$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa File: cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa (raw, json) Hash identifier: 6WxPcbUwOEmgedlQef0G2NNADvN/D7MyMonAfEQsTU4= Subject key identifier: 09:18:45:72:5F:43:A8:AE:E0:66:54:27:51:F3:92:D7:16:CF:43:55 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584F6F2309D05B8DDCE09BCEBB00 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 40948 IP address blocks: 192.232.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:09:d0:5b:8d:dc:e0:9b:ce:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=cf62f23d-3109-44d2-9980-5c33e8f3f18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:6d:51:e7:c0:a7:bf:80:40:04:21:8c:ad: 61:b5:11:e9:fd:8d:e4:9c:ab:fd:7c:5e:7f:d3:e3: 04:66:27:a3:d8:de:1a:94:1c:78:00:de:6b:72:e1: d0:ec:e9:18:b6:cd:5f:56:10:15:40:df:a8:4a:a4: aa:a7:c4:05:37:c0:44:46:e1:ba:02:60:16:5b:e5: f1:2e:b0:7b:41:fe:b4:c1:fb:7c:f8:66:aa:2a:34: 20:7c:8c:92:26:2f:a4:f1:88:e2:b9:2c:3e:65:66: 4b:a3:08:ae:ae:0c:b0:6a:6c:39:7b:10:ed:e5:59: 5a:a1:f7:56:6b:75:15:c7:87:32:6a:08:ec:e1:e4: 0c:81:d7:80:f0:fb:2f:a3:ff:8c:37:a3:c3:b8:35: 28:73:d0:d6:91:d9:65:f4:02:85:f2:3a:2b:02:d5: 62:b4:f1:6d:81:06:be:21:12:18:e2:96:a8:cb:bd: 10:6a:28:e3:97:28:86:f3:f8:b6:17:74:d8:5d:b4: 5f:02:94:74:87:c0:82:ff:d4:d1:07:ee:ab:ce:f8: 1e:70:b6:9f:21:90:57:aa:d6:c7:b9:0c:06:9a:29: e2:ca:3e:4b:0f:fd:e9:00:9b:25:17:b9:90:53:3a: f2:66:a0:c6:7b:40:f6:af:07:dc:c5:e3:1e:9e:1c: 18:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:18:45:72:5F:43:A8:AE:E0:66:54:27:51:F3:92:D7:16:CF:43:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf27eb5f-aa65-30a8-b71e-1889f50be1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 192.232.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:67:07:e7:a3:2e:c4:b2:af:0b:0d:3f:47:44:db:20:c5:9a: d1:63:82:f2:f1:25:10:eb:e3:0f:0a:c6:7c:78:ec:21:7a:93: d0:c0:51:47:0e:69:84:d0:df:7c:55:61:0a:c8:b0:1c:8d:67: f4:3e:ea:43:3a:93:ec:1d:19:e7:61:be:6c:c9:f5:40:91:34: ea:ac:5f:59:1c:7c:31:10:6a:bd:a2:77:1e:f4:88:4e:02:c2: 1a:3b:98:84:cc:ca:80:0a:da:0e:b6:11:6b:09:5a:f8:a3:e2: 31:5d:dd:f3:6b:4b:be:16:c5:8c:9c:0f:13:6f:52:8d:9c:a2: f8:bc:96:e0:8f:21:d4:ff:db:82:fe:8a:60:ca:bd:90:86:4a: a5:59:0b:2d:59:d2:c7:28:8b:f2:c8:67:b6:41:88:55:e7:d6: a9:f0:8c:f4:68:ea:a2:1c:ff:50:92:71:57:99:d7:bf:56:fd: b4:3f:5d:fb:c0:eb:6c:a3:a6:bd:e6:1b:d5:c7:e5:e5:53:a8: 8a:82:38:87:b6:58:b9:6d:5c:bd:bf:ac:0b:20:0a:54:ea:c1: eb:91:ea:91:16:1d:18:3c:80:f5:bd:b1:33:d6:8d:ee:b4:cf: e5:fc:66:f7:3e:9b:43:76:6a:07:e7:a8:29:e7:fd:d8:8f:f2: 4c:be:11:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwnQW43c4JvOuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2Y2MmYyM2QtMzEwOS00NGQyLTk5ODAtNWMzM2U4ZjNmMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkVtUefAp7+AQAQhjK1htRHp/Y3knKv9fF5/ 0+MEZiej2N4alBx4AN5rcuHQ7OkYts1fVhAVQN+oSqSqp8QFN8BERuG6AmAWW+Xx LrB7Qf60wft8+GaqKjQgfIySJi+k8YjiuSw+ZWZLowiurgywamw5exDt5VlaofdW a3UVx4cyagjs4eQMgdeA8Psvo/+MN6PDuDUoc9DWkdll9AKF8jorAtVitPFtgQa+ IRIY4paoy70QaijjlyiG8/i2F3TYXbRfApR0h8CC/9TRB+6rzvgecLafIZBXqtbH uQwGminiyj5LD/3pAJslF7mQUzryZqDGe0D2rwfcxeMenhwYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkYRXJfQ6iu4GZUJ1HzktcWz0NVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2YyN2ViNWYtYWE2NS0z MGE4LWI3MWUtMTg4OWY1MGJlMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVnB+ejLsSyrwsNP0dE2yDFmtFjgvLxJRDr4w8Kxnx47CF6k9DAUUcO aYTQ33xVYQrIsByNZ/Q+6kM6k+wdGedhvmzJ9UCRNOqsX1kcfDEQar2idx70iE4C who7mITMyoAK2g62EWsJWvij4jFd3fNrS74WxYycDxNvUo2covi8luCPIdT/24L+ imDKvZCGSqVZCy1Z0scoi/LIZ7ZBiFXn1qnwjPRo6qIc/1CScVeZ179W/bQ/XfvA 62yjpr3mG9XH5eVTqIqCOIe2WLltXL2/rAsgClTqweuR6pEWHRg8gPW9sTPWje60 z+X8Zvc+m0N2agfnqCnn/diP8ky+ETs= -----END CERTIFICATE-----Generated at Sun Oct 11 17:21:51 2026 by rpki-client