$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b381e96-0d71-306a-ba7d-9113f1ee15f3.roa File: 1b381e96-0d71-306a-ba7d-9113f1ee15f3.roa (raw, json) Hash identifier: QdwgCWjgiRb1OdYPvTiVhl9MctyPWolBU2QSaeOFLQU= Subject key identifier: 9A:0E:1C:5C:43:46:10:7B:48:1A:C7:49:36:16:FD:38:6B:8C:AA:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EE579A3FC5414F410F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b381e96-0d71-306a-ba7d-9113f1ee15f3.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ee:57:9a:3f:c5:41:4f:41:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=b7e788d3-adf4-4774-872e-a0048f2525e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:05:c3:0f:02:49:90:7e:6b:4d:15:00:b0: 85:19:0d:9c:77:58:2b:bc:da:50:3a:a6:b0:08:ef: ea:7f:15:5c:08:64:4e:b5:45:37:a1:c8:f8:06:9d: 78:2f:67:4e:b3:99:61:c5:f2:b1:c5:41:3a:23:20: bb:52:d1:64:ee:12:db:ba:c7:77:9c:d7:25:5d:df: c4:c5:51:a5:5e:d6:43:f4:51:3d:87:3f:6b:29:5a: 86:93:c1:1e:bc:53:e7:a8:2e:72:16:0f:5d:1e:25: 56:5f:dd:f1:56:78:9b:e4:43:d1:e7:b3:6e:0f:6d: 0c:f4:38:8e:a0:82:49:f8:2f:a0:ee:62:a5:2f:cf: 27:98:09:47:16:ac:c1:82:07:a9:39:67:48:37:23: bd:57:b6:a7:f5:6d:e6:62:58:eb:4b:9c:58:a2:d3: f1:2a:77:57:3d:fd:1c:b5:f3:a9:c5:c8:45:d2:9b: 8f:6e:ef:78:8f:92:02:8c:3c:b2:27:86:75:2a:69: 9b:b9:b2:6d:a9:c9:bc:9e:18:c4:62:18:a6:34:7d: 17:05:c5:20:58:a4:b6:71:c9:2a:57:87:84:bd:a2: dc:f0:73:c3:74:03:4d:b4:42:06:3c:40:3f:ff:33: 1d:83:33:f6:1d:c0:1a:e1:14:39:b7:b6:b4:5b:2a: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0E:1C:5C:43:46:10:7B:48:1A:C7:49:36:16:FD:38:6B:8C:AA:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b381e96-0d71-306a-ba7d-9113f1ee15f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9e:19:aa:dd:c3:fb:af:e8:3a:4a:d5:ad:1d:24:7f:b8:36: d1:d5:2a:c1:bf:de:20:70:60:a0:de:5e:02:b6:c0:61:5e:d9: e6:13:86:50:17:bd:f5:e8:b6:77:e7:ae:25:de:75:93:44:10: b2:17:b9:f6:f0:c4:cf:d2:4d:01:f5:1b:fe:74:53:4b:56:d5: e8:f2:05:90:d5:49:91:cf:bc:29:4c:c7:63:22:a2:61:f9:25: 00:1b:68:07:82:46:13:a6:7c:49:99:fd:c9:b4:f5:d3:cd:3d: 62:d4:64:fb:65:cc:f9:b3:82:5a:89:fa:ea:ee:6d:86:77:71: 69:a0:39:8f:d8:1c:ea:84:bc:3f:ec:a0:5a:a1:35:ff:e2:f9: 4f:3a:83:8e:ca:0a:40:25:bb:64:f5:30:ec:20:cb:4a:d1:0d: 41:94:54:bd:52:5d:f2:af:2d:58:ba:28:c8:17:32:72:91:ba: 48:ce:a5:e3:d9:23:c2:e6:0f:f7:ce:dd:ab:a6:86:75:13:fd: 91:7c:a3:8d:4c:f2:69:c2:c2:96:81:c7:f2:5e:c8:44:23:78: d6:5e:c3:91:37:b3:ca:2e:c2:d1:b7:28:1a:ce:ed:73:f0:d9: 9a:15:0b:d8:de:6c:8d:a3:e3:9a:0a:1d:f3:20:75:42:cd:88: af:10:cd:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+5Xmj/FQU9BD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk YjdlNzg4ZDMtYWRmNC00Nzc0LTg3MmUtYTAwNDhmMjUyNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxgFww8CSZB+a00VALCFGQ2cd1grvNpQOqaw CO/qfxVcCGROtUU3ocj4Bp14L2dOs5lhxfKxxUE6IyC7UtFk7hLbusd3nNclXd/E xVGlXtZD9FE9hz9rKVqGk8EevFPnqC5yFg9dHiVWX93xVnib5EPR57NuD20M9DiO oIJJ+C+g7mKlL88nmAlHFqzBggepOWdINyO9V7an9W3mYljrS5xYotPxKndXPf0c tfOpxchF0puPbu94j5ICjDyyJ4Z1KmmbubJtqcm8nhjEYhimNH0XBcUgWKS2cckq V4eEvaLc8HPDdANNtEIGPEA//zMdgzP2HcAa4RQ5t7a0Wyo9aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoOHFxDRhB7SBrHSTYW/ThrjKqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWIzODFlOTYtMGQ3MS0z MDZhLWJhN2QtOTExM2YxZWUxNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICeGardw/uv6DpK1a0dJH+4NtHVKsG/3iBwYKDeXgK2wGFe2eYThlAX vfXotnfnriXedZNEELIXufbwxM/STQH1G/50U0tW1ejyBZDVSZHPvClMx2MiomH5 JQAbaAeCRhOmfEmZ/cm09dPNPWLUZPtlzPmzglqJ+urubYZ3cWmgOY/YHOqEvD/s oFqhNf/i+U86g47KCkAlu2T1MOwgy0rRDUGUVL1SXfKvLVi6KMgXMnKRukjOpePZ I8LmD/fO3aumhnUT/ZF8o41M8mnCwpaBx/JeyEQjeNZew5E3s8ouwtG3KBrO7XPw 2ZoVC9jebI2j45oKHfMgdULNiK8QzTk= -----END CERTIFICATE-----Generated at Thu Sep 24 20:21:41 2026 by rpki-client