$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa File: 2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa (raw, json) Hash identifier: Cdja0rWn7lsEGOIhW/zRV6w/YjKCXGe3wsDLbFZotvo= Subject key identifier: DA:BB:AA:C1:DB:AF:DD:5E:A1:E1:58:DF:77:F8:F5:18:C1:32:A4:2F Certificate issuer: /CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Certificate serial: 010D0C9F4328584ED001E039A39AF0B63362B916 Authority key identifier: 9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 192.58.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:e0:39:a3:9a:f0:b6:33:62:b9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf6809f-0b45-47d5-b7cc-7f892ddda0dc Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=07ffc955-6ecd-4349-bff3-7cf71a3147db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d1:38:83:6b:67:db:17:d9:03:cd:86:20:82: 65:a9:f1:c3:cd:c8:7f:29:1c:ee:f6:b1:bb:31:5e: 9b:e0:0f:02:9c:50:0e:15:a5:8d:4b:2d:e5:43:52: b4:d6:f2:70:2b:d3:b8:52:af:a1:05:c5:75:5e:33: 63:b0:78:09:57:8a:86:35:2e:cb:cc:eb:05:dc:9e: 1f:98:23:d2:b1:29:64:29:65:e9:56:25:7c:e6:6e: fa:ae:d4:db:93:d6:98:77:95:c3:bd:b5:1e:57:27: 47:ad:1d:5b:a8:dc:ab:e3:e7:66:0d:93:6f:0f:e0: 0e:2d:b4:be:db:e6:1b:d4:ff:79:4c:20:84:a2:fc: 52:63:58:93:16:d5:4a:97:88:7a:9d:a3:67:1b:d7: 03:44:55:82:7c:fc:af:ad:ec:9f:b8:66:cb:1e:50: 7f:f3:dd:19:85:bd:dd:17:9d:a5:94:ea:22:73:7b: 81:7f:63:ed:be:e7:4c:8e:26:68:ba:01:67:e8:5b: f2:38:bf:e4:59:54:95:c4:85:9a:a1:b5:f4:16:7f: 49:9b:4f:a3:ea:3a:15:e1:52:a4:83:de:73:f7:f2: 97:89:f9:d2:10:55:b5:b0:3a:51:3e:c8:ea:7a:cc: 82:ec:41:41:62:93:cd:8b:2a:58:6e:05:b0:d9:b2: 28:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BB:AA:C1:DB:AF:DD:5E:A1:E1:58:DF:77:F8:F5:18:C1:32:A4:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/2ae40c95-4cc5-33a5-8aa3-054c920d5b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.crl X509v3 Authority Key Identifier: keyid:9B:06:A9:E2:32:92:2E:F1:AD:4C:84:04:3E:28:D8:DF:11:75:0D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbf6809f-0b45-47d5-b7cc-7f892ddda0dc.cer sbgp-ipAddrBlock: critical IPv4: 192.58.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e4:37:9e:67:99:04:4d:73:d0:ce:b8:58:ad:8a:19:95:79: 60:a4:ba:37:e4:9a:cb:36:c8:b8:05:b7:6f:cd:8c:3e:d4:66: 5f:39:15:b8:71:b7:89:f1:c0:13:59:cb:e0:0d:c1:e3:9e:02: c5:01:ad:32:75:5d:e7:8f:f8:07:a0:ab:b2:4c:0f:a3:4b:57: 30:de:3d:b4:2e:14:03:e3:75:f6:5f:1a:49:4e:7c:a5:ec:69: de:99:3d:05:71:83:11:6c:b7:12:68:e0:f2:59:a3:b3:fc:9a: c0:56:91:9f:f5:c1:53:de:c4:1c:0a:5f:ca:e6:62:f0:8c:c3: 1f:7a:61:ff:79:2e:a2:8f:fe:b6:51:9c:8d:2e:d6:b2:cf:bf: d6:66:69:67:7b:61:0e:52:0a:fb:f8:04:3c:57:dc:b9:c4:99: c5:da:0d:26:54:58:7e:0d:15:ba:34:67:10:aa:aa:bb:0a:c8: 96:b0:7a:5c:ae:41:83:a1:bf:2a:f6:ba:88:22:26:7f:de:bf: 80:5e:f6:f4:cf:b6:56:38:b8:db:b3:48:b5:d4:96:c1:49:06: 5d:46:58:da:3d:92:ea:1e:b9:b5:54:cf:60:bd:12:bd:89:76: 84:dd:88:eb:d5:77:81:0e:2a:14:65:1c:f2:22:83:42:42:03: d0:55:43:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAeA5o5rwtjNiuRYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmNjgwOWYtMGI0NS00N2Q1LWI3Y2MtN2Y4OTJkZGRh MGRjMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk MDdmZmM5NTUtNmVjZC00MzQ5LWJmZjMtN2NmNzFhMzE0N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdE4g2tn2xfZA82GIIJlqfHDzch/KRzu9rG7 MV6b4A8CnFAOFaWNSy3lQ1K01vJwK9O4Uq+hBcV1XjNjsHgJV4qGNS7LzOsF3J4f mCPSsSlkKWXpViV85m76rtTbk9aYd5XDvbUeVydHrR1bqNyr4+dmDZNvD+AOLbS+ 2+Yb1P95TCCEovxSY1iTFtVKl4h6naNnG9cDRFWCfPyvreyfuGbLHlB/890Zhb3d F52llOoic3uBf2PtvudMjiZougFn6FvyOL/kWVSVxIWaobX0Fn9Jm0+j6joV4VKk g95z9/KXifnSEFW1sDpRPsjqesyC7EFBYpPNiypYbgWw2bIosQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq7qsHbr91eoeFY33f49RjBMqQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2 ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5MmRkZGEwZGMvMmFlNDBjOTUtNGNjNS0z M2E1LThhYTMtMDU0YzkyMGQ1YjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JmNjgwOWYtMGI0NS00N2Q1LWI3 Y2MtN2Y4OTJkZGRhMGRjL2NiZjY4MDlmLTBiNDUtNDdkNS1iN2NjLTdmODkyZGRk YTBkYy5jcmwwHwYDVR0jBBgwFoAUmwap4jKSLvGtTIQEPijY3xF1DZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmY2ODA5Zi0wYjQ1LTQ3ZDUtYjdjYy03Zjg5 MmRkZGEwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXkN55nmQRNc9DOuFitihmVeWCkujfkmss2yLgFt2/NjD7UZl85Fbhx t4nxwBNZy+ANweOeAsUBrTJ1XeeP+Aegq7JMD6NLVzDePbQuFAPjdfZfGklOfKXs ad6ZPQVxgxFstxJo4PJZo7P8msBWkZ/1wVPexBwKX8rmYvCMwx96Yf95LqKP/rZR nI0u1rLPv9ZmaWd7YQ5SCvv4BDxX3LnEmcXaDSZUWH4NFbo0ZxCqqrsKyJawelyu QYOhvyr2uogiJn/ev4Be9vTPtlY4uNuzSLXUlsFJBl1GWNo9kuoeubVUz2C9Er2J doTdiOvVd4EOKhRlHPIig0JCA9BVQ2k= -----END CERTIFICATE-----Generated at Thu Aug 20 21:57:34 2026 by rpki-client