$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5288ee02-13ce-3148-9bfd-d1b76c0e65aa.roa File: 5288ee02-13ce-3148-9bfd-d1b76c0e65aa.roa (raw, json) Hash identifier: fKSenXG2mW/CdRdEYCOUBCAXjb9HRq2PN2bxe5kvxsU= Subject key identifier: 1B:01:ED:70:78:FA:F1:22:D9:AB:17:DD:D1:3D:DD:66:7D:6A:16:AB Certificate issuer: /CN=5eb9af5e-8450-4404-b673-e166c036c6a6 Certificate serial: 010D0C9F4328584F6A4AD1398AA23B0F324AAE90 Authority key identifier: C0:8E:21:FE:76:2E:26:16:57:10:BB:C0:9A:69:68:74:58:50:6B:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5288ee02-13ce-3148-9bfd-d1b76c0e65aa.roa Signing time: Tue 06 Oct 2026 19:21:53 +0000 ROA not before: Tue 06 Oct 2026 19:21:53 +0000 ROA not after: Mon 04 Jan 2027 20:21:53 +0000 asID: 198949 IP address blocks: 192.136.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:4a:d1:39:8a:a2:3b:0f:32:4a:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb9af5e-8450-4404-b673-e166c036c6a6 Validity Not Before: Oct 6 19:21:53 2026 GMT Not After : Jan 4 20:21:53 2027 GMT Subject: CN=0e8c9f36-555e-4348-b4ef-abd10e538b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e7:b8:3f:7a:ef:f8:a8:97:87:8d:5a:f8:92: d6:4e:2b:5a:b3:c8:ed:fb:80:fa:7c:e2:b7:54:48: d1:36:74:c8:d2:27:a0:23:7c:80:e6:d6:a4:b0:b4: fe:61:5c:1e:82:01:36:45:1c:79:7f:aa:ab:e6:5e: 97:51:79:4c:0f:17:f5:dd:aa:16:0d:9f:e3:62:bf: ee:78:7e:03:ca:89:44:28:cd:26:d1:c7:a4:4b:73: 1d:e6:a6:34:7d:d3:c1:85:f7:41:c8:cc:a1:43:79: 7b:cf:f2:51:05:cc:98:f2:85:57:67:bc:5c:03:67: b8:60:e4:32:ee:7f:79:3c:81:6e:0b:8c:a4:32:21: b7:a2:52:6c:b0:48:86:a1:16:f6:ac:bf:a2:1f:7a: 6d:74:c0:40:1a:15:44:cb:fc:ca:34:15:82:20:36: 02:fa:67:86:cc:33:eb:1b:82:9f:5a:db:d1:7e:f6: d6:ed:0f:27:65:42:2f:11:77:27:2f:f9:0e:05:c7: e3:6c:d4:2b:25:4b:d3:b2:d3:ad:de:69:1c:2d:0d: 16:de:e1:4a:3e:f8:42:74:96:20:16:ae:47:68:ad: 6f:d3:59:bd:8d:de:b3:6b:d8:4c:29:ca:be:58:24: a0:1c:5f:e6:53:48:dd:56:61:46:56:37:d8:a8:5f: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:01:ED:70:78:FA:F1:22:D9:AB:17:DD:D1:3D:DD:66:7D:6A:16:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5288ee02-13ce-3148-9bfd-d1b76c0e65aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6/5eb9af5e-8450-4404-b673-e166c036c6a6.crl X509v3 Authority Key Identifier: keyid:C0:8E:21:FE:76:2E:26:16:57:10:BB:C0:9A:69:68:74:58:50:6B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5eb9af5e-8450-4404-b673-e166c036c6a6.cer sbgp-ipAddrBlock: critical IPv4: 192.136.