$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5cd48e39-b548-3e67-8326-c4a6026ca913.roa File: 5cd48e39-b548-3e67-8326-c4a6026ca913.roa (raw, json) Hash identifier: gTLL5yAiREXGSfRTw2C5K846dNWMOCr+gCNK/RND4GI= Subject key identifier: FE:8C:4D:ED:1F:15:84:7A:FB:3B:8A:A5:A3:A5:4D:AE:3D:3F:BC:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D1A072A510677AF465940 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5cd48e39-b548-3e67-8326-c4a6026ca913.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:1a:07:2a:51:06:77:af:46:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5cb2ea8d-5a00-4578-a13c-c75956e5591f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:b9:40:31:e0:7c:b9:fe:9f:28:2d:de:44: 42:b2:ba:39:73:09:76:92:71:ba:33:29:c1:3d:83: e4:b6:a5:f7:28:99:ef:e0:2e:a3:7c:5b:74:d9:01: 04:d5:01:95:07:a8:0a:be:30:e8:5f:e8:b8:ac:b2: 87:b4:d0:11:14:4c:a6:72:a8:6f:36:e2:7c:a5:63: d7:63:36:e0:d1:21:aa:ef:35:88:58:25:35:ea:9c: 2f:a8:9d:d4:e1:c5:3c:0a:0a:ed:aa:76:d2:82:08: 80:94:d7:98:57:a2:09:3f:97:00:28:06:a0:57:ab: 67:cc:89:9e:df:02:87:bb:bd:36:0e:5a:84:39:1c: d0:52:27:c4:4b:a8:1e:75:f0:0c:9b:84:23:ac:5d: 89:50:c3:59:e5:c4:53:41:b3:e5:d6:7c:2d:d4:63: f7:a0:77:9e:9f:1e:f1:38:44:6f:b2:b9:ca:25:a9: 0a:4d:23:6b:d6:cf:af:ab:1b:84:06:04:ca:90:c3: 27:3f:97:42:2d:aa:88:b0:59:99:9c:21:dc:bb:94: 7f:79:cd:e6:d3:e3:7a:34:09:be:dd:13:5b:94:31: 4d:9c:93:e9:eb:f8:c0:ca:6d:9a:ee:54:ba:5f:fb: e0:b4:20:e8:c3:1d:b7:d6:c9:47:5b:6c:7a:59:b8: fd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8C:4D:ED:1F:15:84:7A:FB:3B:8A:A5:A3:A5:4D:AE:3D:3F:BC:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5cd48e39-b548-3e67-8326-c4a6026ca913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:76:c4:56:9b:42:81:3c:f9:fe:25:bd:6d:73:fb:c9:4e:5a: e1:95:09:19:67:fa:ad:cd:32:91:81:f0:67:40:1f:56:ce:ef: 96:f4:c2:13:80:39:61:b7:54:71:c8:d0:22:f4:40:80:9d:97: 1f:1c:11:89:f8:33:a1:1e:6b:b3:20:05:b7:73:67:0d:bf:fc: e7:94:7e:2f:19:ba:38:36:9f:7f:70:d4:19:e6:58:62:45:0e: eb:ba:8a:a5:ec:c4:93:f0:cd:d8:7c:3e:0f:99:99:33:22:44: 68:ac:16:70:8f:89:bd:ed:61:68:37:65:d2:e9:57:bf:c6:bc: 81:e0:04:06:6f:5d:d4:dc:11:5c:89:fb:f2:fa:e9:56:90:b1: 09:f7:b5:56:93:33:ae:fb:c8:5c:fd:fa:f6:85:e9:7d:6b:c7: ea:f8:1a:0d:0e:8a:d6:2c:e3:9b:2b:38:92:eb:70:6c:a0:0d: 15:6d:c0:62:ae:9c:b8:b0:b9:6d:12:ff:81:7b:af:7d:6d:24: 1d:1b:36:56:7d:ac:20:23:ee:65:4d:27:0a:e3:80:f5:87:89: 82:2d:7f:76:38:2c:c3:f4:4a:fc:6a:d5:4e:b7:e9:36:4a:73: c8:ce:a3:7e:72:35:a7:d9:eb:79:04:76:dd:e7:6c:22:d1:31: 2c:d6:a6:92 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JfRoHKlEGd69GWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWNiMmVhOGQtNWEwMC00NTc4LWExM2MtYzc1OTU2ZTU1OTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIy5QDHgfLn+nygt3kRCsro5cwl2knG6MynB PYPktqX3KJnv4C6jfFt02QEE1QGVB6gKvjDoX+i4rLKHtNARFEymcqhvNuJ8pWPX Yzbg0SGq7zWIWCU16pwvqJ3U4cU8CgrtqnbSggiAlNeYV6IJP5cAKAagV6tnzIme 3wKHu702DlqEORzQUifES6gedfAMm4QjrF2JUMNZ5cRTQbPl1nwt1GP3oHeenx7x OERvsrnKJakKTSNr1s+vqxuEBgTKkMMnP5dCLaqIsFmZnCHcu5R/ec3m0+N6NAm+ 3RNblDFNnJPp6/jAym2a7lS6X/vgtCDowx231slHW2x6Wbj9jQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP6MTe0fFYR6+zuKpaOlTa49P7wsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWNkNDhlMzktYjU0OC0z ZTY3LTgzMjYtYzRhNjAyNmNhOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBwLIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAN3bEVptCgTz5/iW9bXP7yU5a4ZUJGWf6rc0ykYHwZ0AfVs7vlvTCE4A5 YbdUccjQIvRAgJ2XHxwRifgzoR5rsyAFt3NnDb/855R+Lxm6ODaff3DUGeZYYkUO 67qKpezEk/DN2Hw+D5mZMyJEaKwWcI+Jve1haDdl0ulXv8a8geAEBm9d1NwRXIn7 8vrpVpCxCfe1VpMzrvvIXP369oXpfWvH6vgaDQ6K1izjmys4kutwbKANFW3AYq6c uLC5bRL/gXuvfW0kHRs2Vn2sICPuZU0nCuOA9YeJgi1/djgsw/RK/GrVTrfpNkpz yM6jfnI1p9nreQR23edsItExLNamkg== -----END CERTIFICATE-----Generated at Fri Sep 25 20:37:27 2026 by rpki-client