$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa File: 5965b031-ef34-3104-aae4-6e476d645778.roa (raw, json) Hash identifier: O9yz4UUkGWG8UdP8nMmG0Wl2Dhr0kj54RLp2VI0KTAI= Subject key identifier: A3:27:BB:E3:27:FC:16:96:85:7A:38:20:22:E5:DA:DA:7D:2E:E6:7D Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F4328584F90A30B05EF3A05FC405A9680 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:0b:05:ef:3a:05:fc:40:5a:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=26f9ef23-6444-48ba-97cb-ac90a4e6e560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:07:d9:f7:22:fe:54:ae:81:03:8e:84:c8: 3a:14:eb:ae:00:b3:da:06:ec:ee:b4:69:a7:a4:64: 9a:7b:8e:7a:2b:cf:99:2d:c6:44:6e:1c:27:cb:b4: af:90:25:57:2e:ed:88:8d:98:d3:8a:49:d2:0e:65: e2:db:c9:40:e3:31:f3:5b:41:78:89:55:c9:ce:7d: c4:5c:93:94:27:7c:c4:c2:6f:eb:18:01:ae:65:0e: ac:9e:29:06:d0:3c:d5:14:41:ca:79:0e:98:1c:76: a1:93:7e:61:38:0c:66:b8:4b:5b:4c:a6:f7:12:f7: a0:8f:ef:b8:6a:12:f9:ff:e4:85:79:b2:f8:4b:fa: 7f:fc:ef:80:ae:da:15:d0:58:87:68:b1:00:65:f7: 56:1d:40:3d:41:bf:37:cc:52:57:0f:e0:17:6a:19: 2e:02:a8:2c:cb:1d:f1:cf:f7:71:ed:40:60:40:72: 51:16:a4:b5:ee:65:0a:14:e7:3f:98:c8:74:62:b2: 04:a8:d5:7d:65:f7:c7:6a:32:53:de:53:fa:8e:09: f5:f3:70:6c:ac:02:6f:6e:4c:ca:ed:d2:60:03:e6: 9f:d1:db:47:af:cd:6e:db:5d:6b:08:b4:c6:9a:5d: da:b8:fe:56:59:88:29:39:ff:81:39:f5:6d:4b:82: 03:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:27:BB:E3:27:FC:16:96:85:7A:38:20:22:E5:DA:DA:7D:2E:E6:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/5965b031-ef34-3104-aae4-6e476d645778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f0:13:1d:9a:84:50:4c:5f:6d:7c:83:3e:41:61:98:cc:03: 79:50:f7:17:8a:f1:f0:08:08:a3:97:6a:a5:25:02:97:80:df: 57:04:a2:4a:ee:4e:e1:24:aa:87:f2:69:e6:6d:c4:39:61:c8: 9b:4c:a9:f8:2a:8d:65:e3:2d:2a:a6:ab:63:1a:52:44:c2:fc: c6:75:8b:c3:67:50:72:af:e0:30:ea:3c:ca:7b:a7:a2:df:c6: 65:f0:06:ec:e1:c7:68:49:09:7e:1e:82:72:55:7b:27:78:a6: 43:71:fa:dd:22:e7:4f:ca:f4:de:c5:0d:00:9e:52:ad:f2:df: ea:d7:57:0a:65:80:ff:11:f1:d7:a9:3d:da:45:9c:13:1e:d0: 5a:e1:08:07:ff:dc:77:5f:fa:ed:17:c0:9d:d1:9d:cb:1f:77: e5:d3:5c:8b:1f:78:8e:b0:b9:94:10:25:3d:d7:92:51:8d:ad: 1f:97:2e:93:5b:7f:01:51:89:ea:37:27:0f:64:4c:38:e8:95: 9f:c6:1a:a6:c3:9e:a3:32:e3:87:bf:38:1c:bd:76:e9:4f:5a: 38:75:02:f6:a0:33:28:48:4c:0a:97:02:5d:30:78:26:da:27: e5:c4:8b:9a:04:51:4d:1b:ec:b6:d6:12:e4:31:83:bf:53:7d: d0:07:d2:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QowsF7zoF/EBaloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk MjZmOWVmMjMtNjQ0NC00OGJhLTk3Y2ItYWM5MGE0ZTZlNTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrYH2fci/lSugQOOhMg6FOuuALPaBuzutGmn pGSae456K8+ZLcZEbhwny7SvkCVXLu2IjZjTiknSDmXi28lA4zHzW0F4iVXJzn3E XJOUJ3zEwm/rGAGuZQ6snikG0DzVFEHKeQ6YHHahk35hOAxmuEtbTKb3Evegj++4 ahL5/+SFebL4S/p//O+ArtoV0FiHaLEAZfdWHUA9Qb83zFJXD+AXahkuAqgsyx3x z/dx7UBgQHJRFqS17mUKFOc/mMh0YrIEqNV9ZffHajJT3lP6jgn183BsrAJvbkzK 7dJgA+af0dtHr81u211rCLTGml3auP5WWYgpOf+BOfVtS4IDJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMnu+Mn/BaWhXo4ICLl2tp9LuZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvNTk2NWIwMzEtZWYzNC0z MTA0LWFhZTQtNmU0NzZkNjQ1Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTwEx2ahFBMX218gz5BYZjMA3lQ9xeK8fAICKOXaqUlApeA31cEokru TuEkqofyaeZtxDlhyJtMqfgqjWXjLSqmq2MaUkTC/MZ1i8NnUHKv4DDqPMp7p6Lf xmXwBuzhx2hJCX4egnJVeyd4pkNx+t0i50/K9N7FDQCeUq3y3+rXVwplgP8R8dep PdpFnBMe0FrhCAf/3Hdf+u0XwJ3Rncsfd+XTXIsfeI6wuZQQJT3XklGNrR+XLpNb fwFRieo3Jw9kTDjolZ/GGqbDnqMy44e/OBy9dulPWjh1AvagMyhITAqXAl0weCba J+XEi5oEUU0b7LbWEuQxg79TfdAH0t4= -----END CERTIFICATE-----Generated at Sun Nov 1 14:39:47 2026 by rpki-client