$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa File: 4d0df983-efe5-30fb-9b23-cf9f866054a3.roa (raw, json) Hash identifier: XJFkoq/7zrNeGgx7frOWjZvaY4vO1Iwx7ukdSDC5dtc= Subject key identifier: 19:55:46:61:F2:AB:CF:A8:50:C5:37:76:DB:CB:CC:4E:6E:BF:6A:5F Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584EA78F73688327C464F2076680 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 59895 IP address blocks: 192.186.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:73:68:83:27:c4:64:f2:07:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bbd3a04a-b6da-4e62-a6dd-ac000a55b2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:d4:0a:9f:30:58:8d:4f:3a:37:22:b5:5d: 39:b1:a5:ac:38:c1:d3:d1:80:1c:d0:ad:2c:90:a5: 5c:fc:a4:16:40:22:95:37:6e:f3:66:b9:b2:9a:85: 74:51:91:59:8b:3c:11:e9:85:07:89:8f:34:7a:60: d4:6d:12:0d:43:af:f5:87:ef:52:d5:72:5a:52:a9: 2d:80:67:0b:31:81:b2:d1:0c:88:22:c7:33:64:2d: 17:ad:b6:93:28:d3:6e:cd:7d:bd:b4:1a:82:6b:0c: 3f:1c:8e:10:85:5f:93:94:1a:4a:a6:66:d4:5e:12: fe:a0:cf:e2:db:91:9f:29:cb:77:84:82:85:72:b6: 56:5a:2e:7d:5a:53:2b:0a:3b:db:0b:bf:3a:7a:d0: 24:d6:7b:30:21:a6:3b:e1:d4:f7:f2:e5:94:b8:15: a6:78:6c:69:06:0f:df:a6:a3:f6:0a:09:93:25:df: 1c:f4:28:87:06:5d:aa:4f:c0:66:7d:d2:2a:c8:8b: b5:07:82:9b:af:45:4b:80:d1:1f:4d:e5:e3:b1:18: c4:94:b4:09:22:c8:57:1d:99:99:1b:06:04:a5:e8: 7f:07:38:29:c4:27:4d:74:e3:bb:75:a0:e1:45:9d: f4:7e:f7:52:a3:57:6d:22:07:79:97:2d:68:c6:e9: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:55:46:61:F2:AB:CF:A8:50:C5:37:76:DB:CB:CC:4E:6E:BF:6A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4d0df983-efe5-30fb-9b23-cf9f866054a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 192.186.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ca:f1:3d:96:33:d4:93:56:3c:19:04:51:a3:7a:8c:bd:52: a2:cd:fe:18:75:3a:49:57:49:cf:8f:b2:6c:19:c4:c3:51:15: f3:50:df:d1:95:00:c0:b9:6d:90:6d:9d:8e:05:20:7f:6e:9d: 49:fc:db:f4:b1:41:dc:81:62:dd:c3:83:4a:d2:f0:17:a1:b6: 94:46:91:81:ad:46:12:90:f4:04:de:8b:93:74:59:f7:05:17: e0:d2:d3:18:08:71:c0:21:17:d3:f0:c0:9a:b9:f7:7f:1e:c5: 9e:e1:1f:88:1c:35:4c:4f:6b:88:f2:62:f4:bb:be:df:47:eb: 01:52:02:22:59:35:f9:29:92:ee:2c:ba:32:16:a7:0b:31:c7: 6e:2b:71:ae:85:d6:b7:37:88:fb:cd:fd:21:1d:58:05:c7:00: 74:89:17:da:7f:0c:09:6e:7b:1e:61:4a:ac:5b:3b:08:2a:bd: 9c:74:a3:09:da:30:da:3a:b1:b9:63:af:77:73:53:1d:7f:c1: 8c:8a:a9:7a:3a:9d:91:2a:26:7d:53:09:ef:cf:e2:51:af:48: d0:69:b2:5c:4a:7f:b8:c1:8f:35:09:b5:13:ad:af:16:dd:54: 22:22:9b:c4:ce:34:53:35:d4:7e:91:2b:f0:b9:42:ec:cc:43: a3:75:0b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj3NogyfEZPIHZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmJkM2EwNGEtYjZkYS00ZTYyLWE2ZGQtYWMwMDBhNTViMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpbUCp8wWI1POjcitV05saWsOMHT0YAc0K0s kKVc/KQWQCKVN27zZrmymoV0UZFZizwR6YUHiY80emDUbRINQ6/1h+9S1XJaUqkt gGcLMYGy0QyIIsczZC0XrbaTKNNuzX29tBqCaww/HI4QhV+TlBpKpmbUXhL+oM/i 25GfKct3hIKFcrZWWi59WlMrCjvbC786etAk1nswIaY74dT38uWUuBWmeGxpBg/f pqP2CgmTJd8c9CiHBl2qT8BmfdIqyIu1B4Kbr0VLgNEfTeXjsRjElLQJIshXHZmZ GwYEpeh/BzgpxCdNdOO7daDhRZ30fvdSo1dtIgd5ly1oxunuxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlVRmHyq8+oUMU3dtvLzE5uv2pfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNGQwZGY5ODMtZWZlNS0z MGZiLTliMjMtY2Y5Zjg2NjA1NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/K8T2WM9STVjwZBFGjeoy9UqLN/hh1OklXSc+PsmwZxMNRFfNQ39GV AMC5bZBtnY4FIH9unUn82/SxQdyBYt3Dg0rS8BehtpRGkYGtRhKQ9ATei5N0WfcF F+DS0xgIccAhF9PwwJq5938exZ7hH4gcNUxPa4jyYvS7vt9H6wFSAiJZNfkpku4s ujIWpwsxx24rca6F1rc3iPvN/SEdWAXHAHSJF9p/DAluex5hSqxbOwgqvZx0owna MNo6sbljr3dzUx1/wYyKqXo6nZEqJn1TCe/P4lGvSNBpslxKf7jBjzUJtROtrxbd VCIim8TONFM11H6RK/C5QuzMQ6N1Czo= -----END CERTIFICATE-----Generated at Wed Aug 26 14:26:25 2026 by rpki-client