$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7584c72d-0320-345d-86d9-7f5c25ec082a.roa File: 7584c72d-0320-345d-86d9-7f5c25ec082a.roa (raw, json) Hash identifier: JZmgLPo4u+WcuPjP51MWSSkx2HIAABWG7Pd13DvO5bM= Subject key identifier: DE:76:DC:C7:60:B1:0E:14:00:2F:AD:2E:98:4B:3F:58:84:DE:AB:C0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EE6EE4FABE6A1531E640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7584c72d-0320-345d-86d9-7f5c25ec082a.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ee:6e:e4:fa:be:6a:15:31:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=a0dcee1d-920c-4c04-b327-a6d4c5202a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c4:78:c4:d0:06:60:71:0b:2c:0c:64:60:50: bf:24:81:d0:e1:82:6c:f5:98:8e:2d:b7:85:2e:d7: ac:e2:6c:7a:c8:4b:de:26:05:ef:6d:27:e8:23:3f: 55:97:40:e6:5a:ca:f1:c3:f3:fb:fe:a3:0a:60:05: 0a:7d:11:04:6c:93:05:ff:d5:b4:3b:da:f7:25:61: d1:5e:62:c5:d5:be:c1:b8:74:72:f2:ff:32:56:94: 84:a5:52:f9:8d:d3:a5:81:9b:be:04:9b:b8:79:00: f7:0f:20:d1:88:38:0b:8d:94:98:00:a4:df:d7:ca: 7f:24:c7:d3:4e:eb:4f:7e:4e:dd:41:9f:41:6b:19: 53:d7:4f:a1:03:e9:d6:4f:d2:24:ca:e0:b0:2a:e3: 19:8f:79:10:12:10:ff:23:a1:9c:e7:3e:20:ec:ec: 39:40:9b:f2:f0:9a:c1:91:18:e7:01:8a:68:e1:f2: 99:d2:6c:cf:28:92:93:51:5f:10:55:fd:30:fb:cb: 4d:c0:81:0f:e7:21:f0:3f:3b:b1:ae:4d:cf:17:7d: d3:bc:a4:60:bf:97:07:8c:da:84:fb:6f:41:66:b9: 73:8f:f2:35:fe:41:da:d7:18:14:68:50:78:c9:f3: d2:a7:f9:e9:40:20:9d:9a:d2:5c:46:b3:5a:b5:30: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:76:DC:C7:60:B1:0E:14:00:2F:AD:2E:98:4B:3F:58:84:DE:AB:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7584c72d-0320-345d-86d9-7f5c25ec082a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7d:20:ff:d5:9a:7a:db:97:48:c8:47:8b:67:19:a7:59:e5: 9a:11:e9:67:67:e2:ad:10:0c:bd:15:39:72:91:d9:c7:77:a6: 3e:07:bd:bd:b8:58:5d:fe:86:0f:57:23:ee:9f:48:9e:03:a9: 2e:82:22:36:9d:bf:b2:08:33:de:3f:93:81:88:93:ec:37:f7: f9:11:7f:9d:24:b3:86:05:87:aa:d1:63:87:ad:45:61:d5:dc: f9:af:4d:44:07:f4:f9:0c:f2:5b:6c:85:35:d0:87:d1:71:14: 92:a1:5e:3f:d4:b1:99:73:69:ca:e0:92:d2:fd:eb:9f:b2:66: 0f:06:34:3e:ad:de:ad:1a:9b:69:6a:48:22:cd:44:56:cd:ff: c9:4b:a4:4f:e5:3e:6d:20:e0:bb:96:16:0d:56:ba:d9:17:54: 14:92:76:80:6b:e7:b5:ec:36:25:13:bf:09:75:06:c5:08:06: 42:a8:32:50:1a:10:bc:e6:32:3e:6f:fd:28:2c:49:d8:49:65: 58:f9:03:c7:45:2b:f4:e2:8d:6c:2f:d6:21:d5:d6:21:71:32: 01:95:8f:1a:31:26:5d:35:4a:b4:32:83:51:78:e2:f8:c9:d8: 66:5a:06:32:4b:ed:00:e3:a8:f4:08:e6:1d:ea:b9:03:ae:cf: c8:94:bb:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+5u5Pq+ahUx5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk YTBkY2VlMWQtOTIwYy00YzA0LWIzMjctYTZkNGM1MjAyYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8R4xNAGYHELLAxkYFC/JIHQ4YJs9ZiOLbeF Ltes4mx6yEveJgXvbSfoIz9Vl0DmWsrxw/P7/qMKYAUKfREEbJMF/9W0O9r3JWHR XmLF1b7BuHRy8v8yVpSEpVL5jdOlgZu+BJu4eQD3DyDRiDgLjZSYAKTf18p/JMfT TutPfk7dQZ9BaxlT10+hA+nWT9IkyuCwKuMZj3kQEhD/I6Gc5z4g7Ow5QJvy8JrB kRjnAYpo4fKZ0mzPKJKTUV8QVf0w+8tNwIEP5yHwPzuxrk3PF33TvKRgv5cHjNqE +29BZrlzj/I1/kHa1xgUaFB4yfPSp/npQCCdmtJcRrNatTC58wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN523MdgsQ4UAC+tLphLP1iE3qvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzU4NGM3MmQtMDMyMC0z NDVkLTg2ZDktN2Y1YzI1ZWMwODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt9IP/Vmnrbl0jIR4tnGadZ5ZoR6Wdn4q0QDL0VOXKR2cd3pj4Hvb24 WF3+hg9XI+6fSJ4DqS6CIjadv7IIM94/k4GIk+w39/kRf50ks4YFh6rRY4etRWHV 3PmvTUQH9PkM8ltshTXQh9FxFJKhXj/UsZlzacrgktL965+yZg8GND6t3q0am2lq SCLNRFbN/8lLpE/lPm0g4LuWFg1WutkXVBSSdoBr57XsNiUTvwl1BsUIBkKoMlAa ELzmMj5v/SgsSdhJZVj5A8dFK/TijWwv1iHV1iFxMgGVjxoxJl01SrQyg1F44vjJ 2GZaBjJL7QDjqPQI5h3quQOuz8iUu5k= -----END CERTIFICATE-----Generated at Thu Sep 24 20:44:51 2026 by rpki-client