$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa File: b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa (raw, json) Hash identifier: wmp6es9NZ86gNsIpY1DwxOh7q3xpm7FlbUjBktsoqp0= Subject key identifier: 62:DA:7B:98:C1:DA:3E:5F:EC:F3:B0:1C:86:DD:69:F5:91:7C:F3:56 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498673936DE01F3913484A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:73:93:6d:e0:1f:39:13:48:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a4313816-a498-4b6a-ac12-0978c7ddc493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:84:3b:29:07:92:5c:cf:2b:ca:bf:68:dd:73: 6d:59:9a:b1:b9:fb:4a:e4:bc:2b:f8:d3:1e:9f:81: ec:68:bf:d7:cd:24:2e:44:a9:69:2e:2c:d6:94:56: 96:7c:68:57:40:d0:a1:b4:a3:2c:14:56:8d:7b:87: 8d:68:50:43:aa:95:b7:4f:5a:0d:f7:99:33:15:f3: eb:ae:f7:1d:16:79:ba:90:69:a9:c5:32:e2:e8:3d: 3f:8d:73:79:82:d0:f1:7b:67:cc:60:2b:34:6e:e9: 97:eb:56:36:7c:ea:05:e5:9b:a3:1a:91:c9:44:85: 28:e4:d9:ae:e8:e3:62:f9:ae:da:93:8b:e2:94:d9: dd:85:f7:33:2a:ae:aa:1e:cf:af:f2:64:b5:5d:4f: fe:0f:a9:d0:36:b4:18:a5:62:d5:d5:23:c4:72:a6: 33:72:90:22:5e:56:1c:76:c6:9c:55:1f:b5:80:1c: bd:fe:c3:16:da:1a:92:03:9f:d4:c7:07:2e:e8:e9: 46:b5:0d:66:01:e5:76:48:35:bd:b6:72:34:e0:bd: 11:5d:30:cb:c3:68:e3:80:de:07:ca:ca:f7:37:5c: 45:ff:94:9b:2e:26:37:f7:2a:48:22:93:03:9b:a1: c3:fd:4f:08:f4:54:35:d8:17:a6:36:14:93:ed:18: df:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DA:7B:98:C1:DA:3E:5F:EC:F3:B0:1C:86:DD:69:F5:91:7C:F3:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:c3:5a:06:d5:61:dd:7a:35:98:cd:3e:e6:45:ee:be:52:1a: b5:b1:cb:09:f4:50:8a:b6:5a:bd:ac:f7:ab:a8:ea:90:91:5f: ce:86:f3:32:2b:84:04:1a:8e:4f:33:80:a6:c6:ba:f7:47:28: ed:8c:1c:ea:ef:96:5b:a2:91:5e:74:cc:ed:41:bf:91:00:fd: 3e:cf:63:67:a1:34:c4:5c:8c:ac:ed:b1:5a:72:ce:34:97:ad: 34:d7:36:4c:17:ce:39:b1:69:e3:65:ea:61:19:1a:97:22:3c: 8f:6d:41:77:ec:a5:c4:76:16:09:e8:ea:ed:7c:6f:64:ff:4a: 11:64:3f:18:15:81:6b:72:92:b2:0e:cd:d7:3a:fe:aa:5d:35: 0a:0d:88:b9:7c:4c:70:85:25:c0:65:01:e0:24:0e:d2:d6:ff: c3:c9:08:39:e3:f6:49:15:23:06:5c:6b:78:29:bd:37:97:66: e6:e5:0c:7c:9a:95:76:fa:15:3a:bc:46:be:f2:6f:bf:ef:7a: 46:01:14:4d:90:b7:d6:0e:c9:75:68:79:99:79:f9:5b:57:55: df:e7:03:48:38:34:37:66:48:d5:44:d8:f8:04:fd:89:96:bb: 48:a8:07:df:7d:88:72:39:f4:07:73:f9:d1:50:0d:72:c4:9c: 94:8d:d5:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhnOTbeAfORNISoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQzMTM4MTYtYTQ5OC00YjZhLWFjMTItMDk3OGM3ZGRjNDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoQ7KQeSXM8ryr9o3XNtWZqxuftK5Lwr+NMe n4HsaL/XzSQuRKlpLizWlFaWfGhXQNChtKMsFFaNe4eNaFBDqpW3T1oN95kzFfPr rvcdFnm6kGmpxTLi6D0/jXN5gtDxe2fMYCs0bumX61Y2fOoF5ZujGpHJRIUo5Nmu 6ONi+a7ak4vilNndhfczKq6qHs+v8mS1XU/+D6nQNrQYpWLV1SPEcqYzcpAiXlYc dsacVR+1gBy9/sMW2hqSA5/Uxwcu6OlGtQ1mAeV2SDW9tnI04L0RXTDLw2jjgN4H ysr3N1xF/5SbLiY39ypIIpMDm6HD/U8I9FQ12BemNhST7RjfGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLae5jB2j5f7POwHIbdafWRfPNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJhYWZmZGQtOWU1OS0z YjI5LWI0NWEtMTlhNzhmYTM2ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDDWgbVYd16NZjNPuZF7r5SGrWxywn0UIq2Wr2s96uo6pCRX86G8zIr hAQajk8zgKbGuvdHKO2MHOrvlluikV50zO1Bv5EA/T7PY2ehNMRcjKztsVpyzjSX rTTXNkwXzjmxaeNl6mEZGpciPI9tQXfspcR2Fgno6u18b2T/ShFkPxgVgWtykrIO zdc6/qpdNQoNiLl8THCFJcBlAeAkDtLW/8PJCDnj9kkVIwZca3gpvTeXZublDHya lXb6FTq8Rr7yb7/vekYBFE2Qt9YOyXVoeZl5+VtXVd/nA0g4NDdmSNVE2PgE/YmW u0ioB999iHI59Adz+dFQDXLEnJSN1RQ= -----END CERTIFICATE-----Generated at Fri Sep 25 08:47:54 2026 by rpki-client