$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa File: c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa (raw, json) Hash identifier: 3i0GXbDbeux5nBuCdlN+QYIoN0hTPV/ztMv1lLQmRuE= Subject key identifier: FE:F8:0B:72:22:BB:9C:2B:F2:01:CA:E0:5A:B2:19:80:44:D2:33:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7F0CB55C49D66F2AFF600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f0:cb:55:c4:9d:66:f2:af:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=8c2dbeae-e733-401d-b80f-1628a8fcfad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:be:a5:38:ba:de:dd:ff:2e:4d:ec:30:18: 47:da:75:30:07:4f:68:d1:d7:20:e4:47:14:9f:e0: aa:d6:01:8b:61:f7:de:a2:80:3d:da:47:22:1e:72: 0d:40:63:73:61:d4:e6:0d:a1:b6:7b:fc:33:d6:c0: 9d:2d:0f:a1:9e:c1:c5:64:10:6c:65:da:e3:1e:8f: 41:ef:57:96:cb:89:fb:bf:d6:e5:e8:f5:46:1d:82: 70:22:ac:3b:41:1f:8d:5f:5e:ee:8e:b5:f6:86:e0: 3d:0a:5e:07:a3:74:a4:09:d9:ee:17:e0:66:71:df: fc:fc:14:82:2f:14:50:56:c0:b9:61:5b:e2:d7:88: 7b:cf:cd:f3:12:2d:70:d2:35:6f:58:40:0f:bb:aa: a1:0a:59:99:2a:e3:85:8a:16:b5:e4:c4:33:64:70: 87:eb:35:b3:e5:c7:4a:69:4b:43:28:ae:e7:50:78: 05:52:56:1d:cc:36:26:2b:ed:4b:f0:6f:6a:fd:af: 12:63:45:62:d8:b8:53:c5:af:b6:31:3a:bd:6f:aa: bb:6f:35:e9:72:2a:09:f7:2a:f9:05:32:55:f1:3f: 24:15:43:b7:6a:1f:42:3a:2f:4d:13:0f:27:71:03: ae:0f:47:6f:cd:2b:ff:10:cd:26:89:49:93:0c:ad: 37:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F8:0B:72:22:BB:9C:2B:F2:01:CA:E0:5A:B2:19:80:44:D2:33:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5c:b8:58:08:c4:a8:b0:91:25:bc:05:46:68:d6:d9:3e:bc: 62:1c:31:2c:a7:d1:a4:ec:d7:27:51:61:73:72:05:0d:5d:f1: f3:0b:17:d6:d0:db:3a:5c:83:31:1f:34:5d:88:04:3a:47:15: a1:70:41:af:01:dc:06:fc:f0:ea:fe:95:2c:db:d8:a8:72:31: a3:cb:0f:ad:31:d5:0b:2f:65:fd:93:e9:8b:05:56:64:1c:f8: 26:33:f3:5a:ba:9a:bd:30:8b:c2:9d:8a:fe:02:7b:67:d4:0e: a9:35:7f:9d:70:52:59:98:c3:f3:4d:13:fe:3a:8e:bf:74:2a: 89:43:45:b9:15:7e:65:8e:45:25:9e:a3:e2:f3:9c:b1:8e:b2: b8:b8:86:d7:77:fd:e6:d1:f6:c9:36:90:53:dd:7e:25:7e:15: f5:9d:4b:00:51:e3:cf:5c:75:e1:4a:1a:bb:14:65:6f:0b:e1: bd:20:88:e1:12:5b:81:bc:fd:fd:83:e6:3a:6d:d1:24:7e:fc: 04:a9:a8:21:f5:b4:98:b5:76:24:cc:04:77:56:28:3c:9b:91: 09:7f:64:5e:df:a7:d4:5a:99:a2:c8:33:ef:8c:7a:ff:24:8c: b1:db:6b:57:dc:00:46:49:9f:06:ce:b6:0e:bd:05:57:db:91: b9:1a:bf:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/DLVcSdZvKv9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk OGMyZGJlYWUtZTczMy00MDFkLWI4MGYtMTYyOGE4ZmNmYWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fC+pTi63t3/Lk3sMBhH2nUwB09o0dcg5EcU n+Cq1gGLYffeooA92kciHnINQGNzYdTmDaG2e/wz1sCdLQ+hnsHFZBBsZdrjHo9B 71eWy4n7v9bl6PVGHYJwIqw7QR+NX17ujrX2huA9Cl4Ho3SkCdnuF+Bmcd/8/BSC LxRQVsC5YVvi14h7z83zEi1w0jVvWEAPu6qhClmZKuOFiha15MQzZHCH6zWz5cdK aUtDKK7nUHgFUlYdzDYmK+1L8G9q/a8SY0Vi2LhTxa+2MTq9b6q7bzXpcioJ9yr5 BTJV8T8kFUO3ah9COi9NEw8ncQOuD0dvzSv/EM0miUmTDK03FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP74C3Iiu5wr8gHK4FqyGYBE0jPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzdiOTkxMmQtMmNkNi0z OTc0LWE4MDUtMWUwNTI1YTFhMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBcuFgIxKiwkSW8BUZo1tk+vGIcMSyn0aTs1ydRYXNyBQ1d8fMLF9bQ 2zpcgzEfNF2IBDpHFaFwQa8B3Ab88Or+lSzb2KhyMaPLD60x1QsvZf2T6YsFVmQc +CYz81q6mr0wi8Kdiv4Ce2fUDqk1f51wUlmYw/NNE/46jr90KolDRbkVfmWORSWe o+LznLGOsri4htd3/ebR9sk2kFPdfiV+FfWdSwBR489cdeFKGrsUZW8L4b0giOES W4G8/f2D5jpt0SR+/ASpqCH1tJi1diTMBHdWKDybkQl/ZF7fp9RamaLIM++Mev8k jLHba1fcAEZJnwbOtg69BVfbkbkav1Q= -----END CERTIFICATE-----Generated at Thu Sep 24 20:57:43 2026 by rpki-client