$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/282185d5-d7f3-3b8a-a88f-10ece07b2a1a.roa File: 282185d5-d7f3-3b8a-a88f-10ece07b2a1a.roa (raw, json) Hash identifier: ufrR4CFGlqy2pMkuRV8dGYY+p7TdhapgUsnAcdut3ww= Subject key identifier: 0A:39:E0:E4:06:0A:A9:FF:B2:8B:67:01:05:FC:4C:54:3B:B2:9B:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EE11AD82C1D0A29A3C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/282185d5-d7f3-3b8a-a88f-10ece07b2a1a.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ee:11:ad:82:c1:d0:a2:9a:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=786465a8-1b68-431f-9a3a-be5781783a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:91:4b:a8:a7:14:d1:cf:b0:06:5c:01:f9: 8c:84:11:47:64:7a:1f:42:7b:d9:d6:c3:e2:7a:79: b0:13:80:69:48:4c:d6:1f:74:e7:c6:f6:2f:df:69: 7f:2a:05:e7:df:79:f2:09:a9:d2:39:83:ff:88:f2: 14:2d:04:39:fd:a8:53:8d:cf:3e:d1:ec:04:70:ab: 05:c1:02:6d:da:de:40:4d:eb:ef:8c:51:59:f4:8b: 3d:9d:b9:d7:73:ce:63:7a:95:d5:a7:1c:0d:b5:ca: c4:14:15:63:28:33:b4:b2:bf:f2:73:8e:df:2e:10: 4a:9e:3e:0d:2a:2f:62:cb:9c:aa:ef:c6:84:4c:c8: 99:cf:5c:62:0c:62:46:3b:9c:fb:78:f3:31:08:e3: 02:d8:3d:f3:c1:e9:c0:cc:ca:4d:ee:cc:44:c6:16: 37:f5:19:07:d3:9e:e6:5c:16:1c:14:2f:07:a4:0a: 63:5a:36:67:bc:78:97:ef:05:9a:83:6b:cd:69:89: 5f:a3:77:c5:df:46:d5:70:ec:39:1d:0b:f9:94:2b: 87:a1:ab:ac:bb:a1:32:ca:1e:4f:7e:c5:41:96:6d: ee:b4:b0:02:e2:1e:8d:bc:1c:14:c3:6d:f4:d7:76: 48:a4:4d:f0:e9:a9:fd:62:68:a7:c3:84:99:2f:0f: e4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:39:E0:E4:06:0A:A9:FF:B2:8B:67:01:05:FC:4C:54:3B:B2:9B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/282185d5-d7f3-3b8a-a88f-10ece07b2a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:58:fd:d0:b5:a2:7e:87:aa:db:2c:b0:b2:ec:2e:4c:40:5a: 81:bd:5c:63:8e:09:77:9f:99:3e:90:27:15:83:13:c3:58:62: e2:c5:12:4b:33:df:a2:00:68:9b:37:8a:11:55:4f:da:e4:0d: 5a:42:f7:9c:f4:9b:fb:02:93:53:72:45:12:86:f5:dc:fa:cf: 20:9e:d1:f6:63:63:14:4f:bc:cd:31:8e:77:08:4e:2c:26:0a: e2:46:6f:f7:c5:8e:b5:61:54:6a:76:de:4a:de:10:58:7d:bc: 6f:76:1e:45:aa:16:66:ab:52:8b:6d:35:d5:e1:d9:3d:9e:74: ae:38:48:1a:8d:c1:56:ea:32:38:26:98:18:08:59:09:30:5a: 4b:63:ea:12:35:2c:d9:88:6e:a4:e1:f3:c2:eb:55:f8:35:e7: ff:37:1f:50:ef:07:ac:a5:af:2d:29:54:b9:7b:b7:ab:ef:a4: ce:27:0a:05:1d:5e:72:c8:70:77:f5:26:e0:f5:84:17:46:a5: 5d:a0:90:4f:d0:59:ac:94:e4:77:9f:48:8f:b8:95:fa:7f:e6: 9f:c5:c9:e9:36:51:39:95:0f:61:e0:67:61:c2:f2:a9:3e:ae: 80:7b:1a:f7:84:4c:f3:85:b1:90:02:ae:4a:c8:bc:16:5e:08: 7d:85:b0:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+4RrYLB0KKaPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk Nzg2NDY1YTgtMWI2OC00MzFmLTlhM2EtYmU1NzgxNzgzYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziORS6inFNHPsAZcAfmMhBFHZHofQnvZ1sPi enmwE4BpSEzWH3TnxvYv32l/KgXn33nyCanSOYP/iPIULQQ5/ahTjc8+0ewEcKsF wQJt2t5ATevvjFFZ9Is9nbnXc85jepXVpxwNtcrEFBVjKDO0sr/yc47fLhBKnj4N Ki9iy5yq78aETMiZz1xiDGJGO5z7ePMxCOMC2D3zwenAzMpN7sxExhY39RkH057m XBYcFC8HpApjWjZnvHiX7wWag2vNaYlfo3fF30bVcOw5HQv5lCuHoausu6Eyyh5P fsVBlm3utLAC4h6NvBwUw23013ZIpE3w6an9Yminw4SZLw/k0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo54OQGCqn/sotnAQX8TFQ7spsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjgyMTg1ZDUtZDdmMy0z YjhhLWE4OGYtMTBlY2UwN2IyYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRY/dC1on6HqtsssLLsLkxAWoG9XGOOCXefmT6QJxWDE8NYYuLFEksz 36IAaJs3ihFVT9rkDVpC95z0m/sCk1NyRRKG9dz6zyCe0fZjYxRPvM0xjncITiwm CuJGb/fFjrVhVGp23kreEFh9vG92HkWqFmarUottNdXh2T2edK44SBqNwVbqMjgm mBgIWQkwWktj6hI1LNmIbqTh88LrVfg15/83H1DvB6ylry0pVLl7t6vvpM4nCgUd XnLIcHf1JuD1hBdGpV2gkE/QWayU5HefSI+4lfp/5p/Fyek2UTmVD2HgZ2HC8qk+ roB7GveETPOFsZACrkrIvBZeCH2FsH0= -----END CERTIFICATE-----Generated at Fri Sep 25 02:45:34 2026 by rpki-client