$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa File: 2e0efa81-cacd-3e96-8012-69bb025d6e27.roa (raw, json) Hash identifier: KheiXblKNUAjxV40wJTSW0YF+Q3EbkOCDec6uM6kvBI= Subject key identifier: 2B:DF:3A:01:92:54:C5:FF:C0:4C:60:8F:D7:3D:BE:C5:F8:49:E0:F2 Certificate issuer: /CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21 Certificate serial: 010D0C9F4328584E4129CA9121605E344ABEEC80 Authority key identifier: 2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 16509 IP address blocks: 192.245.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:ca:91:21:60:5e:34:4a:be:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a43c4d-99f1-46e7-9cc7-b8c6301aab21 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=56cdf195-0fba-4a70-be99-5c6528fd74ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:de:06:51:8e:4a:d2:e8:a3:33:6d:e4:12: 8b:57:8f:57:6f:9b:c5:95:01:8a:db:5e:cf:cc:93: 60:60:45:62:48:fc:81:ff:51:b9:8e:11:a8:88:b5: a8:fd:ae:fc:09:43:73:e5:2f:c2:da:46:c7:a1:29: d8:03:d7:71:ee:b0:6d:d2:84:a3:b0:6e:54:d8:39: ed:ca:17:3e:d2:dc:3c:f0:a0:c2:76:05:dd:d0:33: 65:45:19:01:2a:a5:2b:db:28:45:52:5e:e8:e9:f3: 5a:16:1f:3c:57:8c:4a:c9:08:d2:68:f6:a0:b9:21: c0:ee:bf:6c:43:1a:15:9c:c0:14:69:de:15:41:88: 13:70:fd:2f:d7:6b:2e:3d:e6:e3:e9:80:fe:b3:86: 88:34:3e:12:07:ca:ec:e5:d9:3d:9a:fb:29:07:21: 97:0d:34:26:8e:d2:8f:49:50:7e:14:04:d6:fd:8f: 00:22:6a:e7:aa:97:3c:c1:2b:91:ba:bb:fe:17:f6: 75:e1:60:3c:1a:f2:b5:c4:36:41:46:dd:29:8f:d2: ce:06:22:40:44:c2:06:d8:92:4c:a3:95:87:93:da: a9:b8:e0:0c:93:e4:07:36:c3:9a:9c:1a:39:ba:95: 99:79:48:02:98:4b:bd:81:da:ef:fe:95:8b:82:24: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DF:3A:01:92:54:C5:FF:C0:4C:60:8F:D7:3D:BE:C5:F8:49:E0:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/2e0efa81-cacd-3e96-8012-69bb025d6e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.crl X509v3 Authority Key Identifier: keyid:2F:8A:16:E3:1B:FB:D2:3A:9E:45:F3:0F:41:4F:9A:D1:39:52:45:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f9a43c4d-99f1-46e7-9cc7-b8c6301aab21.cer sbgp-ipAddrBlock: critical IPv4: 192.245.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b6:63:fd:05:05:47:21:3d:70:74:17:af:36:9f:d5:63:3e: ce:ff:84:af:89:a9:1f:4c:a8:a6:f6:6a:f4:f2:f7:0d:55:4b: af:a4:be:c7:8a:7b:cd:b5:c5:4c:63:02:e8:bc:56:bc:c5:07: 3c:dc:84:4f:bc:d5:28:13:bd:0f:fc:7b:ab:84:d2:6e:95:61: c7:5f:a1:f9:49:b5:2d:a4:fa:9c:4a:ed:b8:59:22:80:44:09: 9f:0c:26:b4:3f:b2:af:f8:58:bc:df:c6:1d:55:aa:19:39:41: c4:e3:52:b4:7c:13:70:75:0a:e9:82:a8:e6:e2:73:c1:a5:fc: 76:0a:35:4c:da:f5:86:19:bb:4a:34:e1:2f:de:21:94:16:ad: 23:6e:98:0e:b8:1b:69:c9:f9:a5:fc:47:33:8f:96:14:93:d4: 35:3f:35:1c:24:64:36:14:12:db:d2:4b:b5:4f:7b:b5:4f:36: e9:1b:ad:bc:6e:06:37:cb:96:89:32:1b:4c:05:c0:d5:3b:0d: 6a:85:3c:14:2f:70:19:cf:3a:c3:cc:99:46:41:7a:ae:df:0b: 51:55:57:5e:d9:b8:5c:74:c6:fb:10:ff:e2:c5:a7:f7:a6:f1: 30:f0:62:09:e4:fa:0e:56:8f:a8:d5:1d:d9:23:42:e2:cf:aa: b0:49:54:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKcqRIWBeNEq+7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjlhNDNjNGQtOTlmMS00NmU3LTljYzctYjhjNjMwMWFh YjIxMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk NTZjZGYxOTUtMGZiYS00YTcwLWJlOTktNWM2NTI4ZmQ3NGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeHeBlGOStLoozNt5BKLV49Xb5vFlQGK217P zJNgYEViSPyB/1G5jhGoiLWo/a78CUNz5S/C2kbHoSnYA9dx7rBt0oSjsG5U2Dnt yhc+0tw88KDCdgXd0DNlRRkBKqUr2yhFUl7o6fNaFh88V4xKyQjSaPaguSHA7r9s QxoVnMAUad4VQYgTcP0v12suPebj6YD+s4aIND4SB8rs5dk9mvspByGXDTQmjtKP SVB+FATW/Y8AImrnqpc8wSuRurv+F/Z14WA8GvK1xDZBRt0pj9LOBiJARMIG2JJM o5WHk9qpuOAMk+QHNsOanBo5upWZeUgCmEu9gdrv/pWLgiQwWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvfOgGSVMX/wExgj9c9vsX4SeDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mOWE0 M2M0ZC05OWYxLTQ2ZTctOWNjNy1iOGM2MzAxYWFiMjEvMmUwZWZhODEtY2FjZC0z ZTk2LTgwMTItNjliYjAyNWQ2ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjlhNDNjNGQtOTlmMS00NmU3LTlj YzctYjhjNjMwMWFhYjIxL2Y5YTQzYzRkLTk5ZjEtNDZlNy05Y2M3LWI4YzYzMDFh YWIyMS5jcmwwHwYDVR0jBBgwFoAUL4oW4xv70jqeRfMPQU+a0TlSRaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mOWE0M2M0ZC05OWYxLTQ2ZTctOWNjNy1iOGM2 MzAxYWFiMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq2Y/0FBUchPXB0F682n9VjPs7/hK+JqR9MqKb2avTy9w1VS6+kvseK e821xUxjAui8VrzFBzzchE+81SgTvQ/8e6uE0m6VYcdfoflJtS2k+pxK7bhZIoBE CZ8MJrQ/sq/4WLzfxh1Vqhk5QcTjUrR8E3B1CumCqObic8Gl/HYKNUza9YYZu0o0 4S/eIZQWrSNumA64G2nJ+aX8RzOPlhST1DU/NRwkZDYUEtvSS7VPe7VPNukbrbxu BjfLlokyG0wFwNU7DWqFPBQvcBnPOsPMmUZBeq7fC1FVV17ZuFx0xvsQ/+LFp/em 8TDwYgnk+g5Wj6jVHdkjQuLPqrBJVC0= -----END CERTIFICATE-----Generated at Wed Jun 24 15:47:02 2026 by rpki-client