$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa File: ebc74e11-a225-3c40-a976-f2047dc2fdea.roa (raw, json) Hash identifier: H5n7Jwxg4E84jBxXQuD2NTHGBO42OPkUpapryc/KOoQ= Subject key identifier: 54:FE:3A:B3:0E:DA:DD:E8:D3:9A:E0:12:ED:99:FA:EE:CF:1F:92:C6 Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Certificate serial: 010D0C9F4328584DD09056F15791EF621EB8B440 Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 14041 IP address blocks: 192.43.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:56:f1:57:91:ef:62:1e:b8:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=35af97f8-8c60-48ee-b64a-e97235ed74de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cf:f1:c5:cc:f2:33:61:e5:44:9a:86:56:7c: eb:2a:7a:6e:d9:9f:04:3f:fc:0b:5c:9d:09:63:b9: 24:63:ed:e6:82:9e:90:53:f8:24:1e:5f:7a:f3:f0: 56:93:2f:25:1c:7e:fc:32:c7:ce:87:f9:03:48:7e: 6c:51:00:a1:46:4b:4c:68:1e:a0:94:1c:cc:bc:d6: 83:43:ea:d1:d0:9a:c2:4d:bc:24:a2:42:cb:6b:54: b6:c4:cf:8a:85:92:05:df:27:6d:e5:b0:a7:13:18: 54:ae:7a:d6:4f:24:8a:9b:37:06:5f:40:dc:e5:bd: 6f:49:c8:f9:f7:ca:cb:e2:bc:2c:c2:02:07:4e:0c: 0f:0f:b6:cc:3f:38:fb:20:20:cb:d8:8d:16:d5:20: 59:1d:43:a8:37:c2:f7:b7:08:26:40:32:fb:d3:41: 66:7e:93:a1:a1:55:4a:a9:73:59:fd:91:ae:32:26: ab:ec:4b:40:8e:06:90:89:c8:12:68:9c:39:12:be: 7f:6c:25:2e:55:8d:fb:49:e9:24:99:0e:76:89:0b: c3:51:b7:da:40:78:ec:ee:96:bd:b9:72:07:43:a6: 3d:51:e1:45:f4:3b:a0:85:72:6c:18:fb:1d:67:17: 53:12:bc:ff:ca:ad:c4:4a:76:0e:ba:67:d2:d3:2f: 89:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FE:3A:B3:0E:DA:DD:E8:D3:9A:E0:12:ED:99:FA:EE:CF:1F:92:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl X509v3 Authority Key Identifier: keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer sbgp-ipAddrBlock: critical IPv4: 192.43.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:43:58:00:d0:b5:21:3a:9e:7e:eb:db:d5:22:e6:53:8e:99: 05:f8:b3:68:ca:cb:dd:78:70:10:f0:e5:31:1c:13:75:ad:04: 1b:63:a4:f6:ce:49:2f:ec:21:fe:c6:3f:56:f8:ad:d4:e0:67: 22:a5:e9:c5:ac:c3:bd:6c:0a:c0:df:8c:46:e8:57:2d:41:d1: 41:dd:b8:2c:e1:ed:58:d9:07:30:08:a4:70:75:69:92:ee:e4: 80:a8:f9:14:9b:e9:ab:37:fe:97:a0:28:fb:2e:15:9c:4b:52: 8f:5f:c8:be:84:20:59:84:c5:e7:44:cb:4b:8b:3d:37:9f:cd: d2:a2:4b:40:82:04:e9:ec:e8:6e:5e:de:55:c8:1f:13:a2:00: 21:9a:56:74:bc:de:64:25:0d:87:bf:8b:6e:e2:67:c4:5c:39: 82:05:71:3e:50:97:55:ce:34:b6:55:de:77:c7:0d:fb:55:43: df:35:8d:28:bb:4e:d7:7f:87:a6:ab:e5:4d:7e:40:4f:02:f3: 92:ce:17:2c:27:49:bb:4f:43:c8:0e:48:78:7a:a1:2b:da:8b: 85:60:cf:b4:39:66:4f:6b:59:5e:6d:e6:d8:9e:95:a8:71:3e: 7b:e0:59:fc:63:1f:09:2c:93:d0:88:f8:04:76:83:a6:70:e4: 77:ac:83:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkFbxV5HvYh64tEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQxNGFmYzEtZDhlZC00ZDNmLThmNWItZmY3MmU1N2Y2 OTljMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk MzVhZjk3ZjgtOGM2MC00OGVlLWI2NGEtZTk3MjM1ZWQ3NGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8/xxczyM2HlRJqGVnzrKnpu2Z8EP/wLXJ0J Y7kkY+3mgp6QU/gkHl968/BWky8lHH78MsfOh/kDSH5sUQChRktMaB6glBzMvNaD Q+rR0JrCTbwkokLLa1S2xM+KhZIF3ydt5bCnExhUrnrWTySKmzcGX0Dc5b1vScj5 98rL4rwswgIHTgwPD7bMPzj7ICDL2I0W1SBZHUOoN8L3twgmQDL700FmfpOhoVVK qXNZ/ZGuMiar7EtAjgaQicgSaJw5Er5/bCUuVY37SekkmQ52iQvDUbfaQHjs7pa9 uXIHQ6Y9UeFF9DughXJsGPsdZxdTErz/yq3ESnYOumfS0y+JUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFT+OrMO2t3o05rgEu2Z+u7PH5LGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0 YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcyZTU3ZjY5OWMvZWJjNzRlMTEtYTIyNS0z YzQwLWE5NzYtZjIwNDdkYzJmZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjQxNGFmYzEtZDhlZC00ZDNmLThm NWItZmY3MmU1N2Y2OTljL2I0MTRhZmMxLWQ4ZWQtNGQzZi04ZjViLWZmNzJlNTdm Njk5Yy5jcmwwHwYDVR0jBBgwFoAUhBguY2PD+Xr9/NlWufJqnoLLWNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcy ZTU3ZjY5OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCvZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhDWADQtSE6nn7r29Ui5lOOmQX4s2jKy914cBDw5TEcE3WtBBtjpPbO SS/sIf7GP1b4rdTgZyKl6cWsw71sCsDfjEboVy1B0UHduCzh7VjZBzAIpHB1aZLu 5ICo+RSb6as3/pegKPsuFZxLUo9fyL6EIFmExedEy0uLPTefzdKiS0CCBOns6G5e 3lXIHxOiACGaVnS83mQlDYe/i27iZ8RcOYIFcT5Ql1XONLZV3nfHDftVQ981jSi7 Ttd/h6ar5U1+QE8C85LOFywnSbtPQ8gOSHh6oSvai4Vgz7Q5Zk9rWV5t5tielahx PnvgWfxjHwksk9CI+AR2g6Zw5Hesg/0= -----END CERTIFICATE-----Generated at Wed May 13 09:01:37 2026 by rpki-client