$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/9059b46b-72e7-3362-a9b8-d28bbe7bdf51.roa File: 9059b46b-72e7-3362-a9b8-d28bbe7bdf51.roa (raw, json) Hash identifier: mD6MJN1CcLi14jlGQMHsuhmGV+a/7Q4iVJspX1P9Bb0= Subject key identifier: 4D:2B:D3:4A:47:6F:07:5A:BE:66:D5:93:D4:3D:9C:D0:6F:6C:16:AD Certificate issuer: /CN=5eb9af5e-8450-4404-b673-e166c036c6a6 Certificate serial: 010D0C9F4328584F17324ACB9E322181EE2B10C0 Authority key identifier: C0:8E:21:FE:76:2E:26:16:57:10:BB:C0:9A:69:68:74:58:50:6B:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/9059b46b-72e7-3362-a9b8-d28bbe7bdf51.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 33669 IP address blocks: 192.136.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4a:cb:9e:32:21:81:ee:2b:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb9af5e-8450-4404-b673-e166c036c6a6 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=b50e5ed7-0f46-4fd6-9838-5f36ac75717f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:70:57:bb:09:87:2b:53:f1:70:df:e6:7a:77: 95:2d:6b:d3:09:65:f9:e3:f8:6d:a5:fc:6b:e6:f6: 6b:6d:91:e8:54:29:c7:7f:4c:99:14:6a:fe:ff:b8: e3:de:ea:82:2a:01:37:e0:2e:c4:7f:08:b6:50:44: 20:36:44:59:1b:62:73:09:f3:3b:15:a0:c5:1d:69: 14:86:c6:6c:dd:68:aa:ec:9e:18:2f:54:02:46:60: f0:0c:d9:6c:e0:30:b1:b2:af:1c:47:ee:10:04:9d: 10:cc:68:5f:f0:81:e1:8c:4d:c6:fd:34:c3:90:8e: 8b:4c:e1:aa:18:26:41:9a:db:8d:3f:cd:63:0d:a0: 13:ac:f5:c1:53:a5:55:47:b4:fb:3b:09:b0:b1:ad: 90:8e:84:7b:8a:01:bc:91:5a:7a:b5:25:32:ec:c9: 6b:8f:c2:c6:86:d1:60:4a:b2:a3:b1:64:3a:cc:9d: 37:8c:41:5a:1e:43:df:80:9d:1f:d7:82:59:82:e0: 9f:95:f7:18:e2:95:1d:1b:65:d0:04:f3:c5:ec:28: 01:43:47:e9:ee:ac:b6:4f:c3:21:2f:e8:4e:c4:76: b2:36:f7:d8:2c:74:f1:ee:78:4e:69:a0:9b:20:4f: 81:23:90:ca:5d:68:0a:8f:da:cc:16:65:b3:08:15: ce:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2B:D3:4A:47:6F:07:5A:BE:66:D5:93:D4:3D:9C:D0:6F:6C:16:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/9059b46b-72e7-3362-a9b8-d28bbe7bdf51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.crl X509v3 Authority Key Identifier: keyid:C0:8E:21:FE:76:2E:26:16:57:10:BB:C0:9A:69:68:74:58:50:6B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6.cer sbgp-ipAddrBlock: critical IPv4: 192.136.