$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0ae7e89e-c4c8-3282-98a9-7f46af805675.roa File: 0ae7e89e-c4c8-3282-98a9-7f46af805675.roa (raw, json) Hash identifier: lkS/wXVnxAeeb+fmlqaqfBBsuCwq6AdVOtzimuMw1w0= Subject key identifier: CE:CB:0D:B4:F5:3D:E5:A1:48:1D:9E:00:2A:F4:29:0D:02:A0:CF:CF Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584F4972A72F5406F23ECB9B7D80 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0ae7e89e-c4c8-3282-98a9-7f46af805675.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20454 IP address blocks: 192.240.202.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a7:2f:54:06:f2:3e:cb:9b:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3b045cc8-cd78-4a91-83db-685e2d8e22cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e0:53:93:c2:17:e5:63:7f:e4:ae:e1:28:dd: 81:53:d2:2f:17:8d:11:be:03:d8:6c:75:13:6d:eb: bf:01:ca:73:bc:ac:fa:de:d9:11:01:44:f0:c4:5e: d4:3f:57:7a:33:9d:83:40:62:80:f9:52:12:cc:b6: 46:56:68:b8:1b:26:b8:b7:e0:0f:a3:56:34:13:a9: fc:7f:1b:ed:4d:b3:ee:78:25:20:c2:d2:98:55:7a: 3f:18:d6:32:2e:ed:22:d9:76:87:f4:e7:4b:67:ef: b8:19:ee:42:52:22:f3:bb:3a:37:f7:28:a2:c3:5c: bc:41:59:0d:9a:12:24:c1:1d:85:0b:0a:b5:c8:b8: 50:f6:2e:ca:a6:6d:50:c9:d9:8f:0b:f9:34:d1:8a: f3:31:45:42:dd:28:31:bc:5f:2e:b4:f4:35:82:1f: c7:2f:66:69:d4:9f:9d:6b:5d:8b:6f:45:72:54:c1: df:79:e7:e4:e6:7c:f8:f3:70:36:83:d5:23:e7:2f: 66:25:47:dd:66:ae:06:33:07:54:c6:80:cb:ee:1d: c2:bb:ff:c2:2e:c4:68:7c:68:42:78:96:d7:b4:d8: 53:e6:07:c0:1d:af:85:be:64:15:1b:65:50:99:6a: 88:d2:09:34:26:5a:74:c4:9c:fc:6c:fa:11:6e:59: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CB:0D:B4:F5:3D:E5:A1:48:1D:9E:00:2A:F4:29:0D:02:A0:CF:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0ae7e89e-c4c8-3282-98a9-7f46af805675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 192.240.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:07:66:5c:36:1e:5e:29:c6:62:62:bd:be:42:66:8e:ed:a7: 84:6d:70:55:9b:26:40:ec:52:f0:ba:8b:b0:15:ba:32:c0:ef: 4e:a4:43:8d:c4:ca:e4:17:53:7b:48:9a:9d:a0:0b:08:5c:9c: 00:d3:bd:ba:72:1a:b2:d9:bb:6c:1e:2b:40:28:89:aa:69:19: 8a:e8:9b:69:66:44:52:36:ec:55:1e:58:03:b3:cd:34:cd:0b: d0:7b:62:8c:db:15:4c:8f:aa:8e:e5:c7:e6:e0:ed:12:29:24: 3d:f8:14:6f:e0:df:7f:99:5d:fa:90:e1:e5:0d:9a:2a:ce:6d: 04:50:c5:f4:fa:8a:56:85:34:28:1e:94:99:6c:51:1a:55:f7: 8f:b7:2f:85:a5:e6:b8:e8:e3:32:24:c8:81:83:83:0d:9f:fb: be:15:32:83:30:28:14:c2:0c:63:7d:3f:c1:2b:ea:1d:ee:fd: 1a:21:d2:e6:11:5b:7a:72:63:07:b1:79:fa:53:17:68:1f:fc: b1:36:d1:69:3d:ab:a7:6c:56:4c:52:7c:d7:53:9c:5a:7d:c9: 4b:a0:e0:6e:a9:c9:fe:c6:ea:cf:e4:ac:43:09:da:8d:7b:b3: 90:89:fa:42:5c:e0:9f:93:96:08:36:b4:83:fc:8e:f4:f2:cd: 5e:cc:e2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqcvVAbyPsubfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2IwNDVjYzgtY2Q3OC00YTkxLTgzZGItNjg1ZTJkOGUyMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+BTk8IX5WN/5K7hKN2BU9IvF40RvgPYbHUT beu/AcpzvKz63tkRAUTwxF7UP1d6M52DQGKA+VISzLZGVmi4Gya4t+APo1Y0E6n8 fxvtTbPueCUgwtKYVXo/GNYyLu0i2XaH9OdLZ++4Ge5CUiLzuzo39yiiw1y8QVkN mhIkwR2FCwq1yLhQ9i7Kpm1QydmPC/k00YrzMUVC3SgxvF8utPQ1gh/HL2Zp1J+d a12Lb0VyVMHfeefk5nz483A2g9Uj5y9mJUfdZq4GMwdUxoDL7h3Cu//CLsRofGhC eJbXtNhT5gfAHa+FvmQVG2VQmWqI0gk0Jlp0xJz8bPoRblnd1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7LDbT1PeWhSB2eACr0KQ0CoM/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMGFlN2U4OWUtYzRjOC0z MjgyLTk4YTktN2Y0NmFmODA1Njc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPDKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUHZlw2Hl4pxmJivb5CZo7tp4RtcFWbJkDsUvC6i7AVujLA706kQ43E yuQXU3tImp2gCwhcnADTvbpyGrLZu2weK0AoiappGYrom2lmRFI27FUeWAOzzTTN C9B7YozbFUyPqo7lx+bg7RIpJD34FG/g33+ZXfqQ4eUNmirObQRQxfT6ilaFNCge lJlsURpV94+3L4Wl5rjo4zIkyIGDgw2f+74VMoMwKBTCDGN9P8Er6h3u/Roh0uYR W3pyYwexefpTF2gf/LE20Wk9q6dsVkxSfNdTnFp9yUug4G6pyf7G6s/krEMJ2o17 s5CJ+kJc4J+Tlgg2tIP8jvTyzV7M4jg= -----END CERTIFICATE-----Generated at Fri Sep 25 06:47:56 2026 by rpki-client