$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/19476da5-4ba8-3eb6-82c7-14692313571e.roa File: 19476da5-4ba8-3eb6-82c7-14692313571e.roa (raw, json) Hash identifier: wBhoJ2sSw+/U0w8ceXWfFR8QMFs8d+B472m8d2r2ppE= Subject key identifier: 17:22:4C:18:49:DA:77:39:F5:02:E6:08:46:EF:5D:6C:9C:FD:97:B5 Certificate issuer: /CN=5111dcdc-35f8-4a2f-b667-be6baf5ebf9b Certificate serial: 010D0C9F4328584E693CADC23A88EC14F37D0200 Authority key identifier: 54:68:E9:35:B7:E8:46:2B:5B:7C:4A:02:73:59:EB:5D:D6:BF:5D:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/19476da5-4ba8-3eb6-82c7-14692313571e.roa Signing time: Mon 06 Jul 2026 17:30:39 +0000 ROA not before: Mon 06 Jul 2026 17:30:39 +0000 ROA not after: Sun 04 Oct 2026 17:30:39 +0000 asID: 394199 IP address blocks: 192.195.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:69:3c:ad:c2:3a:88:ec:14:f3:7d:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5111dcdc-35f8-4a2f-b667-be6baf5ebf9b Validity Not Before: Jul 6 17:30:39 2026 GMT Not After : Oct 4 17:30:39 2026 GMT Subject: CN=1bbc92f4-9177-4340-bcfa-44fd06f3d439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:59:bd:b1:21:c9:ed:1d:aa:58:1b:29:70: 33:30:3c:39:01:36:eb:e1:d4:38:9c:8c:da:83:84: 2b:ba:44:95:1d:ae:d0:fe:d4:f9:2b:8c:2b:39:92: 0e:4b:c8:cc:42:34:44:7a:29:d7:a3:78:26:21:4e: eb:48:4b:c9:db:9a:7f:57:e7:bf:b2:e5:45:8b:ec: bf:3f:37:46:99:65:9e:b6:66:28:30:c8:95:7e:a2: 03:1a:2c:42:24:41:da:e1:56:0c:a3:5a:06:75:2e: cc:3d:41:9e:7e:c9:e5:e8:f8:5d:28:12:bb:25:e0: 33:35:75:82:52:1c:b3:02:87:5d:9a:48:bd:85:4a: 6c:8b:55:62:d7:7a:ec:10:0d:66:89:14:d4:ed:4c: 68:a2:fe:5d:2b:e6:cf:47:fa:7c:b4:e6:8f:11:c2: 01:ba:09:e7:4f:87:1c:06:98:4e:19:6a:16:53:6e: 90:02:7a:f9:94:84:41:5e:24:71:7a:bf:5e:5f:95: 68:ed:2a:06:a5:35:db:df:e7:ae:22:89:13:c5:44: 14:0c:e2:cc:4d:a3:aa:e3:26:df:89:7e:7e:ce:14: 5d:82:18:27:5f:82:59:b6:f3:80:5e:64:8a:f7:d1: a3:32:15:00:32:b5:23:95:b1:37:b3:2e:7d:65:ac: a3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:22:4C:18:49:DA:77:39:F5:02:E6:08:46:EF:5D:6C:9C:FD:97:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/19476da5-4ba8-3eb6-82c7-14692313571e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.crl X509v3 Authority Key Identifier: keyid:54:68:E9:35:B7:E8:46:2B:5B:7C:4A:02:73:59:EB:5D:D6:BF:5D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5111dcdc-35f8-4a2f-b667-be6baf5ebf9b.cer sbgp-ipAddrBlock: critical IPv4: 192.195.