$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa File: d68ed165-7389-3232-85d4-20e1edff7e2f.roa (raw, json) Hash identifier: r1v7j9ZaDKNryaS7AxHB7xXCKh/Jm6Oh9WZ6ifBaa8c= Subject key identifier: FE:BD:07:67:7B:88:DB:04:52:A7:1D:07:63:E2:E9:06:09:D7:BD:C3 Certificate issuer: /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Certificate serial: 010D0C9F4328584EEEB75BF294AAAACAAF4F2C80 Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 7922 IP address blocks: 192.48.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:5b:f2:94:aa:aa:ca:af:4f:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=306d2ace-dc84-4678-804a-1e8704b60297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ef:0c:46:09:0d:b8:ef:66:bc:0b:67:f5:9b: 13:15:77:f7:89:2c:5a:77:85:6d:66:74:2a:32:26: ac:36:4b:68:b5:5d:1f:d8:27:db:70:ec:c6:df:4b: 8c:a2:5c:d5:ac:4e:c6:f3:16:78:8e:3c:0e:b7:0b: 92:87:72:66:46:81:24:b0:59:20:ad:18:16:bd:67: 21:37:06:36:35:ba:dc:1a:cc:89:96:99:80:0e:f9: 5e:52:67:30:77:53:d7:7b:1f:76:c4:34:f8:94:91: 31:9d:34:58:05:0c:7d:96:16:de:86:d7:ab:27:db: 84:63:29:d7:35:b9:e4:60:d8:b0:b9:2e:31:93:ac: 2e:2d:ea:b9:e6:d5:eb:85:92:77:13:72:c6:17:4e: ba:18:ea:83:7c:b1:03:26:0e:41:1a:19:e6:9c:29: df:3d:8c:a9:a7:07:34:02:fc:ac:98:1f:fc:b8:69: 0a:06:26:80:c0:96:93:eb:7b:c9:89:2f:66:7f:9b: 3a:13:f3:c6:ff:a3:72:f4:c1:bb:c0:e9:a5:8b:31: 75:d6:12:c5:c4:a8:84:27:bb:a4:f6:69:f3:31:4d: 9f:50:b4:cd:96:8e:b9:db:62:83:3e:0e:03:47:e7: 43:05:49:1d:39:79:ab:4b:bf:57:92:d5:49:d9:cc: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BD:07:67:7B:88:DB:04:52:A7:1D:07:63:E2:E9:06:09:D7:BD:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl X509v3 Authority Key Identifier: keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer sbgp-ipAddrBlock: critical IPv4: 192.48.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:ba:ff:a1:4b:ee:a9:8d:d3:3d:30:b3:af:5c:c5:bd:74:3d: c7:cb:1c:df:f7:b3:0b:9b:fa:b0:11:7f:dc:85:1b:77:1f:6d: 7a:d3:45:68:63:a3:3d:ea:17:57:48:0f:8e:99:3e:f8:72:c0: 08:12:c1:98:8b:56:33:a3:ed:77:69:c3:b3:8f:8b:cd:92:ca: 5f:ac:04:8b:f7:19:27:96:d8:b4:4c:bd:4e:b3:2b:2c:74:49: 3f:d9:75:5d:89:12:c8:c9:20:b7:21:a3:94:96:e2:5c:85:82: 08:b6:03:b8:1a:d8:7f:57:2c:40:31:fc:47:0d:ea:1c:65:54: 50:bd:b9:50:7c:fd:99:c4:ef:61:f1:74:45:e1:81:c5:60:d8: 4a:9a:7f:d2:14:7a:8a:da:dc:8d:df:49:6d:22:b9:47:a5:fb: f6:c5:a7:80:c6:83:cc:d3:73:ae:3b:fd:e4:be:a0:0e:9a:76: e2:d3:06:51:c5:0f:31:3c:e5:ae:47:b0:b0:13:e0:dd:ea:04: 1e:b3:b3:85:43:20:2d:72:c7:d4:7c:05:1d:7a:1e:e7:58:1a: 2f:72:45:cb:bd:2b:9e:50:ae:59:54:41:e3:d7:34:7e:61:1f: 71:1c:e0:52:50:ef:b7:6c:bd:53:d2:ed:2a:81:39:b3:0a:b1: b5:a1:03:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1vylKqqyq9PLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJiOGJkMzYtYjI2NC00Mjc5LWExNmUtMzYwZjRhMzNl YjgwMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MzA2ZDJhY2UtZGM4NC00Njc4LTgwNGEtMWU4NzA0YjYwMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke8MRgkNuO9mvAtn9ZsTFXf3iSxad4VtZnQq MiasNktotV0f2CfbcOzG30uMolzVrE7G8xZ4jjwOtwuSh3JmRoEksFkgrRgWvWch NwY2NbrcGsyJlpmADvleUmcwd1PXex92xDT4lJExnTRYBQx9lhbehterJ9uEYynX NbnkYNiwuS4xk6wuLeq55tXrhZJ3E3LGF066GOqDfLEDJg5BGhnmnCnfPYyppwc0 AvysmB/8uGkKBiaAwJaT63vJiS9mf5s6E/PG/6Ny9MG7wOmlizF11hLFxKiEJ7uk 9mnzMU2fULTNlo6522KDPg4DR+dDBUkdOXmrS79XktVJ2cxDhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP69B2d7iNsEUqcdB2Pi6QYJ173DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmI4 YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBmNGEzM2ViODAvZDY4ZWQxNjUtNzM4OS0z MjMyLTg1ZDQtMjBlMWVkZmY3ZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJiOGJkMzYtYjI2NC00Mjc5LWEx NmUtMzYwZjRhMzNlYjgwLzhiYjhiZDM2LWIyNjQtNDI3OS1hMTZlLTM2MGY0YTMz ZWI4MC5jcmwwHwYDVR0jBBgwFoAUmhRl3/GbXiMlq5sw0PEkjGwnrbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmI4YmQzNi1iMjY0LTQyNzktYTE2ZS0zNjBm NGEzM2ViODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMu6/6FL7qmN0z0ws69cxb10PcfLHN/3swub+rARf9yFG3cfbXrTRWhj oz3qF1dID46ZPvhywAgSwZiLVjOj7Xdpw7OPi82Syl+sBIv3GSeW2LRMvU6zKyx0 ST/ZdV2JEsjJILcho5SW4lyFggi2A7ga2H9XLEAx/EcN6hxlVFC9uVB8/ZnE72Hx dEXhgcVg2Eqaf9IUeora3I3fSW0iuUel+/bFp4DGg8zTc647/eS+oA6aduLTBlHF DzE85a5HsLAT4N3qBB6zs4VDIC1yx9R8BR16HudYGi9yRcu9K55QrllUQePXNH5h H3Ec4FJQ77dsvVPS7SqBObMKsbWhAxw= -----END CERTIFICATE-----Generated at Mon Aug 24 23:33:18 2026 by rpki-client