$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa File: cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa (raw, json) Hash identifier: tsJPNkTNbt3+ennV1cSHxeTGzzUW9nq2SJKrl5kfhEY= Subject key identifier: 77:D8:C0:FB:46:97:AB:51:15:D7:F6:61:03:CA:36:F3:F4:CC:D4:3E Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584E2AD45D252D931EBD64591640 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 40948 IP address blocks: 192.232.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:5d:25:2d:93:1e:bd:64:59:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=0534728d-d959-4d00-a51e-eea583bdbc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:f1:df:3d:69:67:72:4e:64:58:f2:a3:b0: 00:f4:85:98:81:ec:39:80:99:34:a4:6e:6a:14:35: 7a:9a:70:b5:2e:18:a1:27:2d:5e:b9:95:d7:b2:a0: dc:62:b2:17:2d:4f:08:35:b7:f4:6b:aa:17:42:53: a2:1e:2a:24:0e:29:70:c5:a7:70:24:16:79:30:50: 6f:80:ca:d6:f7:ed:60:94:42:e9:32:40:eb:9e:f8: 87:71:83:07:df:4c:cf:82:f0:c9:01:bb:2c:76:80: 40:23:84:9b:6d:0b:16:52:10:24:be:e4:ad:97:e0: 6c:de:a3:ca:d0:ca:77:3d:24:77:7e:20:e5:ed:aa: d8:26:5b:9f:a1:eb:80:47:13:a5:db:81:80:94:ce: ba:e5:2f:34:be:bf:2e:66:43:76:18:e1:5c:5c:86: 11:5d:7b:41:a6:69:44:d8:18:60:71:34:88:73:ff: be:8e:5a:2f:bf:9e:84:bb:97:ce:e6:d5:e4:68:47: 5c:ee:75:ac:2e:b6:6b:d3:6b:ec:33:c3:a3:7c:e1: 04:54:05:25:0b:fd:1f:b1:dd:0b:72:fc:f0:b6:01: f3:60:61:00:96:3e:2b:50:f1:ee:64:26:0e:c0:de: ed:06:83:01:7e:8e:93:86:2b:61:20:57:16:b1:40: 09:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D8:C0:FB:46:97:AB:51:15:D7:F6:61:03:CA:36:F3:F4:CC:D4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 192.232.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:12:97:d7:2f:9a:70:ef:ab:a0:50:26:dd:06:7a:e3:24:82: cf:7f:89:e9:0d:bf:cd:58:e0:f4:7b:23:1b:17:8c:0b:d1:e7: b5:bc:14:21:b1:03:6d:3d:14:b3:41:2a:da:36:c2:18:6c:37: 74:cb:b0:27:9b:82:ae:5f:20:ec:2e:36:2b:9d:81:af:a6:6a: 63:c9:b9:d0:ec:65:ec:79:61:3d:9c:98:a0:5f:dc:29:2f:22: e1:ad:c4:d2:01:f5:9e:04:57:f4:f1:3b:79:eb:ba:8a:f5:ce: c5:23:98:0c:87:aa:d2:dc:8b:fa:6f:f1:03:0f:5c:46:9e:6e: 40:aa:d6:21:61:55:b7:23:88:57:01:8c:ef:c0:65:43:99:86: 36:59:99:29:ef:25:50:f6:ac:fa:d6:b5:5b:84:dc:b7:6c:0b: 77:e6:9a:44:82:e1:35:61:34:8a:b6:6d:86:1c:72:9a:76:e4: 2d:2d:73:35:b3:31:56:8a:58:eb:75:84:7d:6c:37:c7:89:99: 74:a7:fe:29:bc:9a:38:d5:99:5a:70:7a:52:91:e3:f1:2a:5d: 7e:fd:ea:66:86:51:3e:40:91:53:58:39:e6:15:80:8c:35:e3: 97:a7:e3:f6:a8:f6:2b:bb:5b:04:46:3d:e9:e3:02:e8:4c:21: 8f:fa:10:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1F0lLZMevWRZFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk MDUzNDcyOGQtZDk1OS00ZDAwLWE1MWUtZWVhNTgzYmRiYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWnx3z1pZ3JOZFjyo7AA9IWYgew5gJk0pG5q FDV6mnC1LhihJy1euZXXsqDcYrIXLU8INbf0a6oXQlOiHiokDilwxadwJBZ5MFBv gMrW9+1glELpMkDrnviHcYMH30zPgvDJAbssdoBAI4SbbQsWUhAkvuStl+Bs3qPK 0Mp3PSR3fiDl7arYJlufoeuARxOl24GAlM665S80vr8uZkN2GOFcXIYRXXtBpmlE 2BhgcTSIc/++jlovv56Eu5fO5tXkaEdc7nWsLrZr02vsM8OjfOEEVAUlC/0fsd0L cvzwtgHzYGEAlj4rUPHuZCYOwN7tBoMBfo6ThithIFcWsUAJnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfYwPtGl6tRFdf2YQPKNvP0zNQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2YyN2ViNWYtYWE2NS0z MGE4LWI3MWUtMTg4OWY1MGJlMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkSl9cvmnDvq6BQJt0GeuMkgs9/iekNv81Y4PR7IxsXjAvR57W8FCGx A209FLNBKto2whhsN3TLsCebgq5fIOwuNiudga+mamPJudDsZex5YT2cmKBf3Ckv IuGtxNIB9Z4EV/TxO3nruor1zsUjmAyHqtLci/pv8QMPXEaebkCq1iFhVbcjiFcB jO/AZUOZhjZZmSnvJVD2rPrWtVuE3LdsC3fmmkSC4TVhNIq2bYYccpp25C0tczWz MVaKWOt1hH1sN8eJmXSn/im8mjjVmVpwelKR4/EqXX796maGUT5AkVNYOeYVgIw1 45en4/ao9iu7WwRGPenjAuhMIY/6EL0= -----END CERTIFICATE-----Generated at Wed Jun 24 07:37:22 2026 by rpki-client