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d4:ce:e2:f7:25:59:f3:b0:4a:c9:83:03:d6:f5:a2:a2:6e: 72:02:7c:60:ce:5b:1c:e3:87:2b:9a:3d:3a:10:ee:c6:7c:48: 13:06:66:50:c7:3d:fd:94:54:48:48:d2:e0:36:89:cb:19:ae: 61:af:df:a1:d8:3f:54:6d:9b:32:24:29:c1:3d:93:6b:1e:64: 93:5f:22:60:d5:59:f8:6c:d2:aa:d4:7c:f9:20:9f:c7:d5:eb: 9e:22:87:94:24:b6:cf:b9:72:7c:26:c9:67:89:2a:a6:b6:fc: b9:70:d7:0f:1b:51:ba:0a:7e:90:81:36:ec:c6:d9:9c:9a:33: e3:87:cc:83:2c:b1:c3:88:5a:16:b7:0b:14:65:95:f2:f2:0d: ce:4a:7f:d0:4d:c3:ff:27:ab:88:96:0e:49:90:ee:83:db:03: d1:b7:2b:1e:72:84:d7:7f:5c:db:15:51:bd:51:10:39:12:61: 38:46:67:ac:ef:83:78:3d:84:88:30:2d:91:a2:2c:d4:ba:08: 17:bc:0e:61:70:61:4e:0f:cc:10:2c:93:99:55:1a:fd:23:41: 6e:e0:90:09:e4:27:9b:b6:9d:46:86:83:b1:af:f9:87:f0:e6: 43:f2:a4:86:1e:04:46:92:d0:a5:e4:c5:77:89:1e:55:bc:cb: e4:e4:af:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5pPK3COojsFPN9AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExMWRjZGMtMzVmOC00YTJmLWI2NjctYmU2YmFmNWVi ZjliMB4XDTI2MDcwNjE3MzAzOVoXDTI2MTAwNDE3MzAzOVowLzEtMCsGA1UEAxMk MWJiYzkyZjQtOTE3Ny00MzQwLWJjZmEtNDRmZDA2ZjNkNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtStZvbEhye0dqlgbKXAzMDw5ATbr4dQ4nIza g4QrukSVHa7Q/tT5K4wrOZIOS8jMQjREeinXo3gmIU7rSEvJ25p/V+e/suVFi+y/ PzdGmWWetmYoMMiVfqIDGixCJEHa4VYMo1oGdS7MPUGefsnl6PhdKBK7JeAzNXWC UhyzAoddmki9hUpsi1Vi13rsEA1miRTU7Uxoov5dK+bPR/p8tOaPEcIBugnnT4cc BphOGWoWU26QAnr5lIRBXiRxer9eX5Vo7SoGpTXb3+euIokTxUQUDOLMTaOq4ybf iX5+zhRdghgnX4JZtvOAXmSK99GjMhUAMrUjlbE3sy59ZayjnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBciTBhJ2nc59QLmCEbvXWyc/Ze1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81MTEx ZGNkYy0zNWY4LTRhMmYtYjY2Ny1iZTZiYWY1ZWJmOWIvMTk0NzZkYTUtNGJhOC0z ZWI2LTgyYzctMTQ2OTIzMTM1NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTExMWRjZGMtMzVmOC00YTJmLWI2 NjctYmU2YmFmNWViZjliLzUxMTFkY2RjLTM1ZjgtNGEyZi1iNjY3LWJlNmJhZjVl YmY5Yi5jcmwwHwYDVR0jBBgwFoAUVGjpNbfoRitbfEoCc1nrXda/XaMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81MTExZGNkYy0zNWY4LTRhMmYtYjY2Ny1iZTZi YWY1ZWJmOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/UzuL3JVnzsErJgwPW9aKibnICfGDOWxzjhyuaPToQ7sZ8SBMGZlDH Pf2UVEhI0uA2icsZrmGv36HYP1RtmzIkKcE9k2seZJNfImDVWfhs0qrUfPkgn8fV 654ih5Qkts+5cnwmyWeJKqa2/Llw1w8bUboKfpCBNuzG2ZyaM+OHzIMsscOIWha3 CxRllfLyDc5Kf9BNw/8nq4iWDkmQ7oPbA9G3Kx5yhNd/XNsVUb1REDkSYThGZ6zv g3g9hIgwLZGiLNS6CBe8DmFwYU4PzBAsk5lVGv0jQW7gkAnkJ5u2nUaGg7Gv+Yfw 5kPypIYeBEaS0KXkxXeJHlW8y+TkrxE= -----END CERTIFICATE-----Generated at Tue Jul 21 20:56:08 2026 by rpki-client