$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/172c185b-2433-3ace-8416-a4f6da3639bf.roa File: 172c185b-2433-3ace-8416-a4f6da3639bf.roa (raw, json) Hash identifier: Rk9iHtigo2CyYjGx0vaY/tWM5Vg0owCMewY0xiekx88= Subject key identifier: 9A:22:D1:C4:03:F7:14:24:8B:BC:FD:FE:0E:B4:82:CE:C4:89:39:91 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EFA615E47CC8A126E400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/172c185b-2433-3ace-8416-a4f6da3639bf.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ef:a6:15:e4:7c:c8:a1:26:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=f4baa44c-f35e-4331-aa61-39a30448e81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:4a:1f:34:d9:46:88:b2:a5:67:84:90:ba: b0:81:c4:56:2f:ad:69:02:68:32:20:82:65:49:e7: 9e:c0:a2:dc:a4:68:0c:1b:9b:02:36:5f:dc:14:4e: fb:4e:ba:a7:93:43:3e:86:ac:6f:5c:e2:e7:22:c7: 20:cf:92:bf:fa:8e:3c:a6:f8:e9:b5:b8:0b:c2:ca: 84:db:29:17:b8:7c:72:81:c7:b3:da:5b:cf:5c:45: 3f:de:40:fe:55:97:e5:f4:70:19:29:6f:86:3d:c2: 6d:10:dd:2c:66:5d:77:ec:73:bb:af:6f:53:b4:51: cc:c6:0f:4b:a2:20:22:db:28:b1:bd:b9:28:a0:31: 20:ec:60:af:73:b1:e6:c5:c5:0e:56:62:f2:fd:36: d7:39:d5:3e:a5:23:4f:75:ea:dd:a5:43:56:f8:f4: ac:48:57:59:4e:3c:a8:e2:e1:7a:8d:7a:36:a9:39: 4a:00:cf:9a:81:8e:b9:37:8c:f6:a4:27:e4:66:16: 62:ae:89:05:cf:48:a4:14:e7:e7:45:fe:53:de:06: 42:86:7e:6d:15:21:5d:ec:4e:2f:42:21:f4:56:da: 49:46:c8:d8:14:56:c9:fc:6b:ab:38:cd:38:26:19: c2:d1:36:50:2c:0e:67:85:09:d9:8b:67:9d:42:aa: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:22:D1:C4:03:F7:14:24:8B:BC:FD:FE:0E:B4:82:CE:C4:89:39:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/172c185b-2433-3ace-8416-a4f6da3639bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:95:65:fe:62:ac:e2:a7:f0:a0:0c:4c:f8:f9:ee:3d:1d:4b: ac:e7:3d:b8:08:bb:78:6c:47:8a:9d:18:99:34:bd:90:7f:e3: be:6b:52:9f:e5:e5:fe:ed:08:c3:84:ff:79:25:84:7f:ce:18: 75:60:91:23:3c:50:5b:de:fd:73:a7:86:35:4a:1d:95:3b:13: 45:90:0d:1c:0e:bf:45:ed:88:eb:85:1d:67:2b:69:2f:dd:6b: e7:34:85:57:9a:83:39:27:d0:4d:74:f2:a6:b4:5c:42:32:7e: 5f:b8:8a:94:db:18:60:59:ee:52:ac:b1:70:10:df:17:21:ec: 88:5e:5c:b8:f6:a5:86:eb:3e:dc:0d:d2:08:0d:ee:11:25:6b: 86:ef:40:fe:4d:27:67:24:2f:fd:fe:1c:f1:7f:35:90:46:df: 97:08:6e:43:c2:a3:4d:1a:2c:97:7b:7f:89:00:b2:bb:21:cd: f7:81:79:98:14:7d:0d:84:f9:60:ca:9a:37:08:ce:7d:0e:d5: 61:25:3f:2e:f3:63:34:af:2e:dd:a8:fd:e4:78:37:4b:1b:f3: 3a:95:e6:2a:0e:19:df:0c:00:8c:90:1e:49:20:70:0c:fa:a6: 82:48:bf:8b:f8:d1:07:9e:35:64:0e:32:69:53:c9:a3:15:1d: 08:4f:e1:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp++mFeR8yKEm5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjRiYWE0NGMtZjM1ZS00MzMxLWFhNjEtMzlhMzA0NDhlODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSBKHzTZRoiypWeEkLqwgcRWL61pAmgyIIJl SeeewKLcpGgMG5sCNl/cFE77Trqnk0M+hqxvXOLnIscgz5K/+o48pvjptbgLwsqE 2ykXuHxygcez2lvPXEU/3kD+VZfl9HAZKW+GPcJtEN0sZl137HO7r29TtFHMxg9L oiAi2yixvbkooDEg7GCvc7HmxcUOVmLy/TbXOdU+pSNPderdpUNW+PSsSFdZTjyo 4uF6jXo2qTlKAM+agY65N4z2pCfkZhZirokFz0ikFOfnRf5T3gZChn5tFSFd7E4v QiH0VtpJRsjYFFbJ/GurOM04JhnC0TZQLA5nhQnZi2edQqq+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoi0cQD9xQki7z9/g60gs7EiTmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTcyYzE4NWItMjQzMy0z YWNlLTg0MTYtYTRmNmRhMzYzOWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaVZf5irOKn8KAMTPj57j0dS6znPbgIu3hsR4qdGJk0vZB/475rUp/l 5f7tCMOE/3klhH/OGHVgkSM8UFve/XOnhjVKHZU7E0WQDRwOv0XtiOuFHWcraS/d a+c0hVeagzkn0E108qa0XEIyfl+4ipTbGGBZ7lKssXAQ3xch7IheXLj2pYbrPtwN 0ggN7hEla4bvQP5NJ2ckL/3+HPF/NZBG35cIbkPCo00aLJd7f4kAsrshzfeBeZgU fQ2E+WDKmjcIzn0O1WElPy7zYzSvLt2o/eR4N0sb8zqV5ioOGd8MAIyQHkkgcAz6 poJIv4v40QeeNWQOMmlTyaMVHQhP4X0= -----END CERTIFICATE-----Generated at Thu Sep 24 14:01:01 2026 by rpki-client