$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa File: b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa (raw, json) Hash identifier: xPjI3nGYcSoTBo67x8gpu7E25hen1E4WSNmXxPhOy5M= Subject key identifier: 39:F1:B9:25:7B:10:C8:BE:E2:31:A7:B2:95:60:A2:AD:14:97:35:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DC4005C8506025EAF0279B000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 15169 IP address blocks: 192.178.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:5c:85:06:02:5e:af:02:79:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=007daf26-19a5-4b12-8446-b5d1839d76f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:8f:4c:05:ec:c0:04:2a:c9:6d:ca:3d:f2: 3c:53:4d:c1:6a:17:e0:5c:ef:24:a3:a7:a2:c0:76: c4:61:6c:a9:9e:5e:5f:73:b0:61:c9:36:95:0d:30: 7b:5a:3d:50:be:f0:36:c7:e6:fb:ed:eb:e5:63:88: 72:16:d2:94:3f:e8:c3:55:0b:27:70:01:6d:6e:06: 19:ea:c5:7d:16:d8:d5:d5:c8:75:0c:bd:63:9c:8b: 03:75:2a:81:7d:66:ce:3b:e7:e5:a5:ab:f7:44:7e: 0e:44:c4:13:76:af:18:db:2e:a1:48:d8:04:8f:d7: b0:c6:d0:c6:4b:e5:22:45:04:d3:c5:0c:fa:96:44: 03:11:fc:3c:36:53:a4:55:44:fc:fe:50:4c:38:0d: b7:08:71:6a:8c:1c:ba:f2:94:9f:21:dc:e0:58:4c: 89:78:db:73:75:5f:c5:dd:e2:45:b1:16:a0:c3:36: 77:91:8f:a8:20:c8:02:98:35:be:2f:7c:e5:57:20: 21:ba:91:5d:08:8e:e3:eb:a1:d1:57:1a:a8:81:21: b1:49:97:3e:c0:80:b0:04:c1:10:19:5e:48:5b:4f: 23:77:2e:31:e5:dd:32:dc:48:f5:a5:b2:41:fb:f1: d1:42:bd:5e:9a:4c:c6:b8:8a:40:b3:22:72:93:8c: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F1:B9:25:7B:10:C8:BE:E2:31:A7:B2:95:60:A2:AD:14:97:35:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:91:a3:d4:53:28:ed:52:3c:fe:d1:5b:81:a8:2d:ab:6d:0c: 59:94:ad:c8:1a:75:75:0b:98:df:91:cd:72:02:c7:3c:dd:c6: c9:39:44:5f:95:4f:36:d5:42:69:85:11:4a:31:06:fd:2b:5e: ef:37:ab:0d:c1:0b:e1:93:5a:60:2e:92:fe:8b:c3:c7:26:e0: 52:2e:45:25:f6:3f:f3:8f:68:ac:1f:7c:90:40:bf:3d:12:65: 73:0e:7e:76:a4:57:6b:52:bd:d6:c2:f5:01:52:f7:59:08:54: 75:a4:22:e3:b1:f7:eb:a9:d8:58:bf:6e:16:01:3a:f3:f4:4a: 1d:a4:48:ed:08:1d:d9:0a:ee:f1:45:91:73:21:df:dd:66:da: f7:5f:1e:66:0a:08:e3:a1:19:e1:59:45:99:49:ce:91:b1:2b: 05:82:ca:77:c3:cb:4e:34:65:ee:e8:53:c4:06:6b:3a:d4:f3: 5d:9c:da:4a:96:03:49:cb:d9:fc:b5:de:62:22:b1:24:43:df: da:7e:f4:34:c2:34:91:ae:df:6c:43:4b:92:e1:ac:68:7a:78: 32:d1:55:b7:ab:39:b5:f4:1d:1b:3b:6e:51:3c:c5:fa:91:bf: ae:61:7e:6c:8f:aa:5f:5c:d5:17:b5:24:be:1b:6e:b2:63:6b: 71:f4:1c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFyFBgJerwJ5sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk MDA3ZGFmMjYtMTlhNS00YjEyLTg0NDYtYjVkMTgzOWQ3NmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCqPTAXswAQqyW3KPfI8U03BahfgXO8ko6ei wHbEYWypnl5fc7BhyTaVDTB7Wj1QvvA2x+b77evlY4hyFtKUP+jDVQsncAFtbgYZ 6sV9FtjV1ch1DL1jnIsDdSqBfWbOO+flpav3RH4ORMQTdq8Y2y6hSNgEj9ewxtDG S+UiRQTTxQz6lkQDEfw8NlOkVUT8/lBMOA23CHFqjBy68pSfIdzgWEyJeNtzdV/F 3eJFsRagwzZ3kY+oIMgCmDW+L3zlVyAhupFdCI7j66HRVxqogSGxSZc+wICwBMEQ GV5IW08jdy4x5d0y3Ej1pbJB+/HRQr1emkzGuIpAsyJyk4y5swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnxuSV7EMi+4jGnspVgoq0UlzWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjhhMjg4MTAtMDBhMy0z Nzc3LTllZTUtZmNiOWI2NzJjNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6Ro9RTKO1SPP7RW4GoLattDFmUrcgadXULmN+RzXICxzzdxsk5RF+V TzbVQmmFEUoxBv0rXu83qw3BC+GTWmAukv6Lw8cm4FIuRSX2P/OPaKwffJBAvz0S ZXMOfnakV2tSvdbC9QFS91kIVHWkIuOx9+up2Fi/bhYBOvP0Sh2kSO0IHdkK7vFF kXMh391m2vdfHmYKCOOhGeFZRZlJzpGxKwWCynfDy040Ze7oU8QGazrU812c2kqW A0nL2fy13mIisSRD39p+9DTCNJGu32xDS5LhrGh6eDLRVberObX0HRs7blE8xfqR v65hfmyPql9c1Re1JL4bbrJja3H0HAc= -----END CERTIFICATE-----Generated at Wed May 13 01:44:22 2026 by rpki-client