$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a32eae39-94aa-37fa-bd74-50b883837770.roa File: a32eae39-94aa-37fa-bd74-50b883837770.roa (raw, json) Hash identifier: Nn9ZyL52Th8kixYlz3rq19zrU91m6tL2670KLM9wGtQ= Subject key identifier: 85:C6:F3:EC:C7:0B:82:6A:F5:83:36:8A:A1:14:91:58:8E:22:8A:78 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584F5E62EB184E897B590383EA40 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a32eae39-94aa-37fa-bd74-50b883837770.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 19637 IP address blocks: 192.19.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:eb:18:4e:89:7b:59:03:83:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=ad0c1d67-68a1-4988-b9d2-5e37b4318d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ae:f7:98:a0:42:25:01:2c:41:fa:db:55:6a: 4b:d4:f0:c7:9a:e0:ed:ce:05:f3:84:97:b0:45:d0: ff:e3:b7:18:4b:89:87:f7:15:1f:86:eb:5f:db:a2: 1f:e5:f8:74:19:18:32:6d:ed:1b:56:0d:a1:40:27: d2:40:a3:23:9a:f5:1c:3a:ba:f8:d1:e5:47:50:dc: 12:c2:0b:d0:e6:da:74:d0:46:f0:b9:20:d0:56:10: 86:ba:e4:2d:d5:e8:55:2c:38:bd:d0:30:54:50:55: 88:cb:d4:23:02:00:ff:a4:d4:c8:39:54:5a:a3:2b: 1b:12:06:18:52:8a:59:8b:45:1b:76:83:6c:77:b1: 07:3c:cc:f1:86:b9:b2:bd:d1:32:86:aa:11:c3:f1: f0:7d:2c:fd:09:dd:38:b6:11:db:31:be:b9:6c:e6: 28:93:41:dd:8c:1e:1c:d0:e0:48:79:34:51:32:7a: 3e:96:22:16:e4:b3:d0:cd:43:ab:cb:85:38:ee:03: 4b:79:fb:5e:16:cf:f3:06:12:3d:28:8a:db:f6:53: 9d:0d:fc:b8:80:dc:e8:f1:fd:83:25:38:ff:6d:ad: ae:f4:17:c1:9f:87:19:71:6b:d9:25:95:a5:7e:47: cc:0a:70:66:e8:13:c3:6f:11:cc:1f:09:45:e8:84: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C6:F3:EC:C7:0B:82:6A:F5:83:36:8A:A1:14:91:58:8E:22:8A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a32eae39-94aa-37fa-bd74-50b883837770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:08:4a:8a:d1:ac:5f:ff:41:f1:28:fb:55:17:3f:ca:60:5c: e1:7d:5c:61:01:6a:f5:b1:1e:5d:da:66:1b:ad:8c:ee:3f:ad: cd:c6:ca:ce:e3:34:c9:d3:91:a4:fc:20:69:a8:35:7b:85:77: 63:64:7b:66:25:96:29:b5:7e:f2:32:0f:ab:d5:3b:f6:7f:04: f0:f5:27:ed:1e:f9:9b:07:bc:2c:07:5a:f8:56:ea:94:4c:f3: 1f:89:7c:24:34:58:80:2a:88:1c:e0:b6:db:f7:b9:3d:e6:fb: 83:41:bd:86:99:06:7c:57:ba:d0:ca:24:57:7c:26:8d:04:75: 22:ab:6e:97:b1:d4:92:db:a3:88:76:77:5b:14:3c:a9:f6:4e: dd:65:10:93:7c:0c:90:de:c4:18:0d:f0:71:77:d1:f4:2c:f4: 71:07:04:46:c8:2d:ec:db:66:02:68:6f:e6:b0:21:f0:96:72: 1d:40:51:0a:7b:0d:cb:b9:b2:15:67:0e:96:37:02:44:2d:3f: 13:9b:0c:a7:1f:c3:67:3d:6f:fb:45:31:0e:63:7c:5e:65:16: 8d:90:ed:05:ba:f5:08:ba:06:41:69:be:4c:a0:be:7f:19:53: 14:aa:56:59:93:d3:e9:ec:c7:d0:e2:76:69:d9:00:67:e5:88: fa:82:0f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYusYTol7WQOD6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YWQwYzFkNjctNjhhMS00OTg4LWI5ZDItNWUzN2I0MzE4ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl673mKBCJQEsQfrbVWpL1PDHmuDtzgXzhJew RdD/47cYS4mH9xUfhutf26If5fh0GRgybe0bVg2hQCfSQKMjmvUcOrr40eVHUNwS wgvQ5tp00EbwuSDQVhCGuuQt1ehVLDi90DBUUFWIy9QjAgD/pNTIOVRaoysbEgYY UopZi0UbdoNsd7EHPMzxhrmyvdEyhqoRw/HwfSz9Cd04thHbMb65bOYok0HdjB4c 0OBIeTRRMno+liIW5LPQzUOry4U47gNLefteFs/zBhI9KIrb9lOdDfy4gNzo8f2D JTj/ba2u9BfBn4cZcWvZJZWlfkfMCnBm6BPDbxHMHwlF6IRS0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXG8+zHC4Jq9YM2iqEUkViOIop4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYTMyZWFlMzktOTRhYS0z N2ZhLWJkNzQtNTBiODgzODM3NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEISorRrF//QfEo+1UXP8pgXOF9XGEBavWxHl3aZhutjO4/rc3Gys7j NMnTkaT8IGmoNXuFd2Nke2Yllim1fvIyD6vVO/Z/BPD1J+0e+ZsHvCwHWvhW6pRM 8x+JfCQ0WIAqiBzgttv3uT3m+4NBvYaZBnxXutDKJFd8Jo0EdSKrbpex1JLbo4h2 d1sUPKn2Tt1lEJN8DJDexBgN8HF30fQs9HEHBEbILezbZgJob+awIfCWch1AUQp7 Dcu5shVnDpY3AkQtPxObDKcfw2c9b/tFMQ5jfF5lFo2Q7QW69Qi6BkFpvkygvn8Z UxSqVlmT0+nsx9DidmnZAGfliPqCD3c= -----END CERTIFICATE-----Generated at Sun Oct 11 07:06:55 2026 by rpki-client