$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa File: bbe2e43e-950f-32b7-9da7-d244a60303be.roa (raw, json) Hash identifier: 9m6RWXUwd7qPjdIf4RdQd+QUy11HiB74OHO4dgAWaLc= Subject key identifier: 89:C1:88:86:58:87:47:F9:44:0F:8E:1F:92:D4:81:84:41:D7:26:AF Certificate issuer: /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2 Certificate serial: 010D0C9F4328584E4C548A6B5AF29AFDCDAEB9C0 Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 7212 IP address blocks: 192.111.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:8a:6b:5a:f2:9a:fd:cd:ae:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=1424fe3c-b77c-482a-a9ac-3ba2267fbd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ad:ac:07:b0:35:df:2a:24:ee:f4:d3:87:bf: f6:e3:ad:44:2f:e2:be:04:36:cc:f5:03:ef:6f:c1: e8:08:7c:95:d2:5b:4b:bf:36:5a:28:04:e2:95:e4: d2:34:67:87:11:40:b4:d8:70:2f:b9:9e:66:4f:f8: 54:71:33:b3:0b:86:24:a7:6e:1d:13:48:01:2b:00: cd:e8:dc:08:59:9a:6f:5b:b7:8c:20:d1:70:c5:a2: 50:cd:78:90:64:f0:02:c0:c3:3d:dc:38:ae:c4:a7: e0:6b:86:91:ca:63:02:ae:15:81:5d:64:f3:47:c6: cc:21:e0:2e:10:8f:c8:d6:1b:e0:06:e5:10:91:de: a5:8d:b8:2d:31:f0:7a:65:c6:ef:6b:aa:60:6c:9d: db:9c:f6:d3:d9:18:ab:cb:27:4d:a8:34:7b:3a:71: b1:58:2f:5d:0c:9a:af:f4:0c:89:f6:33:b0:f3:84: 4b:f5:94:9b:ae:d6:e4:bb:ec:35:d8:1c:98:26:68: 89:88:6d:43:d6:7f:ce:1e:2b:17:00:50:ab:28:1c: 4f:65:01:e9:00:8d:86:0b:61:54:41:dd:ed:c1:a5: bb:07:d0:b1:fe:52:8d:33:a1:3e:c7:08:fe:5b:21: fb:39:d3:9a:cf:e9:af:41:09:5e:91:3e:dd:e1:ee: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:88:86:58:87:47:F9:44:0F:8E:1F:92:D4:81:84:41:D7:26:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/bbe2e43e-950f-32b7-9da7-d244a60303be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl X509v3 Authority Key Identifier: keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer sbgp-ipAddrBlock: critical IPv4: 192.111.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:3b:49:73:5e:f0:91:8e:b3:eb:72:1d:c8:e7:a4:e9:25:ac: 02:4c:82:e4:b6:3c:6c:09:28:67:ea:85:10:62:16:42:8b:8f: ea:a7:34:a8:c6:3c:dc:4a:e4:cc:21:7e:14:13:9b:fa:85:31: c0:8c:cb:e1:83:26:99:01:03:da:2c:30:a4:ff:04:e6:33:bd: 0a:62:5d:93:9a:63:d0:3d:63:18:de:c2:24:4c:8d:40:f5:20: b9:e7:b3:45:c7:9a:60:f6:f0:59:86:09:24:ef:ba:91:e6:2a: 2f:4b:1d:de:84:5d:91:f7:89:fb:25:6e:a2:73:7d:c6:35:3e: 57:57:8b:d1:4d:86:1c:72:2f:5b:0d:d9:07:88:54:e8:9e:f0: 82:db:13:ce:e0:25:d2:d4:92:ed:8a:f9:89:ab:c3:fd:82:95: 8d:26:46:46:d6:09:88:00:fc:10:0e:ce:08:9c:e5:f8:c0:af: 03:38:ce:d2:65:0c:88:de:e7:9f:f6:2f:d0:8a:32:d4:bb:d5: 37:96:b1:50:ad:20:e3:95:9c:cf:c3:1d:02:fc:51:46:ce:b2: 21:4b:a2:4e:0c:86:8f:05:f2:9c:7d:d0:7b:cc:f9:80:b3:b3: 50:c4:62:89:1a:d2:4a:91:a1:dd:03:c5:26:de:28:2b:87:e1: 66:89:d7:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVIprWvKa/c2uucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFjMDA4OTQtNWUxNy00ZTE0LWI4ZWItYjdmYjM0OGFk MWMyMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk MTQyNGZlM2MtYjc3Yy00ODJhLWE5YWMtM2JhMjI2N2ZiZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK2sB7A13yok7vTTh7/2461EL+K+BDbM9QPv b8HoCHyV0ltLvzZaKATileTSNGeHEUC02HAvuZ5mT/hUcTOzC4Ykp24dE0gBKwDN 6NwIWZpvW7eMINFwxaJQzXiQZPACwMM93DiuxKfga4aRymMCrhWBXWTzR8bMIeAu EI/I1hvgBuUQkd6ljbgtMfB6Zcbva6pgbJ3bnPbT2RiryydNqDR7OnGxWC9dDJqv 9AyJ9jOw84RL9ZSbrtbku+w12ByYJmiJiG1D1n/OHisXAFCrKBxPZQHpAI2GC2FU Qd3twaW7B9Cx/lKNM6E+xwj+WyH7OdOaz+mvQQlekT7d4e7mTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInBiIZYh0f5RA+OH5LUgYRB1yavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYWMw MDg5NC01ZTE3LTRlMTQtYjhlYi1iN2ZiMzQ4YWQxYzIvYmJlMmU0M2UtOTUwZi0z MmI3LTlkYTctZDI0NGE2MDMwM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWFjMDA4OTQtNWUxNy00ZTE0LWI4 ZWItYjdmYjM0OGFkMWMyL2VhYzAwODk0LTVlMTctNGUxNC1iOGViLWI3ZmIzNDhh ZDFjMi5jcmwwHwYDVR0jBBgwFoAUwYzMbm96JB9XCrDBoqjJfPoxvcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYWMwMDg5NC01ZTE3LTRlMTQtYjhlYi1iN2Zi MzQ4YWQxYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU7SXNe8JGOs+tyHcjnpOklrAJMguS2PGwJKGfqhRBiFkKLj+qnNKjG PNxK5MwhfhQTm/qFMcCMy+GDJpkBA9osMKT/BOYzvQpiXZOaY9A9YxjewiRMjUD1 ILnns0XHmmD28FmGCSTvupHmKi9LHd6EXZH3ifslbqJzfcY1PldXi9FNhhxyL1sN 2QeIVOie8ILbE87gJdLUku2K+Ymrw/2ClY0mRkbWCYgA/BAOzgic5fjArwM4ztJl DIje55/2L9CKMtS71TeWsVCtIOOVnM/DHQL8UUbOsiFLok4Mho8F8px90HvM+YCz s1DEYoka0kqRod0DxSbeKCuH4WaJ1/8= -----END CERTIFICATE-----Generated at Wed Jul 8 15:46:59 2026 by rpki-client