$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d723e3-b1fb-3e4c-bd93-86f674ec3ffd.roa File: 67d723e3-b1fb-3e4c-bd93-86f674ec3ffd.roa (raw, json) Hash identifier: UYQUyeAVTRc12Sh9+HLiclNeOrSSzrvV9/+/HTgt99I= Subject key identifier: F9:48:B0:FF:C8:E7:60:9F:13:92:91:5C:C5:90:17:18:36:CE:3D:72 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49742B76672E9FDA08C3C9E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d723e3-b1fb-3e4c-bd93-86f674ec3ffd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:2b:76:67:2e:9f:da:08:c3:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=669c62ec-eef5-47b9-b6ad-c016273b2422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:43:f5:ee:f5:33:d8:ee:7b:af:46:09:08: 02:7e:76:98:5b:93:d5:89:09:9d:a4:09:57:ac:9c: f3:b2:8e:ed:84:41:79:72:b7:ac:89:52:66:30:08: 2d:89:af:77:1e:ba:21:3b:66:28:27:22:af:16:40: db:28:3b:d1:b8:cd:0a:72:d6:0f:0c:89:4d:03:57: ea:f1:52:76:bd:ba:69:1c:cf:5e:5c:51:a4:d3:37: 52:cd:b2:42:f9:15:65:25:13:a8:dd:5f:0c:71:92: 44:5c:eb:f7:37:5c:71:1e:cb:5f:c6:d1:13:a3:d4: 4d:b4:6e:03:a4:d2:dc:5b:4f:7f:92:f2:fb:a1:71: bf:13:64:98:76:fc:54:2f:d0:33:e5:96:7d:89:38: 86:f0:f0:20:4a:10:0f:b2:7a:fb:38:f9:0e:a6:f1: 55:73:67:90:48:7f:2a:52:21:5c:2e:38:f5:10:45: 65:3f:69:c1:21:fd:cf:4f:d8:f4:a1:d4:c1:c9:86: 95:60:d0:e3:e4:34:99:4c:6b:90:0b:3c:90:fd:51: f2:0c:e7:98:b7:ec:d8:f9:46:9f:46:b3:93:c6:07: 71:57:58:bb:34:7c:0b:62:08:1a:c9:15:05:aa:49: 5e:7a:af:c4:ad:5a:b8:ca:e9:69:5a:fe:83:0e:fa: ec:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:48:B0:FF:C8:E7:60:9F:13:92:91:5C:C5:90:17:18:36:CE:3D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67d723e3-b1fb-3e4c-bd93-86f674ec3ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:29:51:05:2b:7f:69:df:f9:3f:bd:ec:07:d2:00:43:68:87: 6a:9b:6c:5b:9f:1e:ad:62:0b:cc:17:ab:c7:cf:f4:39:e0:16: 93:a7:4d:04:00:c7:76:56:d8:a7:43:c3:e2:5b:22:f8:e6:a6: 0a:49:47:89:eb:43:30:fd:9b:e9:f5:d7:d8:aa:f9:4d:97:96: 42:7e:2d:a4:ea:18:91:c6:fb:d4:ba:54:ca:92:57:3d:d2:c7: 64:a9:60:9b:e1:89:28:80:a8:99:55:b3:02:d1:12:41:02:95: ea:b3:f8:e7:7e:7d:b3:1a:e9:bc:f7:83:bf:99:98:de:f4:51: 92:c7:94:86:f5:41:ef:93:f8:ef:83:03:81:ee:12:ac:6d:c5: 1c:e4:6c:8c:84:5b:b1:50:8a:a6:36:67:9a:de:31:f0:63:b6: 88:0d:68:b3:a4:44:1b:6b:84:07:8a:a2:70:8c:0f:c7:32:20: 7c:37:8b:56:2f:cb:89:97:ca:fd:ac:1a:9b:69:64:1f:3c:37: 7a:43:2a:9b:36:bb:3c:90:ea:0a:df:ad:a0:c3:75:a7:37:6c: bc:fd:a5:7b:0b:c4:11:35:21:ae:7a:65:4f:f2:59:00:fe:72: af:a4:46:b6:d3:cb:6f:0f:15:f4:41:41:61:bb:9e:a9:17:11: 02:3d:46:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdCt2Zy6f2gjDyeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjY5YzYyZWMtZWVmNS00N2I5LWI2YWQtYzAxNjI3M2IyNDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc1D9e71M9jue69GCQgCfnaYW5PViQmdpAlX rJzzso7thEF5cresiVJmMAgtia93HrohO2YoJyKvFkDbKDvRuM0KctYPDIlNA1fq 8VJ2vbppHM9eXFGk0zdSzbJC+RVlJROo3V8McZJEXOv3N1xxHstfxtETo9RNtG4D pNLcW09/kvL7oXG/E2SYdvxUL9Az5ZZ9iTiG8PAgShAPsnr7OPkOpvFVc2eQSH8q UiFcLjj1EEVlP2nBIf3PT9j0odTByYaVYNDj5DSZTGuQCzyQ/VHyDOeYt+zY+Uaf RrOTxgdxV1i7NHwLYggayRUFqkleeq/ErVq4yulpWv6DDvrs8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlIsP/I52CfE5KRXMWQFxg2zj1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjdkNzIzZTMtYjFmYi0z ZTRjLWJkOTMtODZmNjc0ZWMzZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIpUQUrf2nf+T+97AfSAENoh2qbbFufHq1iC8wXq8fP9DngFpOnTQQA x3ZW2KdDw+JbIvjmpgpJR4nrQzD9m+n119iq+U2XlkJ+LaTqGJHG+9S6VMqSVz3S x2SpYJvhiSiAqJlVswLREkECleqz+Od+fbMa6bz3g7+ZmN70UZLHlIb1Qe+T+O+D A4HuEqxtxRzkbIyEW7FQiqY2Z5reMfBjtogNaLOkRBtrhAeKonCMD8cyIHw3i1Yv y4mXyv2sGptpZB88N3pDKps2uzyQ6grfraDDdac3bLz9pXsLxBE1Ia56ZU/yWQD+ cq+kRrbTy28PFfRBQWG7nqkXEQI9Rgw= -----END CERTIFICATE-----Generated at Fri Sep 25 14:55:46 2026 by rpki-client