$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa File: 2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa (raw, json) Hash identifier: EBprF1OW3tVUVW8SI85Cthl1RbKCg1NvuousHVVM5gE= Subject key identifier: 89:00:B4:5C:9D:CA:62:22:53:C8:3A:D5:03:18:12:57:23:20:93:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D40CB9CAB26BD957EB1C2CE60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 192.178.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9c:ab:26:bd:95:7e:b1:c2:ce:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=f9846552-3216-4ff3-9fc6-18c470d15e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:33:1a:e2:49:ad:6a:d2:1c:df:40:9e:5d:0a: 63:1c:11:0c:31:32:ad:33:50:1d:64:39:86:ef:91: cc:35:af:90:76:e1:71:ce:0e:f3:90:18:ff:79:8e: ce:48:08:db:29:8d:08:4b:6c:2d:1c:0c:f5:ce:bf: c7:e2:0f:e9:0c:15:17:81:84:2a:70:7b:6a:45:39: 86:83:be:b9:b9:6e:5d:92:b7:96:0d:42:3f:26:86: bd:15:87:46:b7:62:82:b1:fe:01:85:8e:92:60:bc: 7b:96:30:d6:c3:50:92:2b:58:02:7a:ee:dd:8c:56: f9:51:2c:00:26:9b:95:c7:fc:ae:72:3b:8a:1d:b2: 03:33:ed:7e:22:b4:18:72:7c:7a:f1:d5:78:92:c6: 7b:cf:3e:7e:e0:b0:9a:39:ab:db:5c:62:3e:d6:3d: f2:1d:cd:ce:a7:e0:d2:7c:e1:a4:81:f3:e5:1c:ac: 9d:82:5a:1c:31:73:4d:bd:bb:e4:0b:06:80:fd:bc: 5a:7e:1b:35:60:16:88:e6:fa:63:f1:d4:d7:63:ca: 86:53:80:76:20:ba:c9:aa:a0:dc:84:bc:9d:82:d2: 8e:07:67:16:3b:7e:2b:88:80:d5:f0:14:a3:42:23: be:98:ed:98:3d:f1:46:37:f6:96:52:e7:26:40:0c: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:B4:5C:9D:CA:62:22:53:C8:3A:D5:03:18:12:57:23:20:93:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c0:04:4f:58:40:b5:ce:54:8d:6a:99:39:fa:bd:a7:73:cb: 3c:b7:e0:5f:e3:e0:55:ef:ae:a4:13:fe:80:8a:fa:68:b2:29: 9d:82:05:ce:f7:d8:52:69:ec:af:83:c9:dd:4f:d8:f4:62:2f: c8:38:91:ac:5c:ee:b3:78:27:0d:19:8b:e4:4d:95:c9:42:ac: af:69:1e:07:43:fa:52:3a:d9:ea:a6:74:b8:2d:d9:e2:44:ae: 47:8f:c8:4d:77:26:cb:ad:45:de:27:2f:5a:7a:14:b0:e0:bd: 23:68:20:34:b2:a9:85:ef:64:99:85:22:e4:47:d1:14:92:03: 25:6e:a5:3d:a9:d8:19:d7:d1:ae:a5:7f:72:1e:39:ff:d1:60: 1d:fb:a6:4a:3e:3a:1c:33:8b:ea:73:04:8e:33:a5:d8:81:f3: c6:86:44:27:8f:84:b6:e7:4e:e6:5d:06:41:18:41:5c:8c:2c: 90:37:50:fa:9f:2f:16:86:e6:58:8a:d3:7d:3b:b4:81:5c:74: 28:77:b1:f7:7a:56:98:cc:4f:65:c7:db:cd:53:31:32:da:f2: fe:4d:f4:7f:29:cd:40:07:e6:31:c0:52:05:9f:5e:4e:eb:43: 50:18:81:d9:8f:1d:ee:40:39:e4:f0:b8:58:d9:cb:41:ba:d1: 92:ef:00:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay5yrJr2VfrHCzmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk Zjk4NDY1NTItMzIxNi00ZmYzLTlmYzYtMThjNDcwZDE1ZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTMa4kmtatIc30CeXQpjHBEMMTKtM1AdZDmG 75HMNa+QduFxzg7zkBj/eY7OSAjbKY0IS2wtHAz1zr/H4g/pDBUXgYQqcHtqRTmG g765uW5dkreWDUI/Joa9FYdGt2KCsf4BhY6SYLx7ljDWw1CSK1gCeu7djFb5USwA JpuVx/yucjuKHbIDM+1+IrQYcnx68dV4ksZ7zz5+4LCaOavbXGI+1j3yHc3Op+DS fOGkgfPlHKydglocMXNNvbvkCwaA/bxafhs1YBaI5vpj8dTXY8qGU4B2ILrJqqDc hLydgtKOB2cWO34riIDV8BSjQiO+mO2YPfFGN/aWUucmQAx35QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkAtFydymIiU8g61QMYElcjIJMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmQ3MmJlYzgtYTFhMC0z YTQ4LWIyMjYtYWMxOTk2ZmJkNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/ABE9YQLXOVI1qmTn6vadzyzy34F/j4FXvrqQT/oCK+miyKZ2CBc73 2FJp7K+Dyd1P2PRiL8g4kaxc7rN4Jw0Zi+RNlclCrK9pHgdD+lI62eqmdLgt2eJE rkePyE13JsutRd4nL1p6FLDgvSNoIDSyqYXvZJmFIuRH0RSSAyVupT2p2BnX0a6l f3IeOf/RYB37pko+Ohwzi+pzBI4zpdiB88aGRCePhLbnTuZdBkEYQVyMLJA3UPqf LxaG5liK0307tIFcdCh3sfd6VpjMT2XH281TMTLa8v5N9H8pzUAH5jHAUgWfXk7r Q1AYgdmPHe5AOeTwuFjZy0G60ZLvALc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:08 2026 by rpki-client