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:77:9c:ee:65:0e:d5:d1:f6:dc:33:9c:c0:d5:f5:dd:fb:d5: aa:3c:0f:a6:5f:33:93:a2:d3:4b:9b:db:0a:4f:75:44:1f:2b: f5:36:7e:d2:3f:58:59:65:b0:e7:06:38:ce:dc:99:75:a0:3d: ab:6a:45:35:ff:fb:28:9f:bb:0f:60:38:27:ba:58:75:4c:f9: ce:e0:52:65:71:6b:61:b0:fd:5e:a1:c4:f7:73:ed:ca:d3:10: 38:f1:ea:d0:93:c2:5a:ee:3c:4f:98:8d:3b:02:d5:a0:26:44: 97:46:df:10:06:43:c8:3d:8d:35:31:5a:73:f0:9d:d2:8e:74: 6d:34:52:21:2b:26:db:54:ea:e4:73:37:de:7e:ad:2f:6d:27: 44:29:ed:4a:22:74:23:bc:df:83:e6:80:fd:34:22:c2:3e:b3: ee:ce:22:8b:23:a5:56:55:a4:e2:84:65:41:41:ca:51:7f:8e: 4e:43:bd:4d:55:1e:60:c9:92:fb:89:05:ae:a1:6c:32:63:bc: 93:4c:2c:8a:36:2c:49:0e:c1:09:27:7c:25:4d:55:82:1c:4d: b4:e3:4e:25:f6:eb:3a:e1:b8:6c:06:d7:81:43:17:4d:00:37: 2a:00:8f:0a:83:16:d5:03:49:7f:fc:29:c6:b9:70:a4:3e:87: a4:88:56:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkrLnjIhge4rEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWViOWFmNWUtODQ1MC00NDA0LWI2NzMtZTE2NmMwMzZj NmE2MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk YjUwZTVlZDctMGY0Ni00ZmQ2LTk4MzgtNWYzNmFjNzU3MTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3BXuwmHK1PxcN/meneVLWvTCWX54/htpfxr 5vZrbZHoVCnHf0yZFGr+/7jj3uqCKgE34C7Efwi2UEQgNkRZG2JzCfM7FaDFHWkU hsZs3Wiq7J4YL1QCRmDwDNls4DCxsq8cR+4QBJ0QzGhf8IHhjE3G/TTDkI6LTOGq GCZBmtuNP81jDaATrPXBU6VVR7T7Owmwsa2QjoR7igG8kVp6tSUy7Mlrj8LGhtFg SrKjsWQ6zJ03jEFaHkPfgJ0f14JZguCflfcY4pUdG2XQBPPF7CgBQ0fp7qy2T8Mh L+hOxHayNvfYLHTx7nhOaaCbIE+BI5DKXWgKj9rMFmWzCBXO6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0r00pHbwdavmbVk9Q9nNBvbBatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZWI5 YWY1ZS04NDUwLTQ0MDQtYjY3My1lMTY2YzAzNmM2YTYvOTA1OWI0NmItNzJlNy0z MzYyLWE5YjgtZDI4YmJlN2JkZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWViOWFmNWUtODQ1MC00NDA0LWI2 NzMtZTE2NmMwMzZjNmE2LzVlYjlhZjVlLTg0NTAtNDQwNC1iNjczLWUxNjZjMDM2 YzZhNi5jcmwwHwYDVR0jBBgwFoAUwI4h/nYuJhZXELvAmmlodFhQa00wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZWI5YWY1ZS04NDUwLTQ0MDQtYjY3My1lMTY2 YzAzNmM2YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt3nO5lDtXR9twznMDV9d371ao8D6ZfM5Oi00ub2wpPdUQfK/U2ftI/ WFllsOcGOM7cmXWgPatqRTX/+yifuw9gOCe6WHVM+c7gUmVxa2Gw/V6hxPdz7crT EDjx6tCTwlruPE+YjTsC1aAmRJdG3xAGQ8g9jTUxWnPwndKOdG00UiErJttU6uRz N95+rS9tJ0Qp7UoidCO834PmgP00IsI+s+7OIosjpVZVpOKEZUFBylF/jk5DvU1V HmDJkvuJBa6hbDJjvJNMLIo2LEkOwQknfCVNVYIcTbTjTiX26zrhuGwG14FDF00A NyoAjwqDFtUDSX/8Kca5cKQ+h6SIVpU= -----END CERTIFICATE-----Generated at Wed Sep 23 15:33:42 2026 by rpki-client