$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/abf39c8b-6f01-3a98-86f1-64c91c085ad1.roa File: abf39c8b-6f01-3a98-86f1-64c91c085ad1.roa (raw, json) Hash identifier: wzCIHSpB0GpeWqg06O6+PLYOiSTO+DfQwKlSNO4xFg0= Subject key identifier: D1:F8:AC:16:F8:71:59:6B:07:60:34:B3:C1:DE:9E:04:5A:09:16:25 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584EA788AAE99616349A8FE37F80 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/abf39c8b-6f01-3a98-86f1-64c91c085ad1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 60558 IP address blocks: 192.240.230.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:aa:e9:96:16:34:9a:8f:e3:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5b2fc21d-735a-4efc-97b5-ba5c3ea74a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:c1:0c:1c:ea:9f:5d:f8:52:cc:d5:66:56: 35:b8:0c:c5:32:dd:e7:23:d2:15:df:8e:a9:4d:e7: ce:62:16:e1:18:97:3f:db:46:d7:c7:f0:b4:c8:f0: 5e:84:83:e1:b8:c2:58:22:c9:59:ca:b1:75:fd:dc: 2d:7f:1a:62:0b:5f:e2:c5:9e:bc:ca:6b:db:e8:7c: ab:77:f5:af:ac:23:fb:46:3c:18:07:6f:54:c7:64: 2e:f8:ff:42:7f:b9:e1:26:b7:26:eb:42:2e:10:e5: 23:54:8e:9a:8a:a6:b2:4d:16:74:45:b8:3d:47:36: 0e:4b:aa:20:65:96:1b:05:42:00:bf:ae:9c:96:f9: 49:ef:56:ff:0f:af:c4:1f:65:fc:7d:df:5a:35:4d: 20:ee:50:fa:73:b4:5a:5c:b5:17:7f:d2:5e:7a:85: 8b:b3:71:d8:40:6d:2d:7f:d2:2a:81:50:f3:11:8d: 4e:d3:d2:07:00:03:53:21:67:dc:4e:36:a8:0c:c5: 79:ea:30:b4:77:ee:25:7c:39:3f:b6:3b:f5:17:38: 15:80:39:49:45:31:dd:ee:ea:3e:c0:08:bc:ec:3b: 00:76:df:2a:ae:27:3f:da:57:d8:c4:46:85:b7:f8: b1:5a:3c:56:4a:be:69:fa:e8:85:6f:d9:80:71:4e: d2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F8:AC:16:F8:71:59:6B:07:60:34:B3:C1:DE:9E:04:5A:09:16:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/abf39c8b-6f01-3a98-86f1-64c91c085ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 192.240.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:dc:4b:f9:65:78:56:bb:7d:39:d6:23:37:5a:46:f2:30:46: f5:fa:4e:29:aa:4a:30:f4:c5:16:b9:a6:e0:09:75:1e:02:c2: 36:ae:80:55:bc:cc:f7:55:5f:bf:6c:ef:b8:ac:68:57:90:25: 72:1b:c2:6e:96:6e:97:01:71:90:a0:9a:8a:98:91:fb:e9:6e: 5b:cc:df:54:3c:34:6d:77:3f:dc:5e:cf:d7:f7:88:88:16:7c: f5:5c:0c:41:38:a8:a9:af:57:cb:1f:7b:30:3b:48:e8:ed:2e: a5:ce:af:48:38:d1:19:02:bb:76:46:d4:d7:42:ff:f0:e0:d6: 40:48:7e:ab:14:06:55:3f:93:32:64:db:cb:3c:bc:d1:65:39: 58:52:87:b1:78:5f:2f:3f:b7:46:f8:59:b6:22:2d:f0:cf:76: 77:17:e3:ab:e7:97:52:ad:47:d8:f1:a4:58:a6:49:bd:24:26: 2e:83:fa:0c:2e:ea:8d:a1:32:3d:1b:cf:45:14:97:cf:97:8e: f6:64:d2:23:fd:03:d5:57:cb:ab:7f:5f:6a:bf:16:24:81:55: a0:e6:bc:47:79:a3:ef:9c:41:cf:79:16:9f:2e:fc:f4:22:7e: f9:3f:f1:f6:32:66:db:28:b0:2a:fd:77:26:fe:e3:b2:46:07: ff:03:e7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKrplhY0mo/jf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWIyZmMyMWQtNzM1YS00ZWZjLTk3YjUtYmE1YzNlYTc0YTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3zBDBzqn134UszVZlY1uAzFMt3nI9IV346p TefOYhbhGJc/20bXx/C0yPBehIPhuMJYIslZyrF1/dwtfxpiC1/ixZ68ymvb6Hyr d/WvrCP7RjwYB29Ux2Qu+P9Cf7nhJrcm60IuEOUjVI6aiqayTRZ0Rbg9RzYOS6og ZZYbBUIAv66clvlJ71b/D6/EH2X8fd9aNU0g7lD6c7RaXLUXf9JeeoWLs3HYQG0t f9IqgVDzEY1O09IHAANTIWfcTjaoDMV56jC0d+4lfDk/tjv1FzgVgDlJRTHd7uo+ wAi87DsAdt8qric/2lfYxEaFt/ixWjxWSr5p+uiFb9mAcU7SNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH4rBb4cVlrB2A0s8HengRaCRYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWJmMzljOGItNmYwMS0z YTk4LTg2ZjEtNjRjOTFjMDg1YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwPDmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3cS/lleFa7fTnWIzdaRvIwRvX6TimqSjD0xRa5puAJdR4CwjaugFW8 zPdVX79s77isaFeQJXIbwm6WbpcBcZCgmoqYkfvpblvM31Q8NG13P9xez9f3iIgW fPVcDEE4qKmvV8sfezA7SOjtLqXOr0g40RkCu3ZG1NdC//Dg1kBIfqsUBlU/kzJk 28s8vNFlOVhSh7F4Xy8/t0b4WbYiLfDPdncX46vnl1KtR9jxpFimSb0kJi6D+gwu 6o2hMj0bz0UUl8+XjvZk0iP9A9VXy6t/X2q/FiSBVaDmvEd5o++cQc95Fp8u/PQi fvk/8fYyZtsosCr9dyb+47JGB/8D52c= -----END CERTIFICATE-----Generated at Wed Aug 19 17:57:46 2026 by rpki-client