$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/12de3ecc-dfba-38c1-9756-105d0807ea21.roa File: 12de3ecc-dfba-38c1-9756-105d0807ea21.roa (raw, json) Hash identifier: t9BGFBXMEXYA4O5Qycw7GvPnebsSGO/gMUUsUwfR2wQ= Subject key identifier: 4B:B1:AB:67:C9:BE:7E:AB:7E:7A:9E:A4:B3:33:6A:ED:04:43:57:42 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584F4972A8C78279E6A03EF9F880 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/12de3ecc-dfba-38c1-9756-105d0807ea21.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20454 IP address blocks: 192.240.236.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a8:c7:82:79:e6:a0:3e:f9:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5e1eae82-84f1-4969-836b-36c85fe0304f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:31:8b:79:03:88:d6:73:84:bc:c3:ce:28:66: d2:df:9b:23:bc:56:db:6d:fb:92:da:7d:a6:90:e7: 37:60:d3:3d:0e:04:66:cc:bd:75:a7:1f:33:af:85: 9a:b9:95:71:d9:cf:45:31:3a:50:46:b9:c6:27:eb: 1b:ac:01:51:9f:16:71:f4:59:41:4e:c4:c9:43:17: 27:b7:1b:40:66:09:c6:de:af:c5:a0:7b:82:5f:78: 8d:0f:89:35:d5:20:32:d8:56:fc:4d:63:62:8f:23: 8c:36:77:82:33:bc:51:80:2b:cc:8c:08:08:60:b4: d1:ac:ad:8e:7f:e9:0d:c7:03:bb:a9:01:97:34:bf: cb:c6:3c:a8:f7:4a:21:a8:a0:78:75:a1:5e:d4:92: f5:45:46:30:b8:0e:49:4e:c2:66:76:81:25:95:3e: 44:31:a8:cd:79:b3:c8:f6:67:55:3c:f9:31:3d:75: f2:25:15:a7:e0:4b:56:7d:04:eb:37:58:2d:a2:cc: 3d:e5:29:22:72:e1:93:d2:fb:01:a6:01:1b:1f:85: 14:8c:1c:c9:81:fc:69:a8:23:1f:cd:18:56:ff:03: 55:7f:35:6c:e9:7c:16:8b:ea:8f:0f:d1:a8:59:5f: 9e:0c:a0:01:db:d1:98:8e:07:34:65:4e:e4:cb:86: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B1:AB:67:C9:BE:7E:AB:7E:7A:9E:A4:B3:33:6A:ED:04:43:57:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/12de3ecc-dfba-38c1-9756-105d0807ea21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 192.240.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a3:2b:8c:07:b3:72:29:8e:f4:89:89:d9:ee:67:54:e2:70: b5:78:0b:f7:e5:58:01:47:ef:69:68:2b:fa:8e:a3:91:24:b8: e6:ca:a3:12:07:46:04:cd:02:b1:06:39:50:d6:d7:3c:0e:b0: 54:c2:c8:6f:ef:9d:05:bd:95:2e:6a:99:1b:fa:3f:2f:79:3a: 77:dc:2b:48:fe:ea:69:6d:1a:df:31:4e:60:50:21:82:59:06: 4f:cc:e0:cf:cf:40:67:90:8c:0d:8b:c1:d6:76:06:13:8e:f1: 60:5a:f9:a8:d6:6c:d8:78:4b:91:19:b8:18:5a:c2:f7:b0:42: 9d:20:44:e3:c9:28:44:97:2a:cb:8a:34:37:0c:90:20:26:1f: 95:ce:f2:57:02:cd:b6:3e:1e:33:0d:fc:9f:9f:17:a4:bf:a0: 6b:94:26:af:a3:ed:95:91:9e:dd:7c:dd:e9:1b:99:40:25:7f: 13:f3:f6:d1:44:59:bc:7e:ce:8c:7e:12:dd:0a:f0:b5:fd:20: f0:05:3b:31:fe:62:39:7f:3c:b6:ce:a8:54:6f:3c:c9:20:4d: e1:dd:27:eb:a2:1a:ae:25:24:79:09:4c:14:50:ce:57:af:2f: 6c:31:a6:3d:28:ca:45:f3:50:8e:60:ce:d3:bd:74:b9:10:08: 49:78:6b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqjHgnnmoD75+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWUxZWFlODItODRmMS00OTY5LTgzNmItMzZjODVmZTAzMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTGLeQOI1nOEvMPOKGbS35sjvFbbbfuS2n2m kOc3YNM9DgRmzL11px8zr4WauZVx2c9FMTpQRrnGJ+sbrAFRnxZx9FlBTsTJQxcn txtAZgnG3q/FoHuCX3iND4k11SAy2Fb8TWNijyOMNneCM7xRgCvMjAgIYLTRrK2O f+kNxwO7qQGXNL/Lxjyo90ohqKB4daFe1JL1RUYwuA5JTsJmdoEllT5EMajNebPI 9mdVPPkxPXXyJRWn4EtWfQTrN1gtosw95SkicuGT0vsBpgEbH4UUjBzJgfxpqCMf zRhW/wNVfzVs6XwWi+qPD9GoWV+eDKAB29GYjgc0ZU7ky4Y91QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuxq2fJvn6rfnqepLMzau0EQ1dCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMTJkZTNlY2MtZGZiYS0z OGMxLTk3NTYtMTA1ZDA4MDdlYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwPDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKjK4wHs3IpjvSJidnuZ1TicLV4C/flWAFH72loK/qOo5EkuObKoxIH RgTNArEGOVDW1zwOsFTCyG/vnQW9lS5qmRv6Py95OnfcK0j+6mltGt8xTmBQIYJZ Bk/M4M/PQGeQjA2LwdZ2BhOO8WBa+ajWbNh4S5EZuBhawvewQp0gROPJKESXKsuK NDcMkCAmH5XO8lcCzbY+HjMN/J+fF6S/oGuUJq+j7ZWRnt183ekbmUAlfxPz9tFE Wbx+zox+Et0K8LX9IPAFOzH+Yjl/PLbOqFRvPMkgTeHdJ+uiGq4lJHkJTBRQzlev L2wxpj0oykXzUI5gztO9dLkQCEl4a40= -----END CERTIFICATE-----Generated at Fri Sep 25 20:07:49 2026 by rpki-client