZtKlJRb763pRJGAzNemejLKtAXTMWx0rFz3y8KM3s4zzegPVJQmtE 7SKWKbplarbCpPp1VHijho7HmyYgT3Stb7co1xbDjiZByU12laAbpAA9erHalQM7 f4MwT8Lh0ot/vu4DM6+XwJzX6tpZQWEbLY2pXChH0yEx0MYPxg8irDJyYJSTPPpn H0zDAZJdOKeYDAcVGlX8V009v4aUcmGmKVfSomzFP8CGNP6TnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlFlFJ69/TnzdpdDp0jcDL0aPyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMGZi NmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdlMDc5YzIvZDcwYmFkY2YtN2U2Yi0z NmExLTg0MjUtNWYxYmFkY2FmZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDBmYjZlZmUtZGJjMS00NWE4LWIy NjYtY2E3MmY3ZTA3OWMyLzAwZmI2ZWZlLWRiYzEtNDVhOC1iMjY2LWNhNzJmN2Uw NzljMi5jcmwwHwYDVR0jBBgwFoAU14UfqvYVcCEgV1iLHNHDvrrS9HcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcy ZjdlMDc5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOQrFFpy/GUoQgwc1+6k6OO4eEFJTC7vcL9fjU5ETVzIV6LF1prgykXt UadDwiJh9T2A8UrUEqcI/y8TZbunPMUpzR5+9Q94DkkATSkRwJRtDMHlPF4wkqqy tGnQT3Ho8EKqg7fo/pXYFZmZGL2ZL7CNnte+HdrkLl03ygRYxhzAEc4Tvg8UVaP2 hh5Qt6Sp/5tBkABqKukvtroRe1AzpOx4FYWOlecuYZEiUProXUyBvSoiQ3er8Shu Ul1pQx8aHD4Jm5V897K8Ewq2Zfnnogj8XfNobOxQGGrXFf1cS1DLG+N5dg8I0LTL uT7YkAjyexEB437wq/9vXkYW3mSaDFQ= -----END CERTIFICATE-----Generated at Tue Jul 21 15:34:34 2026 by rpki-client