$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8798177b-2499-386b-aa9b-b44131f0b135.roa File: 8798177b-2499-386b-aa9b-b44131f0b135.roa (raw, json) Hash identifier: FOSJ/b3PYaYb3j/VicIfQ7aTWPjRssynvHEqBepqPV0= Subject key identifier: 4A:C7:7F:95:5B:AA:76:E7:1D:84:9E:47:F6:FD:42:54:E2:C1:6A:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7F05A918FFC4CE12F4000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8798177b-2499-386b-aa9b-b44131f0b135.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f0:5a:91:8f:fc:4c:e1:2f:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=6532d262-ddd0-462d-9bfc-848b5b735629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6b:14:8c:28:6e:a4:6b:36:56:38:84:fc:58: 18:de:b9:a6:64:30:02:d7:c6:9a:10:f5:3b:b3:45: c3:00:f1:b4:ff:cb:0e:62:6c:b4:d7:66:37:13:5a: 4f:28:4b:07:36:c0:67:80:cc:5f:f4:1f:34:65:c3: 30:ec:21:ab:cd:e5:9d:44:89:cd:19:24:a9:25:3a: 1e:e6:1b:bc:4f:79:51:bc:56:b6:fe:e1:f9:2a:ad: ef:92:35:dd:29:ca:ac:eb:f8:81:ab:8a:d5:3d:22: 14:71:43:52:ec:8e:f5:62:47:08:ba:56:9c:47:8a: 51:cd:e0:da:79:81:5e:ab:f7:9f:82:28:d4:4b:5e: 03:2f:93:75:2c:f5:a2:24:f2:81:80:d0:e0:8b:97: 01:ea:6f:03:81:8f:c2:58:29:6d:9a:39:c8:4d:ed: 91:f4:5c:61:29:cf:d4:1f:6d:52:35:65:cb:57:d8: 59:ba:e4:8f:b2:a7:05:da:c9:3d:0a:1e:b9:c0:ba: a7:1e:76:70:ca:e0:bd:ad:57:1c:f5:a6:53:43:36: 88:d7:21:12:b1:9b:00:ff:5b:63:13:26:25:5f:6a: bf:46:ed:ce:9c:3f:b6:65:99:c4:5f:7d:ec:df:cb: eb:72:6a:80:9e:ef:8d:00:ec:5c:72:ac:a0:16:23: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C7:7F:95:5B:AA:76:E7:1D:84:9E:47:F6:FD:42:54:E2:C1:6A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8798177b-2499-386b-aa9b-b44131f0b135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b9:6e:52:55:b6:a6:cb:1d:42:45:22:51:6b:e5:15:42:62: bb:a5:ed:d0:74:89:03:3d:37:c7:72:1b:04:ce:02:d5:ec:a2: fd:d1:be:3a:fd:7f:a7:8d:04:d9:6d:ac:20:0b:19:3f:fa:61: 41:31:64:bf:d7:93:14:7a:44:4f:2e:68:54:3b:72:1d:a1:68: b5:bb:e2:b0:4d:8b:3e:8f:06:db:0d:89:fb:a3:ce:29:3c:f6: 08:97:4e:71:c4:c1:4e:2f:ac:65:04:2e:b8:c6:42:2a:02:98: b3:79:62:71:9e:e8:49:94:17:1c:73:55:49:e1:b3:9a:fc:03: 89:a6:6f:9e:13:6f:42:eb:7f:0a:8c:fb:0f:33:4e:d8:49:41: 81:ca:54:9d:73:ff:d2:30:a1:db:1d:d4:8e:74:34:89:b7:34: 52:4b:c8:27:03:00:19:5b:8e:af:b4:cc:87:8c:f5:e0:4f:c5: 9d:8d:78:1e:f5:ae:fe:76:ee:0e:0a:14:bd:bf:a6:b8:1e:e7: ff:b5:c6:77:6e:e7:83:0f:29:6b:7d:4b:9c:2e:39:87:b0:fe: 60:4d:4f:aa:f3:99:ec:e7:3a:82:ce:42:57:c4:ca:98:e1:b0: ca:63:11:fe:d0:8e:7b:80:35:9e:66:91:05:17:c3:23:78:49: 9f:91:7d:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/BakY/8TOEvQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NjUzMmQyNjItZGRkMC00NjJkLTliZmMtODQ4YjViNzM1NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2sUjChupGs2VjiE/FgY3rmmZDAC18aaEPU7 s0XDAPG0/8sOYmy012Y3E1pPKEsHNsBngMxf9B80ZcMw7CGrzeWdRInNGSSpJToe 5hu8T3lRvFa2/uH5Kq3vkjXdKcqs6/iBq4rVPSIUcUNS7I71YkcIulacR4pRzeDa eYFeq/efgijUS14DL5N1LPWiJPKBgNDgi5cB6m8DgY/CWCltmjnITe2R9FxhKc/U H21SNWXLV9hZuuSPsqcF2sk9Ch65wLqnHnZwyuC9rVcc9aZTQzaI1yESsZsA/1tj EyYlX2q/Ru3OnD+2ZZnEX33s38vrcmqAnu+NAOxccqygFiMDlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErHf5VbqnbnHYSeR/b9QlTiwWr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODc5ODE3N2ItMjQ5OS0z ODZiLWFhOWItYjQ0MTMxZjBiMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJK5blJVtqbLHUJFIlFr5RVCYrul7dB0iQM9N8dyGwTOAtXsov3Rvjr9 f6eNBNltrCALGT/6YUExZL/XkxR6RE8uaFQ7ch2haLW74rBNiz6PBtsNifujzik8 9giXTnHEwU4vrGUELrjGQioCmLN5YnGe6EmUFxxzVUnhs5r8A4mmb54Tb0LrfwqM +w8zTthJQYHKVJ1z/9Iwodsd1I50NIm3NFJLyCcDABlbjq+0zIeM9eBPxZ2NeB71 rv527g4KFL2/prge5/+1xndu54MPKWt9S5wuOYew/mBNT6rzmeznOoLOQlfEypjh sMpjEf7QjnuANZ5mkQUXwyN4SZ+RfbI= -----END CERTIFICATE-----Generated at Thu Sep 24 08:57:18 2026 by rpki-client