$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa File: a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa (raw, json) Hash identifier: DZhHOWvJfiShc82S+hBPwS8BeUda25gOViIqmSP8jRg= Subject key identifier: 70:8A:55:16:AE:60:99:6E:D9:CF:C6:B5:4D:8F:AE:E9:4F:87:CA:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EBB1F51571704E237F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:eb:b1:f5:15:71:70:4e:23:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=4d7deec4-9abe-4888-9178-ca6f9e7e6602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:a0:21:ee:00:cb:92:68:91:a4:0f:46:b0: 66:76:70:5f:d1:ba:27:5e:c3:10:10:b2:f8:06:0e: 86:f8:4d:48:78:e4:4c:74:e0:e2:0e:2c:ee:8e:b7: 8a:19:1f:3a:fe:38:2c:9e:40:54:b5:64:c5:53:0a: 0a:3a:f5:9b:ce:6b:0a:ea:61:12:36:6b:ac:71:4b: 02:6f:89:c7:77:09:dc:aa:12:4e:7e:c2:7f:ff:f9: 1e:58:08:e9:ac:fb:98:08:7d:71:5e:5e:05:3b:2f: 9f:c0:81:a2:a6:40:94:b7:04:26:8a:ad:b8:90:b8: c4:02:e5:79:99:f9:65:7e:ee:e6:28:23:06:ae:e3: 5f:77:60:c5:c2:95:3a:5a:54:69:67:5a:07:23:3b: cc:10:a4:48:36:c0:ee:87:2c:18:44:5b:2f:7f:fc: f5:6a:2a:35:c9:d4:17:93:20:d9:1e:79:57:51:79: a7:53:30:8a:5a:f7:6f:32:66:cb:32:43:1c:3b:b5: 3b:db:22:fd:88:88:56:22:0f:e3:c3:34:ef:78:6e: 5c:fa:f5:15:ff:b6:43:c3:5e:4e:08:1a:14:5f:72: a4:0d:54:ae:4e:16:7e:9c:05:46:ab:6d:14:21:87: c8:ce:b5:24:42:c2:a9:94:fc:70:ad:28:1f:bb:81: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8A:55:16:AE:60:99:6E:D9:CF:C6:B5:4D:8F:AE:E9:4F:87:CA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:54:3f:21:aa:c7:3c:8f:f0:44:e8:9a:a2:85:a1:c5:37:1a: 33:b5:b5:ca:80:94:1e:0c:86:a1:0e:e7:9d:ca:a5:0d:00:cd: f6:0c:cc:85:03:4d:04:0e:96:ea:b8:16:c4:23:cf:5c:ef:e9: 93:43:ce:15:13:19:f4:31:24:3f:66:b0:66:76:57:08:a5:99: 6c:80:29:5c:be:08:86:bd:8e:f0:89:bf:e9:98:55:f9:23:cd: 63:bf:83:3a:3e:3b:a1:0b:cd:53:be:3e:f4:21:27:68:53:d1: ee:98:c1:e9:5f:1b:cd:09:4d:c1:e4:d3:bd:a6:0d:1f:f7:6e: 47:15:e1:dd:e4:c1:2e:3d:f8:78:22:7e:86:84:d4:c8:1d:84: fd:2d:9a:2e:a8:7a:bb:b2:7a:22:ca:5c:74:10:d0:b8:0e:0c: b0:46:88:d0:f8:89:12:10:8c:af:03:f9:f2:83:07:30:e6:80: 1e:cb:a3:96:6c:0d:3b:7f:45:a8:16:62:aa:33:79:81:75:47: 3b:e1:51:3f:9d:c2:69:68:48:fc:8c:a3:93:44:83:f2:5b:5f: de:81:6b:64:45:4d:8a:ff:b6:ae:f1:00:d1:d9:2a:5b:59:f0: 47:16:d0:a9:60:d6:ba:9e:7e:46:83:be:58:18:c7:a8:b8:9c: 71:bd:5a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+ux9RVxcE4jf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NGQ3ZGVlYzQtOWFiZS00ODg4LTkxNzgtY2E2ZjllN2U2NjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz2gIe4Ay5JokaQPRrBmdnBf0bonXsMQELL4 Bg6G+E1IeORMdODiDizujreKGR86/jgsnkBUtWTFUwoKOvWbzmsK6mESNmuscUsC b4nHdwncqhJOfsJ///keWAjprPuYCH1xXl4FOy+fwIGipkCUtwQmiq24kLjEAuV5 mfllfu7mKCMGruNfd2DFwpU6WlRpZ1oHIzvMEKRINsDuhywYRFsvf/z1aio1ydQX kyDZHnlXUXmnUzCKWvdvMmbLMkMcO7U72yL9iIhWIg/jwzTveG5c+vUV/7ZDw15O CBoUX3KkDVSuThZ+nAVGq20UIYfIzrUkQsKplPxwrSgfu4HqtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCKVRauYJlu2c/GtU2PrulPh8opMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTc5ODllM2MtYjcyNy0z MmIzLWExN2UtODVjN2M5OWQzYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNUPyGqxzyP8ETomqKFocU3GjO1tcqAlB4MhqEO553KpQ0AzfYMzIUD TQQOluq4FsQjz1zv6ZNDzhUTGfQxJD9msGZ2VwilmWyAKVy+CIa9jvCJv+mYVfkj zWO/gzo+O6ELzVO+PvQhJ2hT0e6YwelfG80JTcHk072mDR/3bkcV4d3kwS49+Hgi foaE1MgdhP0tmi6oeruyeiLKXHQQ0LgODLBGiND4iRIQjK8D+fKDBzDmgB7Lo5Zs DTt/RagWYqozeYF1RzvhUT+dwmloSPyMo5NEg/JbX96Ba2RFTYr/tq7xANHZKltZ 8EcW0Klg1rqefkaDvlgYx6i4nHG9Wiw= -----END CERTIFICATE-----Generated at Thu Sep 24 18:39:24 2026 by rpki-client