$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa File: c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa (raw, json) Hash identifier: 6BL7zFX8Vkc5AP1GV8mr5TCjkl2+Q3/03ntdjHvR8PY= Subject key identifier: 17:C9:EA:1A:F7:FB:D5:34:E9:51:10:17:D5:4B:C7:2D:7F:82:A3:CB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DC4005E0E941E4527B7567F70 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 15169 IP address blocks: 192.178.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:5e:0e:94:1e:45:27:b7:56:7f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=3a981ce3-10a6-4536-a7f9-f647f064e717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7a:e1:5c:ea:35:4d:f8:f4:91:4f:03:f0:b0: 80:13:55:40:24:df:e5:12:8e:4f:bc:0a:00:db:0e: e0:a0:c6:b1:61:32:56:29:8b:ea:c1:5f:95:40:65: 1f:35:b4:db:e6:d5:7a:e0:86:87:db:f7:5a:a0:f6: 5c:0c:9a:77:de:b0:71:2a:47:be:a4:f8:c5:a5:95: 8d:2a:89:b5:41:e2:5b:8a:8a:cb:1f:bc:64:9a:d8: bb:b2:10:9f:a3:c2:89:07:4d:b4:b9:39:c7:cd:79: 71:ae:6f:13:a5:26:f4:5b:94:f9:76:13:31:63:d7: 3a:56:af:22:b3:ee:41:ee:2d:61:ba:bd:18:21:c9: 16:6d:12:3a:00:61:e4:35:91:c1:ce:61:e3:d9:11: 6c:5e:8e:f7:0a:29:37:9e:78:f2:c4:11:b7:1f:6a: 31:2b:f8:15:87:03:81:12:bd:37:44:cf:ef:b7:7e: 8c:76:6e:87:f6:f9:b2:56:f7:fd:8a:4b:fc:1d:7a: 0d:e2:58:68:2c:d8:4a:2f:dc:70:34:0d:bd:4f:47: 97:8e:a7:1c:5c:e2:7b:57:64:0e:d2:46:68:f5:90: 66:46:b5:45:ca:f4:52:98:9d:e5:51:87:35:a0:50: d7:af:8b:cc:3e:9a:6f:c7:80:18:5b:d0:c9:7b:84: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C9:EA:1A:F7:FB:D5:34:E9:51:10:17:D5:4B:C7:2D:7F:82:A3:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c2:d9:07:2c:ca:ca:0f:e7:bb:c6:a8:31:03:e4:af:b1:2d: 66:13:78:ac:0d:51:a2:58:a9:0f:c0:9d:8f:e1:a5:a6:ce:9a: c0:24:c3:7d:19:61:20:e6:6d:c3:7c:26:70:bd:94:27:cd:41: 92:78:1a:34:3f:60:96:4c:17:95:dc:05:fd:89:5a:a0:78:84: ef:4c:ee:0d:36:29:24:18:0c:06:e1:46:a8:8e:3e:17:7b:81: 1a:c8:d4:f5:65:fc:bc:20:c8:23:4a:56:13:08:ad:ef:88:42: 43:df:f5:15:01:76:cb:b6:7e:2c:e3:05:26:ed:95:63:a3:12: 0e:82:55:34:f8:42:bf:c1:14:4a:86:f2:6a:f6:ef:40:fc:ce: 16:62:d2:86:9f:52:9d:aa:de:c6:29:6f:e4:74:85:21:b0:69: 6e:cd:ef:24:b0:c4:a0:0e:03:6b:3e:cf:1c:49:40:a3:43:28: 26:fb:90:c9:ea:49:47:d2:1e:0e:8e:c3:d9:38:d2:64:eb:a4: cb:ac:46:d2:21:ec:65:18:8a:32:14:66:a2:0f:59:55:73:d1: d4:2a:16:25:6c:3c:7a:a9:a2:3b:8b:b9:55:70:a2:90:74:06: 4a:91:a2:e0:e0:b6:b7:5b:d8:39:90:b0:d4:39:6f:cf:26:99: 76:4e:a4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAF4OlB5FJ7dWf3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk M2E5ODFjZTMtMTBhNi00NTM2LWE3ZjktZjY0N2YwNjRlNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXrhXOo1Tfj0kU8D8LCAE1VAJN/lEo5PvAoA 2w7goMaxYTJWKYvqwV+VQGUfNbTb5tV64IaH2/daoPZcDJp33rBxKke+pPjFpZWN Kom1QeJbiorLH7xkmti7shCfo8KJB020uTnHzXlxrm8TpSb0W5T5dhMxY9c6Vq8i s+5B7i1hur0YIckWbRI6AGHkNZHBzmHj2RFsXo73Cik3nnjyxBG3H2oxK/gVhwOB Er03RM/vt36Mdm6H9vmyVvf9ikv8HXoN4lhoLNhKL9xwNA29T0eXjqccXOJ7V2QO 0kZo9ZBmRrVFyvRSmJ3lUYc1oFDXr4vMPppvx4AYW9DJe4RpywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfJ6hr3+9U06VEQF9VLxy1/gqPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzdiOTkxMmQtMmNkNi0z OTc0LWE4MDUtMWUwNTI1YTFhMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjC2QcsysoP57vGqDED5K+xLWYTeKwNUaJYqQ/AnY/hpabOmsAkw30Z YSDmbcN8JnC9lCfNQZJ4GjQ/YJZMF5XcBf2JWqB4hO9M7g02KSQYDAbhRqiOPhd7 gRrI1PVl/LwgyCNKVhMIre+IQkPf9RUBdsu2fizjBSbtlWOjEg6CVTT4Qr/BFEqG 8mr270D8zhZi0oafUp2q3sYpb+R0hSGwaW7N7ySwxKAOA2s+zxxJQKNDKCb7kMnq SUfSHg6Ow9k40mTrpMusRtIh7GUYijIUZqIPWVVz0dQqFiVsPHqpojuLuVVwopB0 BkqRouDgtrdb2DmQsNQ5b88mmXZOpB8= -----END CERTIFICATE-----Generated at Wed May 13 04:08:28 2026 by rpki-client