$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa File: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (raw, json) Hash identifier: x/hh0yrWak6DU1Or049YYIdniPYzDqyT+wj8f1+9B1E= Subject key identifier: 6E:4B:C8:BD:D9:6F:D4:54:C9:D5:8C:E1:5A:F3:FA:34:3C:D5:66:DA Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584E736A203D4573A5AD57FE4500 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 395464 IP address blocks: 192.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:20:3d:45:73:a5:ad:57:fe:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=c9c82f82-a301-4537-811a-aee7ac95293b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:71:0c:3f:11:39:fc:9b:03:e8:4a:88:d7:1f: 09:d7:70:f4:92:1c:fe:e4:cb:de:87:e5:55:ab:7d: 0e:a4:66:99:6b:09:dc:40:87:61:e1:a0:64:0c:fc: 89:f2:5c:56:e1:f8:5a:ac:db:4c:f3:cb:76:43:64: f1:a3:40:4a:e3:91:c2:01:28:6e:7e:4b:19:c4:49: 4f:b0:3d:67:6a:d4:1b:69:46:6c:4d:c6:1b:95:49: f2:1a:fc:d8:31:cb:c4:6f:bb:38:9c:7b:86:82:73: fa:c7:1d:4f:48:40:09:ab:ee:8a:dd:da:70:9b:8b: d1:0a:56:5e:f2:b4:d8:fe:aa:97:3c:2d:2c:e2:2a: 7d:ab:80:87:8e:d1:4d:28:a6:79:d8:40:3d:28:d4: c3:2a:a5:68:74:67:09:ea:42:a2:95:eb:ee:d9:25: ef:75:c4:1b:df:76:f9:b9:69:28:b4:2f:78:e7:e5: 7c:60:89:24:db:6f:3a:9c:ce:b2:be:09:cd:66:cb: 97:f0:c5:07:02:04:03:d6:5a:08:f8:d7:b0:a4:91: 10:bd:8d:fd:e2:80:d8:00:32:2e:1a:36:4e:a8:45: a0:b8:6c:7a:81:be:82:cd:b0:53:51:a4:8d:45:59: e3:91:57:46:5c:97:10:e0:06:20:43:a9:e9:93:4b: 7d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4B:C8:BD:D9:6F:D4:54:C9:D5:8C:E1:5A:F3:FA:34:3C:D5:66:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: 192.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a2:70:d9:13:3d:86:46:62:38:81:5d:b0:b0:67:50:0b:91: af:37:6c:43:96:9a:82:3f:e6:be:44:a2:f7:69:91:49:6d:0c: a9:49:1a:1b:13:5c:7a:58:7a:02:9c:68:0c:29:c4:42:3b:dd: df:c1:71:b3:b9:16:da:c4:18:87:79:22:e5:c1:b1:3a:95:61: ba:9f:c6:ed:c8:b9:bc:21:d0:30:16:16:a3:18:05:42:ec:a4: 79:f8:98:9c:92:4c:fa:72:e9:c0:ce:8a:c9:18:a4:94:c6:0e: 23:e8:49:cc:ac:f6:65:d9:53:b8:96:f4:08:c0:9a:9e:a5:22: e1:a0:0b:b8:f4:b5:ff:e2:75:e5:38:58:a0:7d:b8:f2:fb:6d: ad:c8:82:b8:4c:70:95:ff:51:05:77:ab:51:0a:bd:b7:81:35: cf:78:1d:f5:94:64:6a:6c:dc:d7:c2:cf:eb:cc:1a:7b:da:36: 46:f4:9c:5b:37:80:44:4d:14:b1:ff:8a:af:a0:5d:2c:9c:1b: 39:5a:d1:21:85:fe:99:d9:c8:6b:33:cc:cf:ff:54:93:cd:64: f3:cb:75:0a:1e:ad:8f:76:80:9c:7b:d7:28:90:b6:a1:cb:9c: f7:25:d6:a7:89:e0:7e:db:d6:f9:bf:29:e8:82:4c:74:7b:41: b1:b0:7f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaiA9RXOlrVf+RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk YzljODJmODItYTMwMS00NTM3LTgxMWEtYWVlN2FjOTUyOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnEMPxE5/JsD6EqI1x8J13D0khz+5Mveh+VV q30OpGaZawncQIdh4aBkDPyJ8lxW4fharNtM88t2Q2Txo0BK45HCAShufksZxElP sD1natQbaUZsTcYblUnyGvzYMcvEb7s4nHuGgnP6xx1PSEAJq+6K3dpwm4vRClZe 8rTY/qqXPC0s4ip9q4CHjtFNKKZ52EA9KNTDKqVodGcJ6kKilevu2SXvdcQb33b5 uWkotC945+V8YIkk2286nM6yvgnNZsuX8MUHAgQD1loI+NewpJEQvY394oDYADIu GjZOqEWguGx6gb6CzbBTUaSNRVnjkVdGXJcQ4AYgQ6npk0t9MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5LyL3Zb9RUydWM4Vrz+jQ81WbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvOTVjYmNlNTItYTBmMC0z ODJjLThiODEtZDIzYzcwY2EzNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGicNkTPYZGYjiBXbCwZ1ALka83bEOWmoI/5r5EovdpkUltDKlJGhsT XHpYegKcaAwpxEI73d/BcbO5FtrEGId5IuXBsTqVYbqfxu3Iubwh0DAWFqMYBULs pHn4mJySTPpy6cDOiskYpJTGDiPoScys9mXZU7iW9AjAmp6lIuGgC7j0tf/ideU4 WKB9uPL7ba3IgrhMcJX/UQV3q1EKvbeBNc94HfWUZGps3NfCz+vMGnvaNkb0nFs3 gERNFLH/iq+gXSycGzla0SGF/pnZyGszzM//VJPNZPPLdQoerY92gJx71yiQtqHL nPcl1qeJ4H7b1vm/KeiCTHR7QbGwf44= -----END CERTIFICATE-----Generated at Mon Jul 13 08:42:48 2026 by rpki-client