$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa File: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (raw, json) Hash identifier: PIX4CDs37PloIOoy0GD/odtEJ7ZR5mY1qkxX9AmDY1I= Subject key identifier: 19:60:E4:B8:AE:7C:85:D9:05:5E:C6:C9:16:0A:95:8B:62:6D:E8:F4 Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584F15CCE9E83704204196EAD080 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 395464 IP address blocks: 192.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e9:e8:37:04:20:41:96:ea:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=a11e65ad-ecb1-4aa9-8a45-e341989837fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:fc:ee:0f:bb:84:ee:d0:f9:e0:6a:57:e9: f6:55:3a:8b:b5:47:3b:22:eb:e4:22:3b:21:74:26: be:64:fa:1a:3c:52:87:5b:34:94:44:3f:87:c1:b7: b0:69:b5:5c:22:39:ae:7a:db:fa:ff:81:11:30:e3: fb:4c:2a:68:0e:2e:bb:8f:26:93:89:ef:ab:51:a4: 5d:1b:78:f1:62:e6:1e:52:92:a3:c1:04:b9:f1:9c: 3c:83:6b:b6:f5:5e:92:e8:f1:4e:09:b8:81:7a:67: b1:8d:d7:5f:3f:10:65:ab:b4:0b:1f:d0:cb:ac:f1: 3d:57:a1:c4:2d:09:7c:d4:a6:88:77:7a:af:41:f5: b6:06:d5:ee:52:a3:d2:12:5d:fb:bd:1f:f1:4d:7c: ce:77:48:a4:c6:26:0b:02:15:56:cf:75:fb:96:f4: 21:87:ef:75:39:5e:81:4c:3a:97:13:8c:4b:ad:6e: 5a:65:9c:b5:8c:79:92:3d:84:95:c0:2d:4f:8b:a6: 8f:f3:5d:71:1b:a0:6b:1f:3e:83:f5:2a:21:74:43: ec:2d:5d:3f:a0:bc:bb:5d:32:65:9a:91:fe:4c:47: a3:13:c4:ed:f5:1c:b2:51:58:c8:a0:9c:4e:f2:0b: 1e:14:4e:bf:13:c8:a9:9a:d3:6d:fe:21:24:67:b1: 51:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:60:E4:B8:AE:7C:85:D9:05:5E:C6:C9:16:0A:95:8B:62:6D:E8:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/95cbce52-a0f0-382c-8b81-d23c70ca3529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: 192.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:31:db:7e:cd:af:94:a8:f5:14:e3:98:17:b2:3d:48:ee:de: 8c:ad:c0:a6:0a:5a:35:f9:33:ea:cc:2f:38:7e:56:6c:49:90: 45:9b:1d:ab:6c:bc:cd:d9:1d:e2:49:4e:a4:e5:20:29:d0:e9: 5c:b5:60:fe:22:91:a6:5a:26:67:fa:77:7a:ea:64:f4:60:ee: f7:92:ba:b2:82:e8:38:c8:11:50:15:7f:ee:d8:cc:fb:22:32: 5e:4d:16:2d:a0:ef:08:db:b7:9a:58:6a:b9:4a:b4:00:99:4e: 5f:39:e3:61:29:b9:62:b6:5b:7e:f1:f5:11:15:69:67:1d:de: 2a:c2:2e:c1:45:f0:86:fa:d9:d9:80:c6:6b:03:ba:b2:4a:66: 9c:d4:48:4e:84:16:68:0c:9d:e1:33:90:bb:d2:52:a7:4d:8f: 12:79:bd:71:48:e2:d4:3d:36:84:ef:8f:71:47:f2:54:68:8d: 54:a1:a5:7a:ee:10:b6:2d:8f:6d:0a:ed:7c:6b:24:57:93:5a: bb:70:82:dc:e0:72:1e:b8:65:8a:6f:42:80:2f:70:66:01:53: 9d:21:1f:a8:56:fc:81:06:09:81:a3:62:f0:48:a1:89:76:ac: 5e:30:9c:b3:bd:2a:2f:fd:74:ec:a2:84:49:87:88:36:f9:e1: 21:23:2f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOnoNwQgQZbq0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YTExZTY1YWQtZWNiMS00YWE5LThhNDUtZTM0MTk4OTgzN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5787g+7hO7Q+eBqV+n2VTqLtUc7IuvkIjsh dCa+ZPoaPFKHWzSURD+HwbewabVcIjmuetv6/4ERMOP7TCpoDi67jyaTie+rUaRd G3jxYuYeUpKjwQS58Zw8g2u29V6S6PFOCbiBemexjddfPxBlq7QLH9DLrPE9V6HE LQl81KaId3qvQfW2BtXuUqPSEl37vR/xTXzOd0ikxiYLAhVWz3X7lvQhh+91OV6B TDqXE4xLrW5aZZy1jHmSPYSVwC1Pi6aP811xG6BrHz6D9SohdEPsLV0/oLy7XTJl mpH+TEejE8Tt9RyyUVjIoJxO8gseFE6/E8ipmtNt/iEkZ7FRaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlg5LiufIXZBV7GyRYKlYtibej0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvOTVjYmNlNTItYTBmMC0z ODJjLThiODEtZDIzYzcwY2EzNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIx237Nr5So9RTjmBeyPUju3oytwKYKWjX5M+rMLzh+VmxJkEWbHats vM3ZHeJJTqTlICnQ6Vy1YP4ikaZaJmf6d3rqZPRg7veSurKC6DjIEVAVf+7YzPsi Ml5NFi2g7wjbt5pYarlKtACZTl8542EpuWK2W37x9REVaWcd3irCLsFF8Ib62dmA xmsDurJKZpzUSE6EFmgMneEzkLvSUqdNjxJ5vXFI4tQ9NoTvj3FH8lRojVShpXru ELYtj20K7XxrJFeTWrtwgtzgch64ZYpvQoAvcGYBU50hH6hW/IEGCYGjYvBIoYl2 rF4wnLO9Ki/9dOyihEmHiDb54SEjL3E= -----END CERTIFICATE-----Generated at Thu Oct 1 10:49:38 2026 by rpki-client