$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/74d7280d-a15d-3b9f-9471-9582949cb5e0.roa File: 74d7280d-a15d-3b9f-9471-9582949cb5e0.roa (raw, json) Hash identifier: ojnrBT5C/pRp/A32ykst5SFk6kWpm/u3H79bMMHXOFE= Subject key identifier: 60:C6:03:8E:B5:95:D7:D3:1A:EB:34:2B:87:E1:F1:98:63:15:DD:A8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FAB28B83DD597C0AB84816600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/74d7280d-a15d-3b9f-9471-9582949cb5e0.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 192.178.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:b8:3d:d5:97:c0:ab:84:81:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=e2cbb6d0-b45f-4cb9-8d9d-e1a9b62be140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:56:07:5f:8a:7a:f8:af:8a:5b:f8:57:ca: 3e:39:9f:2b:24:17:11:cb:b0:f7:fe:11:fa:8e:4c: f5:67:ab:fb:83:cb:09:7b:c6:6a:25:a0:41:7d:aa: 3b:b9:c7:0d:e4:9d:06:ff:cc:4d:d0:a5:00:db:05: 76:fd:71:0c:45:3a:fc:84:53:75:9b:3a:26:d5:4d: 06:98:b6:4f:5e:5e:ae:23:a0:87:d7:4c:19:a1:f6: fd:7c:58:d6:9a:51:b6:d3:d7:15:65:8d:0f:80:aa: 16:77:62:5d:ab:8f:9a:db:ec:4a:10:56:fa:6b:9c: 4c:9f:25:a1:61:f0:41:17:be:34:e4:b2:b1:3d:71: cc:5e:5c:2a:60:2d:c0:f3:b1:3a:06:83:c4:b4:89: c6:f0:19:0e:db:72:38:95:94:1b:1e:2b:33:d3:ce: 38:1c:a3:3a:2f:f3:0e:5d:78:6e:a2:a0:cc:f8:d7: 98:69:62:59:d0:2c:81:59:26:c3:b4:cf:f0:3e:5e: c9:53:ed:e6:64:35:2d:ad:83:9d:c5:9a:7f:23:27: 28:9e:8c:7d:62:94:fc:d9:c4:19:21:52:0e:54:7b: 9b:b1:7e:3e:f9:d6:e7:6c:18:da:c2:5d:b0:e6:29: 23:87:cf:62:c6:cf:ab:3f:c7:a8:13:a2:5c:f3:9f: fc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C6:03:8E:B5:95:D7:D3:1A:EB:34:2B:87:E1:F1:98:63:15:DD:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/74d7280d-a15d-3b9f-9471-9582949cb5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:20:ca:11:01:d7:b9:49:12:91:aa:00:17:3a:0e:96:c7:62: 1b:3b:66:90:d6:f7:e3:21:e3:7b:f7:6c:cc:93:b9:b0:e2:d9: a7:b9:61:8a:ce:99:87:3c:c0:8b:90:ad:e3:e7:05:b7:a3:3a: 49:ae:28:ef:cf:01:ed:5d:ea:8a:5d:a7:6b:cc:aa:2d:8d:65: c4:38:6c:78:89:ba:dc:fa:76:fa:a4:f5:dc:c1:8f:50:ae:46: d3:4d:d2:d0:3b:56:2b:f2:ae:49:42:ba:82:d7:4d:ba:10:7b: 74:66:64:8c:96:74:72:c4:ba:2c:87:42:55:34:53:2a:9c:28: 63:e6:96:c3:b9:61:32:3e:1b:32:04:8d:d2:96:5c:aa:a9:c4: 66:b5:97:83:77:44:e7:45:ae:05:03:37:47:49:94:33:59:90: c5:6d:f6:c4:fa:44:a9:cb:42:1e:46:63:3d:91:2d:ba:14:93: 9c:bc:2d:77:19:eb:07:de:c6:76:4c:4e:83:4a:58:1d:81:0d: 5b:38:74:fc:50:b7:7b:8c:b4:f7:c2:2c:c5:64:9f:9e:6f:76: 4c:2e:d1:70:67:dc:9b:41:15:af:02:1e:5c:26:1e:70:cd:56: e0:a4:95:df:94:11:90:e5:01:d1:77:23:67:83:24:71:9d:d4: 42:7e:db:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKLg91ZfAq4SBZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk ZTJjYmI2ZDAtYjQ1Zi00Y2I5LThkOWQtZTFhOWI2MmJlMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0tWB1+Kevivilv4V8o+OZ8rJBcRy7D3/hH6 jkz1Z6v7g8sJe8ZqJaBBfao7uccN5J0G/8xN0KUA2wV2/XEMRTr8hFN1mzom1U0G mLZPXl6uI6CH10wZofb9fFjWmlG209cVZY0PgKoWd2Jdq4+a2+xKEFb6a5xMnyWh YfBBF7405LKxPXHMXlwqYC3A87E6BoPEtInG8BkO23I4lZQbHisz0844HKM6L/MO XXhuoqDM+NeYaWJZ0CyBWSbDtM/wPl7JU+3mZDUtrYOdxZp/Iyconox9YpT82cQZ IVIOVHubsX4++dbnbBjawl2w5ikjh89ixs+rP8eoE6Jc85/8VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDGA461ldfTGus0K4fh8ZhjFd2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzRkNzI4MGQtYTE1ZC0z YjlmLTk0NzEtOTU4Mjk0OWNiNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFggyhEB17lJEpGqABc6DpbHYhs7ZpDW9+Mh43v3bMyTubDi2ae5YYrO mYc8wIuQrePnBbejOkmuKO/PAe1d6opdp2vMqi2NZcQ4bHiJutz6dvqk9dzBj1Cu RtNN0tA7VivyrklCuoLXTboQe3RmZIyWdHLEuiyHQlU0UyqcKGPmlsO5YTI+GzIE jdKWXKqpxGa1l4N3ROdFrgUDN0dJlDNZkMVt9sT6RKnLQh5GYz2RLboUk5y8LXcZ 6wfexnZMToNKWB2BDVs4dPxQt3uMtPfCLMVkn55vdkwu0XBn3JtBFa8CHlwmHnDN VuCkld+UEZDlAdF3I2eDJHGd1EJ+2xk= -----END CERTIFICATE-----Generated at Sun Nov 15 21:23:55 2026 by rpki-client