$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/a5293cf6-6824-3f7a-92e0-8e344d577c16.roa File: a5293cf6-6824-3f7a-92e0-8e344d577c16.roa (raw, json) Hash identifier: +lS8xhY9qBpeBkr3k7+g83JRebTqIsdMYE+zGT9fz/U= Subject key identifier: AF:F0:71:C9:5A:97:4B:8D:EA:1E:6F:14:3D:25:25:2C:90:EC:D9:54 Certificate issuer: /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Certificate serial: 010D0C9F4328584F07F363C789F4EFD50D7B17C0 Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/a5293cf6-6824-3f7a-92e0-8e344d577c16.roa Signing time: Tue 01 Sep 2026 13:56:31 +0000 ROA not before: Tue 01 Sep 2026 13:56:31 +0000 ROA not after: Mon 30 Nov 2026 14:56:31 +0000 asID: 152698 IP address blocks: 192.137.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:f3:63:c7:89:f4:ef:d5:0d:7b:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Validity Not Before: Sep 1 13:56:31 2026 GMT Not After : Nov 30 14:56:31 2026 GMT Subject: CN=9cfaab4e-0464-4932-9ea6-00e3f6832ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:4d:71:97:a5:f9:e8:76:e5:0a:eb:08:6c: 79:08:bf:ec:2f:21:15:bb:70:39:35:3f:6d:21:2e: a7:ae:fa:db:f7:ac:75:d1:b3:0d:02:5b:a9:bf:89: 43:f1:35:03:c3:5c:4e:18:57:ae:56:c6:c5:bc:9b: 98:3c:99:3f:a4:3d:60:bd:49:e8:99:03:d6:0d:a3: a0:ee:6f:a4:a8:5f:c3:0f:ee:70:fb:1e:3f:a7:14: 9e:45:b9:bf:d4:8f:a1:df:37:4c:f1:4d:8d:01:db: 0b:5f:f8:da:e7:23:b6:f2:ab:37:81:73:16:25:df: dd:43:60:81:d7:08:4a:f5:29:f7:96:d6:ea:d4:54: 6d:c2:22:c1:a9:91:df:79:49:c2:66:78:de:7e:ac: 6c:3a:f8:0a:66:e2:00:73:98:a4:bd:16:52:7c:e0: 17:d6:13:74:5d:8e:76:7d:fe:6c:2e:09:04:dd:08: ba:0a:85:4c:01:b5:a0:0b:7e:2a:a4:3f:6b:3e:22: fd:3d:c2:18:ab:d3:73:72:56:31:e1:39:5b:43:78: 93:34:ad:69:aa:e3:88:ae:51:86:15:d3:f6:5a:47: b0:9e:f5:e5:75:4e:d3:8f:3b:f2:47:bc:06:85:f8: 53:e5:ea:2c:80:b4:bb:74:47:fd:bf:12:b6:3b:8d: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F0:71:C9:5A:97:4B:8D:EA:1E:6F:14:3D:25:25:2C:90:EC:D9:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/a5293cf6-6824-3f7a-92e0-8e344d577c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl X509v3 Authority Key Identifier: keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer sbgp-ipAddrBlock: critical IPv4: 192.137.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ac:72:59:10:07:c9:22:64:e1:0b:ff:d7:03:e6:fd:6a:a5: 91:ea:9b:70:9c:13:70:cf:d7:10:ae:f1:e5:b5:76:ae:b6:cf: 25:2b:b7:3c:e1:98:51:0f:fe:46:98:fe:36:f3:d0:0e:c7:ca: ee:45:79:1a:0b:d5:08:45:9c:30:f4:c9:ee:3e:53:34:63:5a: 65:a3:09:bd:f9:b7:52:3c:dd:87:ec:51:54:93:68:23:7b:42: a1:58:1f:7d:4e:be:1a:d1:68:a6:09:14:97:49:58:e6:11:e8: 51:34:a6:5e:c1:a9:73:fd:65:52:6a:8b:ea:50:f2:cc:d0:30: d2:02:a9:6e:1f:aa:d2:d7:99:a3:55:de:ab:8f:d3:8e:12:5f: 48:e5:e6:df:ba:b8:08:39:62:8e:e5:ba:d2:43:5a:fd:bb:59: f3:43:06:f2:ae:65:79:e5:eb:fb:15:46:02:c2:bb:5d:c6:3b: 87:82:62:18:97:8d:aa:68:9d:45:2d:16:a6:22:31:22:7c:11: 5e:8f:4c:22:67:af:40:c2:32:ca:47:82:19:b4:cc:dc:9f:14: 66:8a:b4:37:ef:61:34:67:c3:1a:46:8c:dc:a8:cd:54:4b:00: 6b:a2:0c:c1:09:06:cd:eb:6c:59:bb:1d:09:b7:59:64:35:bc: 57:7c:b2:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H82PHifTv1Q17F8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx MDQzMB4XDTI2MDkwMTEzNTYzMVoXDTI2MTEzMDE0NTYzMVowLzEtMCsGA1UEAxMk OWNmYWFiNGUtMDQ2NC00OTMyLTllYTYtMDBlM2Y2ODMyZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohZNcZel+eh25QrrCGx5CL/sLyEVu3A5NT9t IS6nrvrb96x10bMNAlupv4lD8TUDw1xOGFeuVsbFvJuYPJk/pD1gvUnomQPWDaOg 7m+kqF/DD+5w+x4/pxSeRbm/1I+h3zdM8U2NAdsLX/ja5yO28qs3gXMWJd/dQ2CB 1whK9Sn3ltbq1FRtwiLBqZHfeUnCZnjefqxsOvgKZuIAc5ikvRZSfOAX1hN0XY52 ff5sLgkE3Qi6CoVMAbWgC34qpD9rPiL9PcIYq9NzclYx4TlbQ3iTNK1pquOIrlGG FdP2WkewnvXldU7TjzvyR7wGhfhT5eosgLS7dEf9vxK2O41dAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/wcclal0uN6h5vFD0lJSyQ7NlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvYTUyOTNjZjYtNjgyNC0z ZjdhLTkyZTAtOGUzNDRkNTc3YzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5 MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1 MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi YmJlNTEwNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGsclkQB8kiZOEL/9cD5v1qpZHqm3CcE3DP1xCu8eW1dq62zyUrtzzh mFEP/kaY/jbz0A7Hyu5FeRoL1QhFnDD0ye4+UzRjWmWjCb35t1I83YfsUVSTaCN7 QqFYH31OvhrRaKYJFJdJWOYR6FE0pl7BqXP9ZVJqi+pQ8szQMNICqW4fqtLXmaNV 3quP044SX0jl5t+6uAg5Yo7lutJDWv27WfNDBvKuZXnl6/sVRgLCu13GO4eCYhiX japonUUtFqYiMSJ8EV6PTCJnr0DCMspHghm0zNyfFGaKtDfvYTRnwxpGjNyozVRL AGuiDMEJBs3rbFm7HQm3WWQ1vFd8suc= -----END CERTIFICATE-----Generated at Sun Sep 13 14:11:35 2026 by rpki-client