$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa File: 5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa (raw, json) Hash identifier: 04LX4GuEqfhNZIka7GbL2uQKiGIC4fMR7oNdHcl1hE0= Subject key identifier: 4E:80:5B:2B:62:05:E1:51:C0:C9:B1:33:99:F6:25:C6:03:9F:1F:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49869749F10CFB29E9A75180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:97:49:f1:0c:fb:29:e9:a7:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=83e562ba-08af-4b41-8533-0f992177d59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:73:86:02:e4:cf:c7:4a:4b:81:7e:14:14: cb:c9:81:77:8b:a7:c1:b9:a0:6b:d5:36:08:7d:4d: 87:01:8f:45:4b:32:c3:05:94:7a:e3:d8:7f:23:91: 90:49:b3:1d:8a:0d:85:89:ca:db:85:f7:08:4d:58: 83:d0:c0:75:de:51:ff:ab:21:40:f0:bd:4d:86:ab: 74:ae:8b:48:24:71:b9:29:48:e5:dd:47:45:54:e6: 9a:05:79:3c:a0:cc:62:6a:9e:f4:24:aa:fa:16:71: de:a9:6f:24:27:ee:dc:c4:ae:3b:d6:ed:1c:9b:40: cc:a6:5e:53:55:ae:c5:f7:6d:f8:c5:0f:7c:05:86: 72:d4:e0:2a:bb:83:ff:44:91:34:90:d3:ba:08:e6: 8b:3e:9c:f4:35:e9:25:79:ab:32:76:22:c5:11:45: 96:73:17:0e:e9:ad:92:e0:84:3d:37:3b:63:46:10: d0:08:76:81:85:e3:c3:47:1b:a3:0a:d9:1d:ca:cc: f6:0e:73:ab:1b:b6:dc:aa:b6:f7:ab:42:da:c3:a2: f1:9f:64:db:70:cc:d5:c8:0c:13:d0:33:e1:fe:34: 7e:5a:42:a7:7a:71:32:02:2f:cc:4a:0b:7e:dc:46: f4:6a:a7:72:62:a1:ce:a4:2a:8b:62:c4:d2:1c:3d: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:80:5B:2B:62:05:E1:51:C0:C9:B1:33:99:F6:25:C6:03:9F:1F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e1:50:26:f9:62:45:42:ca:91:47:dc:aa:2e:a1:b4:dc:64: 53:4f:7f:75:23:58:b2:91:87:b7:e3:59:bb:f7:7d:15:46:1b: b9:c4:2b:fc:ea:73:da:a7:0c:69:e9:14:4f:19:b1:16:d9:a8: 67:8f:73:81:16:f1:ea:2b:c9:3e:94:86:33:b1:97:bc:a8:a1: d5:79:4e:5f:e5:eb:4f:54:d7:cd:a8:1a:df:29:c5:71:0c:f6: 9b:c2:f8:54:80:1d:3e:32:76:62:39:53:c0:c8:b1:53:53:a7: 1e:4a:12:57:b0:76:f8:c5:ec:2e:4a:47:8a:27:e8:cc:5b:66: 1f:86:13:7b:7e:46:83:c0:74:9d:01:fa:2d:59:ad:b8:61:ad: c4:dc:7d:9c:7e:e7:74:24:34:af:91:73:ef:dd:f5:24:30:66: ad:68:ca:f3:ea:06:07:73:9c:ba:e4:ed:c4:bf:3b:f9:a5:3f: 26:00:80:a8:71:69:07:8e:45:78:c0:73:83:89:26:6f:54:2e: a1:da:39:60:fa:ab:00:cd:b2:b3:51:b8:ed:13:d2:7d:fd:09: 14:c0:dd:cd:56:06:f4:a1:37:98:2a:df:f1:de:0f:f5:57:5a: 53:8e:07:db:3c:dd:c6:65:e9:50:23:a3:16:c2:24:2c:a0:61: fc:f8:7a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhpdJ8Qz7KemnUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODNlNTYyYmEtMDhhZi00YjQxLTg1MzMtMGY5OTIxNzdkNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0apzhgLkz8dKS4F+FBTLyYF3i6fBuaBr1TYI fU2HAY9FSzLDBZR649h/I5GQSbMdig2FicrbhfcITViD0MB13lH/qyFA8L1Nhqt0 rotIJHG5KUjl3UdFVOaaBXk8oMxiap70JKr6FnHeqW8kJ+7cxK471u0cm0DMpl5T Va7F9234xQ98BYZy1OAqu4P/RJE0kNO6COaLPpz0NekleasydiLFEUWWcxcO6a2S 4IQ9NztjRhDQCHaBhePDRxujCtkdysz2DnOrG7bcqrb3q0Law6Lxn2TbcMzVyAwT 0DPh/jR+WkKnenEyAi/MSgt+3Eb0aqdyYqHOpCqLYsTSHD0HbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6AWytiBeFRwMmxM5n2JcYDnx8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE3NWE4MWQtZWRjZi0z OGNkLWFkMjUtNzlmMjNjNDg0OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvhUCb5YkVCypFH3KouobTcZFNPf3UjWLKRh7fjWbv3fRVGG7nEK/zq c9qnDGnpFE8ZsRbZqGePc4EW8eoryT6UhjOxl7yoodV5Tl/l609U182oGt8pxXEM 9pvC+FSAHT4ydmI5U8DIsVNTpx5KElewdvjF7C5KR4on6MxbZh+GE3t+RoPAdJ0B +i1ZrbhhrcTcfZx+53QkNK+Rc+/d9SQwZq1oyvPqBgdznLrk7cS/O/mlPyYAgKhx aQeORXjAc4OJJm9ULqHaOWD6qwDNsrNRuO0T0n39CRTA3c1WBvShN5gq3/HeD/VX WlOOB9s83cZl6VAjoxbCJCygYfz4eos= -----END CERTIFICATE-----Generated at Fri Sep 25 17:21:28 2026 by rpki-client