$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/28449481-c71c-3a24-af9d-e4fce8ee2201.roa File: 28449481-c71c-3a24-af9d-e4fce8ee2201.roa (raw, json) Hash identifier: zhfOBnJIM+4NJXLNHdqeEofHTc150hX8eHWtuowPhFE= Subject key identifier: 1A:D8:65:B0:7A:C5:49:C5:BB:A1:D1:70:2D:89:CE:99:2F:57:C8:34 Certificate issuer: /CN=9b2dd4d6-06da-4602-9071-aee92968f31a Certificate serial: 010D0C9F4328584F3E47C8C0133D65B808796D80 Authority key identifier: 86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/28449481-c71c-3a24-af9d-e4fce8ee2201.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 154132 IP address blocks: 169.128.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:c8:c0:13:3d:65:b8:08:79:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2dd4d6-06da-4602-9071-aee92968f31a Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=c4359b95-1445-4cae-8d71-2f40ddd8c33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:36:f4:1d:02:55:1f:bd:ab:1e:25:58:ae: ac:48:37:90:7f:35:a1:ba:80:a4:41:e4:62:1c:eb: f6:c5:5a:0b:58:f9:90:88:5d:3b:60:5a:a4:10:46: 74:f4:d7:54:5f:59:c1:a0:53:c1:4f:f1:3d:ab:c9: 24:63:b3:27:1a:8c:00:21:c0:e1:c0:98:ff:80:bb: 2a:1d:57:f1:ad:97:5c:49:c6:f8:fb:13:ba:90:5d: 22:52:62:a3:5a:c8:26:18:7e:3e:f2:20:12:ff:13: 61:35:87:30:e1:1d:e0:d4:1a:b8:b4:5b:86:fe:1c: 36:bc:82:f3:bc:47:85:9f:49:43:17:09:95:7f:6c: 6f:dc:b3:65:f5:8d:7d:ac:64:6f:a4:be:b0:6d:ca: 26:75:98:6a:b3:91:47:f2:8d:47:9e:3e:fe:54:df: 0f:41:67:21:d4:aa:c5:9f:81:f5:c7:af:63:af:94: c0:9f:75:e9:e9:ed:2b:fb:c6:e4:26:14:07:90:4c: 09:2b:8e:8e:9b:de:7f:85:e8:d7:7e:a9:7d:60:dc: 93:60:f3:7b:2b:69:fd:00:dd:79:ae:c8:de:16:e7: 40:fb:da:05:18:57:be:4e:38:78:10:e8:2e:7d:85: f8:6c:31:0d:54:b6:63:b8:f1:44:af:7f:4b:c8:7e: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D8:65:B0:7A:C5:49:C5:BB:A1:D1:70:2D:89:CE:99:2F:57:C8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/28449481-c71c-3a24-af9d-e4fce8ee2201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl X509v3 Authority Key Identifier: keyid:86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer sbgp-ipAddrBlock: critical IPv4: 169.128.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a1:1e:15:09:ec:bd:09:46:00:b6:a3:b8:67:54:f2:96:e3: c3:e4:b7:c8:e3:68:c0:09:f1:15:ba:5c:dc:d5:53:a1:5b:4e: f4:c5:43:e8:34:27:16:ac:28:08:48:74:cf:07:bc:b4:68:ec: 53:ab:42:fa:92:b3:93:78:94:9b:b1:47:51:a9:03:de:27:d3: 9b:d4:0c:e6:5a:57:44:23:f0:ec:8a:74:86:2c:0d:a0:7b:b0: aa:fe:e2:18:56:55:78:e4:a1:95:e4:cc:82:08:9e:39:ab:73: 75:f4:8f:be:a6:fb:94:7e:b6:54:5d:a6:b4:4f:2e:31:57:be: 46:d8:96:22:1f:c8:62:79:97:83:7d:8e:09:17:9c:7e:2e:45: 9d:8d:84:1c:3c:09:28:2a:da:a7:b0:b0:cc:28:79:c3:5f:c0: 8e:f5:ec:5e:d8:50:b1:a8:3b:97:9d:c5:b3:60:8a:cf:ed:df: 47:fc:76:8e:b8:36:a9:b9:1d:50:5b:b9:9d:f7:32:d3:21:e0: 24:7d:84:38:4d:f6:85:d2:6e:d8:a0:9e:41:a0:1c:f9:06:54: 9a:ba:4a:cb:0b:80:89:76:8f:77:9a:87:69:b4:03:c2:48:70: bb:30:66:4a:62:0a:51:b0:6b:4e:0a:14:c7:69:8d:80:4f:75: a9:bc:1e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R8jAEz1luAh5bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyZGQ0ZDYtMDZkYS00NjAyLTkwNzEtYWVlOTI5Njhm MzFhMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YzQzNTliOTUtMTQ0NS00Y2FlLThkNzEtMmY0MGRkZDhjMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC429B0CVR+9qx4lWK6sSDeQfzWhuoCkQeRi HOv2xVoLWPmQiF07YFqkEEZ09NdUX1nBoFPBT/E9q8kkY7MnGowAIcDhwJj/gLsq HVfxrZdcScb4+xO6kF0iUmKjWsgmGH4+8iAS/xNhNYcw4R3g1Bq4tFuG/hw2vILz vEeFn0lDFwmVf2xv3LNl9Y19rGRvpL6wbcomdZhqs5FH8o1Hnj7+VN8PQWch1KrF n4H1x69jr5TAn3Xp6e0r+8bkJhQHkEwJK46Om95/hejXfql9YNyTYPN7K2n9AN15 rsjeFudA+9oFGFe+Tjh4EOgufYX4bDENVLZjuPFEr39LyH5+9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrYZbB6xUnFu6HRcC2JzpkvV8g0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjJk ZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5Mjk2OGYzMWEvMjg0NDk0ODEtYzcxYy0z YTI0LWFmOWQtZTRmY2U4ZWUyMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWIyZGQ0ZDYtMDZkYS00NjAyLTkw NzEtYWVlOTI5NjhmMzFhLzliMmRkNGQ2LTA2ZGEtNDYwMi05MDcxLWFlZTkyOTY4 ZjMxYS5jcmwwHwYDVR0jBBgwFoAUhttI55ulqKaIWlTVYBPNgnRyiYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjJkZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5 Mjk2OGYzMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYCJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHihHhUJ7L0JRgC2o7hnVPKW48Pkt8jjaMAJ8RW6XNzVU6FbTvTFQ+g0 JxasKAhIdM8HvLRo7FOrQvqSs5N4lJuxR1GpA94n05vUDOZaV0Qj8OyKdIYsDaB7 sKr+4hhWVXjkoZXkzIIInjmrc3X0j76m+5R+tlRdprRPLjFXvkbYliIfyGJ5l4N9 jgkXnH4uRZ2NhBw8CSgq2qewsMwoecNfwI717F7YULGoO5edxbNgis/t30f8do64 Nqm5HVBbuZ33MtMh4CR9hDhN9oXSbtignkGgHPkGVJq6SssLgIl2j3eah2m0A8JI cLswZkpiClGwa04KFMdpjYBPdam8Hj4= -----END CERTIFICATE-----Generated at Tue Sep 22 03:19:04 2026 by rpki-client