$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa File: 09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa (raw, json) Hash identifier: 0r/TlNKq2Y3bV1bhhnF3QLEmtS0FOFyn+z/5ooib2lw= Subject key identifier: BC:5D:55:83:1D:6A:80:7A:7E:7E:3F:81:D9:E6:50:75:4E:C4:14:51 Certificate issuer: /CN=e17c5b31-fd63-45db-b2a5-ab4ec50bbede Certificate serial: 010D0C9F4328584F225CFD2AD33E2B008367BE40 Authority key identifier: 2A:CB:91:AA:05:82:05:C9:C1:BC:8D:2F:37:01:26:BD:65:08:EB:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 399890 IP address blocks: 198.136.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fd:2a:d3:3e:2b:00:83:67:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e17c5b31-fd63-45db-b2a5-ab4ec50bbede Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=d6b664cb-5806-4739-a46f-7fb83a8973ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:41:65:ed:77:f8:36:e6:12:5b:9f:93:3c: f0:f0:13:c1:e3:45:95:1b:8d:88:82:77:34:68:88: 9d:c8:8f:de:6f:1d:1e:57:1b:df:36:4b:2e:6b:64: b5:be:81:84:51:3f:6b:29:00:2f:8c:12:41:b9:20: 37:c9:e8:1d:74:b7:d6:fb:e0:92:56:0e:ec:c7:ab: 02:44:4d:6d:14:c2:09:77:f8:23:e8:c3:a5:ce:ea: 4b:19:78:fb:4f:42:4b:38:ab:42:82:65:67:e5:cb: 7e:a7:c3:5e:cb:6f:b0:0e:af:14:03:23:c2:55:a7: 31:6b:34:c9:f2:54:f3:b4:19:f8:ba:a7:18:a7:c4: 1b:45:ae:8e:45:48:d1:2a:4c:3a:80:15:18:da:3c: c2:a3:a9:9a:75:96:1d:c6:05:50:56:fc:49:11:96: 0a:da:cf:3c:99:b0:0c:2b:37:04:52:35:bf:6c:5b: ef:69:60:36:a0:9c:45:7a:58:50:72:45:41:e4:fb: 6d:91:11:34:43:ff:57:c0:f8:7e:fb:e7:7e:b6:71: 50:cf:c6:48:55:00:93:6f:6d:29:6c:05:9e:a5:1c: be:b7:af:e7:78:a5:69:c7:7b:cc:bf:d5:3c:3b:e4: a8:33:b2:01:0d:c9:4b:bb:85:bd:2c:be:0f:5d:ed: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5D:55:83:1D:6A:80:7A:7E:7E:3F:81:D9:E6:50:75:4E:C4:14:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/09e0ea5d-f208-3b96-a648-f401cf0a0c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.crl X509v3 Authority Key Identifier: keyid:2A:CB:91:AA:05:82:05:C9:C1:BC:8D:2F:37:01:26:BD:65:08:EB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e17c5b31-fd63-45db-b2a5-ab4ec50bbede.cer sbgp-ipAddrBlock: critical IPv4: 198.136.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1f:83:ac:0f:a1:c0:7f:c8:fb:ea:cc:09:1a:7f:11:73:47: 05:8e:90:41:8d:1f:c7:bf:a9:63:6d:31:93:7f:ed:06:f8:9b: 9f:47:5c:3e:47:7c:6a:29:93:ec:ac:f8:bb:3e:cd:7d:df:79: fb:94:79:16:b2:d8:92:3e:34:46:7e:37:af:51:47:3d:73:7b: fe:d8:e2:15:94:4b:41:93:ae:68:1b:73:93:c5:ab:e3:e5:aa: 04:e2:93:c4:86:54:a9:e3:36:bd:13:e2:e5:31:d4:8f:01:88: 8d:8a:39:23:49:f4:eb:d2:9c:0b:7e:bc:a8:30:b5:be:4d:fd: b7:45:da:21:34:fc:bb:62:66:5b:7d:b7:a2:36:c4:2d:5b:55: 90:1c:11:fa:b6:35:be:71:94:75:2d:b8:b8:98:7d:52:0a:6e: bb:cb:d8:1f:6a:4b:46:62:b1:71:ce:40:4d:d1:92:f1:b3:22: 12:ec:7f:31:1c:87:d6:f8:8e:54:91:5d:89:76:8c:8f:cd:79: 6d:01:63:a8:af:8b:57:48:ac:a1:6e:f4:f6:dc:ed:86:d3:af: 85:9c:e3:30:1a:d8:8e:6c:51:6f:53:e6:50:b1:37:c7:39:b6: 8d:d7:48:37:37:4b:2a:aa:b7:49:6c:80:07:74:be:fb:30:4a: b0:ed:03:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXP0q0z4rAINnvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE3YzViMzEtZmQ2My00NWRiLWIyYTUtYWI0ZWM1MGJi ZWRlMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDZiNjY0Y2ItNTgwNi00NzM5LWE0NmYtN2ZiODNhODk3M2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxxBZe13+DbmElufkzzw8BPB40WVG42Ignc0 aIidyI/ebx0eVxvfNksua2S1voGEUT9rKQAvjBJBuSA3yegddLfW++CSVg7sx6sC RE1tFMIJd/gj6MOlzupLGXj7T0JLOKtCgmVn5ct+p8Ney2+wDq8UAyPCVacxazTJ 8lTztBn4uqcYp8QbRa6ORUjRKkw6gBUY2jzCo6madZYdxgVQVvxJEZYK2s88mbAM KzcEUjW/bFvvaWA2oJxFelhQckVB5PttkRE0Q/9XwPh+++d+tnFQz8ZIVQCTb20p bAWepRy+t6/neKVpx3vMv9U8O+SoM7IBDclLu4W9LL4PXe1IbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxdVYMdaoB6fn4/gdnmUHVOxBRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMTdj NWIzMS1mZDYzLTQ1ZGItYjJhNS1hYjRlYzUwYmJlZGUvMDllMGVhNWQtZjIwOC0z Yjk2LWE2NDgtZjQwMWNmMGEwYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTE3YzViMzEtZmQ2My00NWRiLWIy YTUtYWI0ZWM1MGJiZWRlL2UxN2M1YjMxLWZkNjMtNDVkYi1iMmE1LWFiNGVjNTBi YmVkZS5jcmwwHwYDVR0jBBgwFoAUKsuRqgWCBcnBvI0vNwEmvWUI64owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMTdjNWIzMS1mZDYzLTQ1ZGItYjJhNS1hYjRl YzUwYmJlZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoi6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsfg6wPocB/yPvqzAkafxFzRwWOkEGNH8e/qWNtMZN/7Qb4m59HXD5H fGopk+ys+Ls+zX3fefuUeRay2JI+NEZ+N69RRz1ze/7Y4hWUS0GTrmgbc5PFq+Pl qgTik8SGVKnjNr0T4uUx1I8BiI2KOSNJ9OvSnAt+vKgwtb5N/bdF2iE0/LtiZlt9 t6I2xC1bVZAcEfq2Nb5xlHUtuLiYfVIKbrvL2B9qS0ZisXHOQE3RkvGzIhLsfzEc h9b4jlSRXYl2jI/NeW0BY6ivi1dIrKFu9Pbc7YbTr4Wc4zAa2I5sUW9T5lCxN8c5 to3XSDc3Syqqt0lsgAd0vvswSrDtA+M= -----END CERTIFICATE-----Generated at Sun Oct 11 11:04:01 2026 by rpki-client