$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/686b3f19-c26c-333c-8bcc-8471f7116392.roa File: 686b3f19-c26c-333c-8bcc-8471f7116392.roa (raw, json) Hash identifier: pD8z4Xy+uVBLDiW+IMlZVxCl6uVmAlIT8LPYUL9729U= Subject key identifier: 31:6C:43:62:E5:87:1C:62:97:4D:04:20:2F:2A:F4:9B:5C:50:1A:D5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7DFA9B706A84319EB1BF0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/686b3f19-c26c-333c-8bcc-8471f7116392.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.179.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:df:a9:b7:06:a8:43:19:eb:1b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=86f798cc-1bb3-4fad-b99f-37bf853d6b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:37:9b:af:da:6a:63:e9:93:08:b9:c6:e5: a3:9f:e2:5f:0e:a0:81:cf:e4:21:b6:ec:11:ec:80: 88:f5:63:dc:7a:fa:e5:52:94:c6:e8:a7:23:78:59: a0:9c:b5:c6:67:99:17:60:73:67:11:4f:bb:5b:93: de:6f:66:e9:c5:8d:0f:7b:84:b6:db:24:9c:2a:73: ad:bf:dd:f7:a7:49:8d:ba:08:5b:f4:db:01:4f:cb: be:ac:40:f2:e0:21:74:a2:28:a4:ed:47:e5:2f:cd: d2:31:c6:a2:44:08:d2:45:46:8b:0a:b1:1f:37:22: 90:b1:53:71:df:e7:2e:44:5d:cd:40:cf:1a:4b:45: a6:a7:ae:0a:f7:43:58:3b:d4:ae:ef:a4:93:e8:de: b2:16:ea:63:6a:47:77:88:46:06:ce:fd:c4:86:12: 0d:5f:d5:e9:fe:b0:d8:8b:cd:fb:22:f4:dc:7e:5b: 8f:5c:f9:15:a7:17:ae:d6:64:07:0a:13:57:ea:ea: b8:62:ca:58:b9:60:87:79:16:dd:88:d4:17:7e:cc: eb:d8:8a:ee:bc:5c:9a:7f:a9:f4:3f:f3:2f:22:a9: 2a:2d:e5:3e:f4:3e:47:c3:73:55:8e:ad:9c:be:13: 92:68:fb:8f:ff:a5:4b:21:44:d2:59:c9:3d:22:0d: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6C:43:62:E5:87:1C:62:97:4D:04:20:2F:2A:F4:9B:5C:50:1A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/686b3f19-c26c-333c-8bcc-8471f7116392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.179.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:19:eb:08:d0:b9:fd:5a:54:52:a6:49:eb:e5:ea:34:17:36: 0d:dc:65:9e:7b:99:d3:e9:a9:29:1e:47:f4:39:95:29:bd:18: 36:9b:f5:57:a9:ef:03:f3:59:60:f0:85:4e:33:54:6b:ef:39: c5:5b:12:a0:19:48:ce:e4:c0:c1:b3:16:77:40:f5:5b:fb:55: c1:35:1f:a0:78:68:25:e3:1b:d0:8d:98:de:90:00:36:97:77: 50:b6:9b:6c:49:60:56:5c:3d:23:18:ea:9f:49:03:97:e1:c4: 1e:2d:1b:c2:56:36:ee:d8:60:53:3f:0d:12:b9:d1:9e:ff:76: 44:50:3b:02:af:88:95:f9:ae:8a:22:08:df:5a:7b:b6:45:b7: 5a:f1:b4:80:54:d2:6c:a0:36:8e:41:14:6a:c3:33:23:2a:20: 70:af:d9:db:ac:50:ee:c4:59:19:c0:e0:48:74:00:34:af:ef: 23:c0:fe:de:14:50:b3:0a:87:65:0c:2b:55:39:9c:96:6c:86: c5:0c:e8:95:f7:b2:78:10:3a:1f:be:d4:b1:f2:9f:3f:99:ae: 0e:a4:10:06:18:f1:77:59:4e:8b:d8:33:5c:97:69:a0:d0:58: 70:7c:c0:f4:7a:5d:64:a2:02:c5:b6:19:f9:53:50:c4:2c:b9: 0e:f5:94:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp9+ptwaoQxnrG/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk ODZmNzk4Y2MtMWJiMy00ZmFkLWI5OWYtMzdiZjg1M2Q2YjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ03m6/aamPpkwi5xuWjn+JfDqCBz+QhtuwR 7ICI9WPcevrlUpTG6KcjeFmgnLXGZ5kXYHNnEU+7W5Peb2bpxY0Pe4S22yScKnOt v933p0mNughb9NsBT8u+rEDy4CF0oiik7UflL83SMcaiRAjSRUaLCrEfNyKQsVNx 3+cuRF3NQM8aS0Wmp64K90NYO9Su76ST6N6yFupjakd3iEYGzv3EhhINX9Xp/rDY i837IvTcfluPXPkVpxeu1mQHChNX6uq4YspYuWCHeRbdiNQXfszr2IruvFyaf6n0 P/MvIqkqLeU+9D5Hw3NVjq2cvhOSaPuP/6VLIUTSWck9Ig2TKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFsQ2Llhxxil00EIC8q9JtcUBrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjg2YjNmMTktYzI2Yy0z MzNjLThiY2MtODQ3MWY3MTE2MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwZ6wjQuf1aVFKmSevl6jQXNg3cZZ57mdPpqSkeR/Q5lSm9GDab9Vep 7wPzWWDwhU4zVGvvOcVbEqAZSM7kwMGzFndA9Vv7VcE1H6B4aCXjG9CNmN6QADaX d1C2m2xJYFZcPSMY6p9JA5fhxB4tG8JWNu7YYFM/DRK50Z7/dkRQOwKviJX5rooi CN9ae7ZFt1rxtIBU0mygNo5BFGrDMyMqIHCv2dusUO7EWRnA4Eh0ADSv7yPA/t4U ULMKh2UMK1U5nJZshsUM6JX3sngQOh++1LHynz+Zrg6kEAYY8XdZTovYM1yXaaDQ WHB8wPR6XWSiAsW2GflTUMQsuQ71lM8= -----END CERTIFICATE-----Generated at Thu Sep 24 15:42:54 2026 by rpki-client