$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa File: a98d5494-4572-385b-afc9-1ffafc221b11.roa (raw, json) Hash identifier: gTUq/mMwCDAWu+gWyIhETQkFdXpRniX/6NFbAwncoTA= Subject key identifier: 6E:12:E8:B1:C5:C7:2C:E1:E1:12:67:F9:A6:8F:50:5F:E1:0D:3B:14 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584F119CE94838DA70C6918E5200 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396954 IP address blocks: 192.88.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e9:48:38:da:70:c6:91:8e:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f164ada8-7b1d-4c02-8bcd-83068374679c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:85:87:1f:c3:23:e1:05:49:fd:a4:d8:86:04: b5:aa:fe:95:48:d2:21:a9:02:f9:15:cc:5e:95:39: 1a:ee:1a:a3:d8:cd:0f:74:82:2b:91:65:5a:8e:b0: 11:bd:7b:50:96:65:db:6a:c5:74:25:40:1f:9f:76: 9f:de:59:31:27:73:9b:41:e9:54:fd:5e:73:1a:bf: f4:7e:da:9d:7c:f5:2e:60:0d:3c:61:e2:4b:e1:25: 61:99:c5:67:68:cc:df:80:c0:5d:74:72:4f:f8:61: 98:eb:24:ee:04:ab:b1:8b:1f:a0:79:41:c4:0e:61: 7e:c2:88:d0:4c:5a:92:9d:e9:3f:5f:66:7d:56:56: 0e:cb:06:d2:b7:83:d4:2d:bc:97:a8:d0:66:27:9c: e4:61:92:c9:e0:13:19:38:51:f5:b4:e2:a2:42:7d: bb:ac:fc:f1:3c:65:80:9c:ca:f6:e9:90:72:c4:91: 3e:de:c3:ce:64:55:80:fa:2f:00:66:c3:04:7f:9c: b9:62:8f:7e:e9:53:c8:c4:20:70:73:fc:b3:59:05: a1:95:7a:fb:a8:67:0d:9c:ab:ca:58:2d:19:95:78: 12:55:3f:1d:ca:74:e3:e0:e2:eb:f9:d0:cf:c2:e7: dc:4e:b6:de:55:46:83:09:21:2e:27:91:91:71:6e: c3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:12:E8:B1:C5:C7:2C:E1:E1:12:67:F9:A6:8F:50:5F:E1:0D:3B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 192.88.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:46:d9:cb:06:5f:f4:27:45:6e:3b:8d:69:c2:79:7a:ed:10: 3b:b3:54:49:60:04:4a:aa:6a:6c:1f:b6:0e:1d:30:22:35:5a: 2d:3a:2b:12:67:6f:f0:e1:b5:e6:d6:41:5b:8e:ee:d0:c4:c0: 10:70:54:2c:20:a5:e1:bb:47:26:5c:cb:0b:fd:f3:bb:43:64: a8:99:48:1c:d5:f4:2c:7c:2e:62:63:2c:17:d8:7e:c0:1a:59: 87:1b:d0:68:39:e1:09:73:eb:c1:bb:fb:27:96:73:06:08:33: bf:41:70:fd:0f:8a:b2:36:04:9b:d8:9e:73:be:bf:51:f3:b4: 07:61:c1:64:88:84:d8:1f:42:a1:a6:f0:10:22:57:ae:16:08: d3:f5:22:33:28:57:9b:52:47:e6:91:55:05:14:d6:41:c3:f5: c1:fc:fc:e4:ab:80:c0:c5:e4:74:75:42:89:f3:e5:31:70:41: b5:bc:08:69:e5:ad:39:b3:6c:26:4c:52:91:9c:52:70:3a:f3: 1a:6e:51:39:c3:f4:26:c9:0a:21:55:d3:46:87:e4:1c:0c:20: 2c:d0:96:03:49:50:96:61:86:fa:f2:13:36:20:22:56:51:94: 03:6d:a1:84:d0:26:7b:6a:55:0f:e5:05:ea:71:92:72:a7:81: 1b:34:49:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOlIONpwxpGOUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjE2NGFkYTgtN2IxZC00YzAyLThiY2QtODMwNjgzNzQ2NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIWHH8Mj4QVJ/aTYhgS1qv6VSNIhqQL5Fcxe lTka7hqj2M0PdIIrkWVajrARvXtQlmXbasV0JUAfn3af3lkxJ3ObQelU/V5zGr/0 ftqdfPUuYA08YeJL4SVhmcVnaMzfgMBddHJP+GGY6yTuBKuxix+geUHEDmF+wojQ TFqSnek/X2Z9VlYOywbSt4PULbyXqNBmJ5zkYZLJ4BMZOFH1tOKiQn27rPzxPGWA nMr26ZByxJE+3sPOZFWA+i8AZsMEf5y5Yo9+6VPIxCBwc/yzWQWhlXr7qGcNnKvK WC0ZlXgSVT8dynTj4OLr+dDPwufcTrbeVUaDCSEuJ5GRcW7DuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4S6LHFxyzh4RJn+aaPUF/hDTsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvYTk4ZDU0OTQtNDU3Mi0z ODViLWFmYzktMWZmYWZjMjIxYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFjNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBG2csGX/QnRW47jWnCeXrtEDuzVElgBEqqamwftg4dMCI1Wi06KxJn b/DhtebWQVuO7tDEwBBwVCwgpeG7RyZcywv987tDZKiZSBzV9Cx8LmJjLBfYfsAa WYcb0Gg54Qlz68G7+yeWcwYIM79BcP0PirI2BJvYnnO+v1HztAdhwWSIhNgfQqGm 8BAiV64WCNP1IjMoV5tSR+aRVQUU1kHD9cH8/OSrgMDF5HR1Qonz5TFwQbW8CGnl rTmzbCZMUpGcUnA68xpuUTnD9CbJCiFV00aH5BwMICzQlgNJUJZhhvryEzYgIlZR lANtoYTQJntqVQ/lBepxknKngRs0Sf0= -----END CERTIFICATE-----Generated at Mon Sep 21 21:19:03 2026 by rpki-client