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:60:96:71:bb:0c:69:60:35:3e:a3:ac:7a:9e:85:be:26:f8: d7:d1:c7:bf:a5:b0:f8:0c:b7:be:52:ad:7e:25:b0:ea:85:be: 00:39:9a:9f:da:58:b1:0d:69:57:c5:8c:a7:2e:0b:36:55:91: 07:d2:43:98:53:80:6b:91:ea:83:6a:7f:54:a4:c8:24:96:35: 76:e8:1b:78:e8:4f:bd:f8:75:49:49:7e:14:9c:da:6e:23:42: 0a:c8:24:f9:e3:51:8c:77:eb:63:ce:9f:72:af:f8:6c:93:cf: 71:d4:85:76:f3:06:69:40:36:b8:51:ed:2c:84:3b:97:2e:01: 38:c2:dc:8f:7e:f5:7a:a0:bc:66:c0:7c:de:18:65:ed:1d:01: 22:1b:b2:12:a9:64:2b:1c:9d:b2:e8:89:63:30:d4:55:74:3f: e0:12:4d:57:b4:3f:87:f6:0e:1e:fe:be:e0:6e:8c:f0:ef:19: 51:6e:46:f4:73:8f:2d:d9:91:28:ab:20:76:54:58:fa:c8:d3: e1:ab:d0:06:34:26:63:d9:81:58:03:1b:aa:9e:9c:1c:5c:f8: 05:a3:07:4e:ef:92:07:e7:12:60:37:e1:5c:8c:fb:70:85:a9: e8:03:e4:9a:ba:76:dc:3d:fb:c4:1a:a6:40:9d:8c:04:c9:f0: 56:a4:5e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9qStE5iqI7DzJKrpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWViOWFmNWUtODQ1MC00NDA0LWI2NzMtZTE2NmMwMzZj NmE2MB4XDTI2MTAwNjE5MjE1M1oXDTI3MDEwNDIwMjE1M1owLzEtMCsGA1UEAxMk MGU4YzlmMzYtNTU1ZS00MzQ4LWI0ZWYtYWJkMTBlNTM4YjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOe4P3rv+KiXh41a+JLWTitas8jt+4D6fOK3 VEjRNnTI0iegI3yA5taksLT+YVweggE2RRx5f6qr5l6XUXlMDxf13aoWDZ/jYr/u eH4DyolEKM0m0cekS3Md5qY0fdPBhfdByMyhQ3l7z/JRBcyY8oVXZ7xcA2e4YOQy 7n95PIFuC4ykMiG3olJssEiGoRb2rL+iH3ptdMBAGhVEy/zKNBWCIDYC+meGzDPr G4KfWtvRfvbW7Q8nZUIvEXcnL/kOBcfjbNQrJUvTstOt3mkcLQ0W3uFKPvhCdJYg Fq5HaK1v01m9jd6za9hMKcq+WCSgHF/mU0jdVmFGVjfYqF/WcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsB7XB4+vEi2asX3dE93WZ9aharMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZWI5 YWY1ZS04NDUwLTQ0MDQtYjY3My1lMTY2YzAzNmM2YTYvNTI4OGVlMDItMTNjZS0z MTQ4LTliZmQtZDFiNzZjMGU2NWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWViOWFmNWUtODQ1MC00NDA0LWI2 NzMtZTE2NmMwMzZjNmE2LzVlYjlhZjVlLTg0NTAtNDQwNC1iNjczLWUxNjZjMDM2 YzZhNi5jcmwwHwYDVR0jBBgwFoAUwI4h/nYuJhZXELvAmmlodFhQa00wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZWI5YWY1ZS04NDUwLTQ0MDQtYjY3My1lMTY2 YzAzNmM2YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhglnG7DGlgNT6jrHqehb4m+NfRx7+lsPgMt75SrX4lsOqFvgA5mp/a WLENaVfFjKcuCzZVkQfSQ5hTgGuR6oNqf1SkyCSWNXboG3joT734dUlJfhSc2m4j QgrIJPnjUYx362POn3Kv+GyTz3HUhXbzBmlANrhR7SyEO5cuATjC3I9+9XqgvGbA fN4YZe0dASIbshKpZCscnbLoiWMw1FV0P+ASTVe0P4f2Dh7+vuBujPDvGVFuRvRz jy3ZkSirIHZUWPrI0+Gr0AY0JmPZgVgDG6qenBxc+AWjB07vkgfnEmA34VyM+3CF qegD5Jq6dtw9+8QapkCdjATJ8FakXhQ= -----END CERTIFICATE-----Generated at Sun Oct 11 11:31:00 2026 by rpki-client