$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d29626-2dd0-344f-840f-a47a07896e4f.roa File: 32d29626-2dd0-344f-840f-a47a07896e4f.roa (raw, json) Hash identifier: mnXa5Khaw7vFwZBhMqAvNSML7E3UEus1vxUtKxifEUk= Subject key identifier: 08:28:80:13:2D:FD:33:6F:EB:74:E9:9B:F6:8F:DD:CB:DB:28:B8:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FC5CBCE2517213643BCA797C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d29626-2dd0-344f-840f-a47a07896e4f.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 15169 IP address blocks: 192.178.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:ce:25:17:21:36:43:bc:a7:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=f2e2869e-a076-4f1c-9b93-2741a449ce18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:41:9a:89:2d:6b:a0:c1:f8:3d:15:75:b1: 0b:15:1b:5c:18:c7:09:b0:91:3a:1a:e4:d9:2d:29: 36:3a:3c:c6:96:52:0c:3d:9a:de:be:e8:2f:ac:64: 95:29:c6:66:19:58:55:f7:c1:b4:49:c8:4a:db:ed: c5:d7:c3:e8:38:1e:88:e4:25:9f:5a:ea:6c:d6:7a: 79:1d:0c:88:e1:87:ce:d5:f5:3f:c1:97:02:7e:44: ca:61:91:30:2b:38:b6:45:22:6d:3b:59:17:cb:da: db:ea:e3:b2:ad:44:d2:52:49:4b:95:5f:71:58:54: b5:47:58:e3:99:09:05:3f:db:a1:d2:dc:a4:99:5e: e7:e8:26:fb:7a:e5:be:89:67:e2:05:a5:2d:fd:0b: 80:00:94:8c:67:13:2a:02:f3:29:99:ec:4e:41:46: 78:fd:6f:f2:4b:a3:db:05:7f:3d:ef:ed:d6:c5:e2: af:b5:80:94:82:4b:59:0d:7f:4d:a8:ea:26:5d:35: de:17:a6:31:3b:2d:5c:e0:73:dd:3b:5f:e1:ec:e3: fd:c9:e6:2d:32:64:14:17:66:f3:93:9f:99:5a:57: 7e:ce:00:61:73:1b:de:5e:e4:c6:20:1d:f8:2e:cf: 84:d5:18:be:1d:e0:59:11:19:77:d4:25:6e:b7:53: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:28:80:13:2D:FD:33:6F:EB:74:E9:9B:F6:8F:DD:CB:DB:28:B8:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d29626-2dd0-344f-840f-a47a07896e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:11:86:65:31:3f:f7:ac:fc:58:24:77:a8:94:5f:68:5a:aa: 8d:79:9d:e8:9d:a1:2c:e4:9f:f7:0d:17:50:9f:34:70:e3:b9: 6f:2f:13:6c:4d:7b:a3:51:b1:3d:dc:a7:3e:17:0b:26:6d:06: dc:99:20:50:db:6b:88:e7:e5:e2:90:e9:3a:06:a4:b8:4a:9f: df:cb:85:01:48:e2:10:4c:6b:11:5f:d4:c8:e0:5f:2e:37:88: cc:a5:6e:20:8a:c7:ce:70:c3:af:12:68:36:c8:bc:71:de:36: 3e:c4:98:71:8d:e3:ae:4f:4d:e1:8e:14:64:78:c6:a3:57:91: 74:ef:45:6a:11:76:a5:d0:a8:51:4b:7e:b4:15:1e:64:16:59: 62:37:f5:eb:17:8b:b0:68:f3:01:a8:20:92:d7:b6:05:79:f8: 1f:a7:35:67:6c:f0:0f:21:8e:fe:ad:6a:50:63:46:f1:95:cb: d2:49:11:5c:70:1d:e5:27:c6:2d:88:59:d6:36:09:ff:15:94: 75:0e:a4:cd:75:ea:7c:9a:39:5b:71:1e:ef:c5:69:65:98:85: 7b:59:ef:3f:70:ff:44:bc:42:d2:10:ba:62:ad:ed:de:7c:e5: df:c1:88:fe:65:e5:d7:d9:be:69:62:ad:c4:79:6c:68:d7:c3: d9:f5:06:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/Fy84lFyE2Q7ynl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjJlMjg2OWUtYTA3Ni00ZjFjLTliOTMtMjc0MWE0NDljZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb9Bmokta6DB+D0VdbELFRtcGMcJsJE6GuTZ LSk2OjzGllIMPZrevugvrGSVKcZmGVhV98G0SchK2+3F18PoOB6I5CWfWups1np5 HQyI4YfO1fU/wZcCfkTKYZEwKzi2RSJtO1kXy9rb6uOyrUTSUklLlV9xWFS1R1jj mQkFP9uh0tykmV7n6Cb7euW+iWfiBaUt/QuAAJSMZxMqAvMpmexOQUZ4/W/yS6Pb BX897+3WxeKvtYCUgktZDX9NqOomXTXeF6YxOy1c4HPdO1/h7OP9yeYtMmQUF2bz k5+ZWld+zgBhcxveXuTGIB34Ls+E1Ri+HeBZERl31CVut1O1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgogBMt/TNv63Tpm/aP3cvbKLjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzJkMjk2MjYtMmRkMC0z NDRmLTg0MGYtYTQ3YTA3ODk2ZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgRhmUxP/es/Fgkd6iUX2haqo15neidoSzkn/cNF1CfNHDjuW8vE2xN e6NRsT3cpz4XCyZtBtyZIFDba4jn5eKQ6ToGpLhKn9/LhQFI4hBMaxFf1MjgXy43 iMylbiCKx85ww68SaDbIvHHeNj7EmHGN465PTeGOFGR4xqNXkXTvRWoRdqXQqFFL frQVHmQWWWI39esXi7Bo8wGoIJLXtgV5+B+nNWds8A8hjv6talBjRvGVy9JJEVxw HeUnxi2IWdY2Cf8VlHUOpM116nyaOVtxHu/FaWWYhXtZ7z9w/0S8QtIQumKt7d58 5d/BiP5l5dfZvmlircR5bGjXw9n1Bgo= -----END CERTIFICATE-----Generated at Sun Nov 15 13:36:04 2026 by rpki-client