$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bcfd52c-8334-38de-a232-88865e756a3a.roa File: 3bcfd52c-8334-38de-a232-88865e756a3a.roa (raw, json) Hash identifier: nS6tlvYKxH8StX3Fjow4kr/VeEMgVkxI17rRptOedxw= Subject key identifier: D0:1C:C0:E1:1F:7F:7D:8E:1D:63:D4:E3:8B:8E:CE:BD:AB:B7:21:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4974D4FB41D8AED880D8B480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bcfd52c-8334-38de-a232-88865e756a3a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d4:fb:41:d8:ae:d8:80:d8:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bc63a54a-8138-4f70-b375-91c73180eeae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:d5:77:83:9b:ce:01:d5:ca:da:ee:22:4f: 29:80:df:69:63:de:f2:90:71:e7:38:32:47:bd:68: d7:71:b8:6d:f9:c7:ef:bd:31:f8:90:fd:2a:1a:66: a0:52:a0:18:93:8d:1d:73:0c:1d:2c:f1:25:d7:00: 55:3a:d6:d0:8d:3f:1b:b4:63:48:43:ae:24:e1:78: 24:db:41:72:c3:fe:b3:aa:a1:12:c7:04:6d:d9:b8: 85:3e:fe:af:d0:17:0c:93:42:3a:b7:5b:c0:5d:c9: 77:10:7f:de:22:ff:a3:08:fd:56:d3:24:a6:17:54: ad:de:73:b0:e3:25:b3:67:f2:6d:e4:32:5a:20:fc: 0a:ba:1b:08:a3:33:ab:0f:33:f4:30:0e:38:8f:5a: ae:10:06:3a:80:78:b2:f7:41:d5:1d:ed:65:39:67: d0:98:4b:95:d2:28:54:21:b8:6f:b5:e5:7d:7b:35: cb:82:3d:ad:36:98:5a:0c:f4:b0:43:c2:ee:47:b1: 68:39:ab:49:5f:e8:a9:a0:87:0e:5b:c7:87:c4:37: 5f:cd:bf:67:18:fc:44:8b:8a:ff:47:4c:7a:8f:f2: 7f:0f:3c:a5:94:54:0c:d9:db:5b:38:16:e5:4c:98: 05:ee:3f:71:05:d1:8d:c0:c1:f1:64:3a:1f:7b:87: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1C:C0:E1:1F:7F:7D:8E:1D:63:D4:E3:8B:8E:CE:BD:AB:B7:21:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bcfd52c-8334-38de-a232-88865e756a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:57:e1:69:8c:59:4e:bc:bb:1b:07:18:d7:c7:d8:58:0c:61: 8e:79:87:b9:a3:64:ef:f7:77:2e:ab:45:a7:26:d6:33:70:fa: 06:58:82:91:74:3e:1d:f4:10:70:80:ec:32:6c:cd:6d:57:ba: 5e:b1:3d:ea:4e:33:2d:ab:51:f4:f2:36:45:cc:7f:fd:ef:96: 4f:5e:6e:a3:18:0c:e9:08:33:89:16:45:6c:27:55:07:db:a5: a8:51:cc:d0:5b:33:a1:3b:a5:60:8c:dd:8e:1a:34:c6:21:b9: c7:14:ea:bc:51:af:46:05:5c:17:f5:9b:ee:e9:b5:c5:08:2c: f4:d7:02:43:c5:bd:6c:82:23:d7:7b:db:ae:db:2c:5f:a8:bd: ab:40:e8:e8:e7:73:fc:cd:64:3a:52:ec:3a:61:ce:ba:d5:f0: e2:c1:6f:25:72:f7:f2:96:d1:ad:3e:3b:a3:c9:57:bc:3f:aa: 39:f4:cc:f2:40:7e:7c:d0:df:38:70:72:e8:5f:81:57:1c:ac: 6a:95:67:2e:67:11:76:e0:20:a5:cd:ee:51:ca:40:b8:31:f0: f3:98:41:a1:fe:ef:9f:13:9a:94:cd:bc:c3:29:39:4b:b6:25: f9:cd:09:ee:2c:f3:72:45:95:51:e7:00:06:85:43:0b:de:26: c5:7d:29:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNT7Qdiu2IDYtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmM2M2E1NGEtODEzOC00ZjcwLWIzNzUtOTFjNzMxODBlZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDnVd4ObzgHVytruIk8pgN9pY97ykHHnODJH vWjXcbht+cfvvTH4kP0qGmagUqAYk40dcwwdLPEl1wBVOtbQjT8btGNIQ64k4Xgk 20Fyw/6zqqESxwRt2biFPv6v0BcMk0I6t1vAXcl3EH/eIv+jCP1W0ySmF1St3nOw 4yWzZ/Jt5DJaIPwKuhsIozOrDzP0MA44j1quEAY6gHiy90HVHe1lOWfQmEuV0ihU IbhvteV9ezXLgj2tNphaDPSwQ8LuR7FoOatJX+ipoIcOW8eHxDdfzb9nGPxEi4r/ R0x6j/J/DzyllFQM2dtbOBblTJgF7j9xBdGNwMHxZDofe4cKowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAcwOEff32OHWPU44uOzr2rtyFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2JjZmQ1MmMtODMzNC0z OGRlLWEyMzItODg4NjVlNzU2YTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZX4WmMWU68uxsHGNfH2FgMYY55h7mjZO/3dy6rRacm1jNw+gZYgpF0 Ph30EHCA7DJszW1Xul6xPepOMy2rUfTyNkXMf/3vlk9ebqMYDOkIM4kWRWwnVQfb pahRzNBbM6E7pWCM3Y4aNMYhuccU6rxRr0YFXBf1m+7ptcUILPTXAkPFvWyCI9d7 267bLF+ovatA6Ojnc/zNZDpS7DphzrrV8OLBbyVy9/KW0a0+O6PJV7w/qjn0zPJA fnzQ3zhwcuhfgVccrGqVZy5nEXbgIKXN7lHKQLgx8POYQaH+758TmpTNvMMpOUu2 JfnNCe4s83JFlVHnAAaFQwveJsV9KbQ= -----END CERTIFICATE-----Generated at Fri Sep 25 16:01:43 2026 by rpki-client