$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/993a330a-9f0e-3b76-97f2-eb34f17faea0.roa File: 993a330a-9f0e-3b76-97f2-eb34f17faea0.roa (raw, json) Hash identifier: pBN8/o6yelIywvCp4h5APANI4QFsPpNvqaLXkTH9khk= Subject key identifier: 21:08:C8:0D:12:D3:02:32:0F:A4:B6:8E:EA:24:13:E3:44:B7:20:EF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DC4005D8A5A5C743299667D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/993a330a-9f0e-3b76-97f2-eb34f17faea0.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 15169 IP address blocks: 192.178.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:5d:8a:5a:5c:74:32:99:66:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=081c5cbe-f655-41b7-9593-88b794e50e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e1:86:9a:45:cb:f9:66:bc:c6:82:57:23:8f: 26:1d:55:c4:0a:36:44:f1:cc:4e:46:98:a7:a4:a4: ed:dd:e2:eb:73:fd:b4:ce:0c:38:26:d5:02:45:2b: d1:e6:9c:56:2f:3c:6e:ae:49:91:d7:52:5e:d2:bc: e0:14:fb:44:93:7b:f3:0f:84:29:9c:25:a5:f3:2c: ba:8d:ab:e0:9d:c0:53:f7:21:63:21:4e:fb:d3:84: 43:1a:09:bb:4a:c7:2d:ce:ff:83:f3:fc:16:a1:4a: a8:30:4d:b4:43:38:56:c8:28:4c:6e:7f:c8:5d:83: e6:ab:54:fb:0d:12:b3:bb:24:0a:b2:5f:86:0d:73: e0:26:50:b3:e7:f5:e6:a3:6e:44:8d:e3:08:46:a6: c7:49:5c:9c:76:52:82:e7:3d:77:90:23:de:bd:49: 65:43:c3:87:34:c4:b4:92:71:df:78:68:e1:91:92: bd:3b:61:80:ad:f5:a2:88:31:a7:3b:17:c3:e0:52: c5:19:47:a2:9d:5a:b9:40:b1:70:33:e6:d4:ae:92: f2:54:d8:20:47:f0:5c:11:76:9b:ab:4b:3f:94:bf: 29:bf:d4:e5:82:68:43:a4:a6:69:5d:d3:47:c8:76: db:02:29:aa:19:ce:bd:ef:bb:9d:a1:d4:a6:07:37: fc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:08:C8:0D:12:D3:02:32:0F:A4:B6:8E:EA:24:13:E3:44:B7:20:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/993a330a-9f0e-3b76-97f2-eb34f17faea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:85:68:74:d2:a1:de:a9:64:5b:92:50:2b:77:f6:ea:31:3e: 83:b2:30:68:46:52:ca:9b:41:c2:10:07:20:d2:c4:b6:d5:5a: f0:d9:6a:6b:6b:1c:93:ff:89:59:11:31:4d:41:e7:b6:6e:a1: 0e:bc:20:19:af:87:c6:08:3a:26:e1:a9:f7:c1:11:07:9d:2f: f7:25:17:1e:d1:df:b6:cd:e2:b0:48:39:bb:c5:b4:7d:70:cc: 1a:8d:b0:ac:63:29:8d:de:45:39:66:d3:bf:94:21:68:6c:d9: d3:9f:d6:ca:02:54:28:ed:bb:a9:4f:af:23:b1:8e:a0:f0:aa: 7c:1f:cf:ab:61:b9:31:a1:ea:8e:a2:30:88:4d:a0:26:83:cf: 82:c9:47:a9:78:e0:4b:d3:0f:08:32:2f:71:07:80:51:e8:78: bc:90:43:27:9c:6d:98:a9:55:4a:d0:e7:b3:35:d7:24:66:bb: 42:a8:58:b6:2b:d4:23:ab:df:26:91:4c:5e:1a:c8:95:32:0c: 07:a1:de:73:5a:ae:69:dc:1f:b0:fa:d9:31:ee:42:7e:6c:e8: c1:23:ff:29:d7:7f:38:56:3a:16:f5:0d:d4:5d:49:0d:ac:70: 7d:51:40:c0:95:68:9e:59:8c:03:f1:97:c9:98:b2:6f:f5:ae: c9:16:12:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAF2KWlx0MplmfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk MDgxYzVjYmUtZjY1NS00MWI3LTk1OTMtODhiNzk0ZTUwZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+GGmkXL+Wa8xoJXI48mHVXECjZE8cxORpin pKTt3eLrc/20zgw4JtUCRSvR5pxWLzxurkmR11Je0rzgFPtEk3vzD4QpnCWl8yy6 javgncBT9yFjIU7704RDGgm7Ssctzv+D8/wWoUqoME20QzhWyChMbn/IXYPmq1T7 DRKzuyQKsl+GDXPgJlCz5/Xmo25EjeMIRqbHSVycdlKC5z13kCPevUllQ8OHNMS0 knHfeGjhkZK9O2GArfWiiDGnOxfD4FLFGUeinVq5QLFwM+bUrpLyVNggR/BcEXab q0s/lL8pv9TlgmhDpKZpXdNHyHbbAimqGc6977udodSmBzf8uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEIyA0S0wIyD6S2juokE+NEtyDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTkzYTMzMGEtOWYwZS0z Yjc2LTk3ZjItZWIzNGYxN2ZhZWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyFaHTSod6pZFuSUCt39uoxPoOyMGhGUsqbQcIQByDSxLbVWvDZamtr HJP/iVkRMU1B57ZuoQ68IBmvh8YIOibhqffBEQedL/clFx7R37bN4rBIObvFtH1w zBqNsKxjKY3eRTlm07+UIWhs2dOf1soCVCjtu6lPryOxjqDwqnwfz6thuTGh6o6i MIhNoCaDz4LJR6l44EvTDwgyL3EHgFHoeLyQQyecbZipVUrQ57M11yRmu0KoWLYr 1COr3yaRTF4ayJUyDAeh3nNarmncH7D62THuQn5s6MEj/ynXfzhWOhb1DdRdSQ2s cH1RQMCVaJ5ZjAPxl8mYsm/1rskWEls= -----END CERTIFICATE-----Generated at Wed May 13 03:24:41 2026 by rpki-client