$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/88f50b68-e113-32d5-a451-470c4836caa1.roa File: 88f50b68-e113-32d5-a451-470c4836caa1.roa (raw, json) Hash identifier: aLwHEBLieLlFeTHGh30/5RwWVUbYjNnC/ljHg5pKPZA= Subject key identifier: ED:AA:57:4B:4D:81:D5:57:FE:A3:B6:9A:45:E1:F5:04:71:75:5A:4E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EE40D1F239AA2BB44000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/88f50b68-e113-32d5-a451-470c4836caa1.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ee:40:d1:f2:39:aa:2b:b4:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=9975c062-5173-4037-a210-7499a8deb810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:25:4a:ae:e2:4a:e8:a9:0f:fc:88:8b:c7: a1:17:7e:23:0b:d6:82:b8:54:5a:0b:81:79:aa:e9: 1c:43:11:60:c0:67:c1:2d:26:3b:7a:fc:da:76:a1: 6c:7a:bb:d5:8a:8c:bf:0a:73:80:dd:06:dd:9d:4f: 6c:55:40:fd:e8:9f:7b:17:1c:ac:98:37:4e:e5:2c: 61:e7:ad:36:dc:dd:c5:0c:08:ae:30:17:cb:ed:ca: e5:88:9c:f5:0e:a7:f8:d4:cb:36:25:4d:89:e1:df: 57:13:8e:3f:3d:37:0a:09:a3:91:f3:15:f8:c6:90: 38:d7:29:50:db:09:bd:92:89:94:35:09:e0:f0:cf: df:71:d6:d9:e5:d8:a6:32:5f:26:e4:ee:7c:37:a2: 5b:f5:b1:74:98:a9:b6:de:59:fc:62:8f:fa:58:d7: 95:19:5e:a3:3a:f6:02:2a:d9:f2:76:9d:92:71:78: 4e:c3:44:08:ba:36:17:bc:a2:f9:86:13:df:37:bd: a8:e6:64:39:6e:e9:b2:7c:d0:73:3a:16:e9:d3:d4: a1:a5:22:9c:eb:c0:27:d9:42:8d:0e:ee:98:2a:93: 2e:7c:e6:ec:ef:b0:06:54:57:c4:e3:e4:48:9a:c2: 7d:95:fd:44:3b:3c:1b:29:1c:8d:03:8d:78:92:3c: b0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AA:57:4B:4D:81:D5:57:FE:A3:B6:9A:45:E1:F5:04:71:75:5A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/88f50b68-e113-32d5-a451-470c4836caa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:81:08:47:95:c1:3f:6e:e5:69:70:f9:40:0a:d7:b4:cc:3b: 6d:ac:70:87:10:02:e8:52:8c:9f:12:77:9a:fb:ed:22:df:9b: 5e:c4:fd:72:bd:53:1c:06:78:c5:22:44:2e:37:e1:61:ba:1a: bb:35:68:8b:81:4a:35:c8:e5:07:f9:88:37:56:30:23:74:4e: 19:1d:75:d3:29:7b:c8:70:1b:76:6c:a3:d3:91:68:8d:b4:0a: 0d:e7:4e:48:96:52:76:3b:b8:a1:87:af:66:cc:39:64:0c:96: fd:c2:30:66:e3:e4:3f:28:59:6d:d8:5d:26:ff:6f:74:88:18: e4:fb:ed:ee:89:60:5c:88:8a:9f:02:4b:f8:11:98:28:50:7e: 81:1b:34:53:c0:25:de:0f:be:33:ed:50:72:a9:c2:6a:20:19: b5:ab:9e:92:57:3b:d7:aa:bb:54:e1:e0:b2:8c:4c:24:89:40: e9:76:bb:ab:b2:3a:4a:52:ea:91:2c:52:a5:56:4a:c0:ce:e0: 53:37:69:17:d8:37:2b:ce:f5:ed:3d:ee:fc:56:26:be:26:ab: 62:13:04:98:e9:e2:90:43:d6:9c:b4:7b:d2:1e:86:c7:5b:b8: f6:ba:7a:32:7d:b3:37:c3:0b:99:85:a0:8e:92:40:04:b1:ec: 74:7d:8d:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+5A0fI5qiu0QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk OTk3NWMwNjItNTE3My00MDM3LWEyMTAtNzQ5OWE4ZGViODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZIlSq7iSuipD/yIi8ehF34jC9aCuFRaC4F5 qukcQxFgwGfBLSY7evzadqFservVioy/CnOA3QbdnU9sVUD96J97FxysmDdO5Sxh 56023N3FDAiuMBfL7crliJz1Dqf41Ms2JU2J4d9XE44/PTcKCaOR8xX4xpA41ylQ 2wm9komUNQng8M/fcdbZ5dimMl8m5O58N6Jb9bF0mKm23ln8Yo/6WNeVGV6jOvYC Ktnydp2ScXhOw0QIujYXvKL5hhPfN72o5mQ5bumyfNBzOhbp09ShpSKc68An2UKN Du6YKpMufObs77AGVFfE4+RImsJ9lf1EOzwbKRyNA414kjyw0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2qV0tNgdVX/qO2mkXh9QRxdVpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODhmNTBiNjgtZTExMy0z MmQ1LWE0NTEtNDcwYzQ4MzZjYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2BCEeVwT9u5Wlw+UAK17TMO22scIcQAuhSjJ8Sd5r77SLfm17E/XK9 UxwGeMUiRC434WG6Grs1aIuBSjXI5Qf5iDdWMCN0ThkdddMpe8hwG3Zso9ORaI20 Cg3nTkiWUnY7uKGHr2bMOWQMlv3CMGbj5D8oWW3YXSb/b3SIGOT77e6JYFyIip8C S/gRmChQfoEbNFPAJd4PvjPtUHKpwmogGbWrnpJXO9equ1Th4LKMTCSJQOl2u6uy OkpS6pEsUqVWSsDO4FM3aRfYNyvO9e097vxWJr4mq2ITBJjp4pBD1py0e9Iehsdb uPa6ejJ9szfDC5mFoI6SQASx7HR9jVU= -----END CERTIFICATE-----Generated at Thu Sep 24 23:30:36 2026 by rpki-client