$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/644ae9fb-b4c9-3ea9-8945-5e8089b2a807.roa File: 644ae9fb-b4c9-3ea9-8945-5e8089b2a807.roa (raw, json) Hash identifier: BonTpCFIflJeecJHfQQkzfO8b/G1GzeleR8cYeCUORk= Subject key identifier: 8D:19:E1:57:0F:48:51:59:56:EA:6A:1D:5E:B3:4B:03:30:C9:34:53 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584DA28019DD3E33A4C409B24C10 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/644ae9fb-b4c9-3ea9-8945-5e8089b2a807.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 19437 IP address blocks: 192.240.198.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:19:dd:3e:33:a4:c4:09:b2:4c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=ee4a08e5-aca3-4c29-a501-9314a5d6eb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:79:93:12:fe:71:d7:a9:86:2b:91:8e:7e: 34:cc:26:f3:3e:46:32:1e:03:da:d6:b0:58:ab:5c: b1:ef:c7:89:4f:7b:b7:22:d2:da:bf:56:96:0c:81: 91:50:4d:61:54:19:7d:b4:cd:85:82:ed:6f:e3:64: b0:ac:58:e8:d7:e2:1c:42:59:d4:b1:f3:2b:2e:81: e3:4c:60:55:c1:73:0d:49:88:1a:6c:3b:7d:8d:75: 6e:58:b6:53:98:95:86:c3:ad:39:39:3d:0a:92:94: 77:c3:04:9c:47:62:de:34:4a:0a:ba:9c:c5:98:dc: 76:72:77:b2:61:23:a8:1a:12:2e:77:6f:6c:af:8d: 7e:6e:7e:a1:6e:1e:9a:6e:0d:f9:2a:98:42:df:5d: f2:17:dc:f2:3e:2b:d4:85:e1:ec:2c:e1:1e:dd:2a: f5:b3:d7:43:33:c0:5e:5b:ee:c7:cc:15:d5:2f:20: 68:3d:26:25:09:75:7b:ba:78:56:8e:99:41:db:04: 39:d9:ca:0f:e3:07:e2:6d:0f:3a:0f:3f:cf:3f:ea: 7b:ce:d9:72:97:b3:81:8e:43:04:20:2a:28:2c:38: f9:99:ab:ea:1a:ba:64:6f:1c:47:e8:6a:33:ee:a5: d2:70:6d:11:e4:1b:db:66:d3:9b:3a:b8:0b:83:d7: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:19:E1:57:0F:48:51:59:56:EA:6A:1D:5E:B3:4B:03:30:C9:34:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/644ae9fb-b4c9-3ea9-8945-5e8089b2a807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 192.240.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:80:78:2f:9a:e9:b3:c2:c1:e2:df:91:61:7d:14:42:ff:eb: 74:36:ab:d3:a3:a5:75:60:16:70:0f:ba:02:0d:95:cc:9c:28: a4:dd:96:6d:05:d1:03:42:89:ea:b6:7d:ac:1d:05:0b:8e:5a: 88:d3:1d:d1:38:26:f1:e8:15:58:7f:c1:86:30:b5:a2:16:5d: c3:df:66:97:6b:1b:87:1f:a8:f7:f2:29:8e:81:b1:30:3d:fb: dc:66:99:98:4c:98:fa:73:81:cb:b8:26:7d:fe:9c:b7:b6:b6: 07:0d:f2:da:e9:d1:d0:a9:8a:47:e7:f9:3c:3b:f9:c9:1c:c5: c5:b6:a7:1f:49:93:81:06:8e:11:60:13:8f:e0:17:6c:57:0d: a6:d7:a4:48:35:b8:17:8f:42:dd:6b:39:7f:71:8e:47:4f:04: 73:2a:ac:51:15:03:7d:3c:3b:d4:65:63:98:ee:21:ae:3b:93: 45:50:01:24:e0:af:70:8e:36:10:ba:41:8e:d7:6a:81:6d:f8: 8a:7e:64:1a:43:72:c9:0b:99:ad:9b:07:96:15:95:88:69:d9: fa:59:dc:39:12:7a:f8:8e:e8:ba:c0:a0:59:39:5c:8d:cc:98: 94:44:e1:86:8b:8f:db:e0:0e:98:e7:24:ad:dc:18:bc:ac:37: 04:d8:03:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2igBndPjOkxAmyTBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk ZWU0YTA4ZTUtYWNhMy00YzI5LWE1MDEtOTMxNGE1ZDZlYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNl5kxL+cdephiuRjn40zCbzPkYyHgPa1rBY q1yx78eJT3u3ItLav1aWDIGRUE1hVBl9tM2Fgu1v42SwrFjo1+IcQlnUsfMrLoHj TGBVwXMNSYgabDt9jXVuWLZTmJWGw605OT0KkpR3wwScR2LeNEoKupzFmNx2cney YSOoGhIud29sr41+bn6hbh6abg35KphC313yF9zyPivUheHsLOEe3Sr1s9dDM8Be W+7HzBXVLyBoPSYlCXV7unhWjplB2wQ52coP4wfibQ86Dz/PP+p7ztlyl7OBjkME ICooLDj5mavqGrpkbxxH6Goz7qXScG0R5BvbZtObOrgLg9f7eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0Z4VcPSFFZVupqHV6zSwMwyTRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNjQ0YWU5ZmItYjRjOS0z ZWE5LTg5NDUtNWU4MDg5YjJhODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+AeC+a6bPCweLfkWF9FEL/63Q2q9OjpXVgFnAPugINlcycKKTdlm0F 0QNCieq2fawdBQuOWojTHdE4JvHoFVh/wYYwtaIWXcPfZpdrG4cfqPfyKY6BsTA9 +9xmmZhMmPpzgcu4Jn3+nLe2tgcN8trp0dCpikfn+Tw7+ckcxcW2px9Jk4EGjhFg E4/gF2xXDabXpEg1uBePQt1rOX9xjkdPBHMqrFEVA308O9RlY5juIa47k0VQASTg r3CONhC6QY7XaoFt+Ip+ZBpDcskLma2bB5YVlYhp2fpZ3DkSeviO6LrAoFk5XI3M mJRE4YaLj9vgDpjnJK3cGLysNwTYA8Y= -----END CERTIFICATE-----Generated at Wed May 13 06:27:34 2026 by rpki-client