$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa File: c98a701b-7bc9-3bad-a939-be22323e522c.roa (raw, json) Hash identifier: Ikp1KzNRAKY5R1FNkYHhs3+hy5M1kn8GVgEhxQ2JKSM= Subject key identifier: 58:67:11:66:10:BD:79:DA:83:ED:53:76:81:74:8B:E2:63:D8:9A:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EF76E271A3AE2C84AD40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ef:76:e2:71:a3:ae:2c:84:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=4ef4c92a-e7cd-49c8-93e3-3f121f59b78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a3:ce:5b:e6:2e:23:44:f6:67:7a:b5:2b:6b: bb:5f:55:12:40:42:19:ef:f4:fe:0e:3a:72:b4:90: ab:c1:45:e8:8c:c1:5f:eb:c5:b7:9f:f0:fb:10:cc: d4:eb:e3:ba:24:aa:4b:03:69:63:f8:0d:0d:15:d5: 77:96:3c:92:d8:82:55:e6:28:33:bc:25:95:5b:ae: ce:37:98:29:8d:ef:0a:f9:5d:54:4c:b4:3c:e7:fe: 8c:e6:e4:c2:ac:a5:60:11:d4:e9:1b:d6:94:4a:95: 94:14:45:61:dd:65:03:15:b6:eb:a1:f9:c5:a9:34: 29:92:4b:ce:04:c8:52:05:73:c8:fe:04:f1:61:a4: f0:ed:7b:f7:97:fa:a7:b2:28:a0:7f:0f:ea:90:52: ad:54:60:42:a0:fc:7c:47:9c:84:a8:1a:4f:10:f2: 4c:83:ce:e0:9d:ab:9b:49:eb:34:fd:25:8d:0d:a1: a4:6d:90:93:8a:8c:26:e2:00:0c:7c:b4:25:bf:ac: b1:06:1e:93:ec:f4:84:24:2e:4a:94:03:47:39:b8: 37:e7:61:d2:de:07:bd:5f:65:98:a7:b6:fd:90:58: 2f:c2:72:98:87:06:2e:49:aa:60:05:7e:88:12:c3: b4:f6:ee:4f:70:0c:3c:e3:ef:89:4d:69:7f:a5:d8: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:67:11:66:10:BD:79:DA:83:ED:53:76:81:74:8B:E2:63:D8:9A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d8:d5:28:61:34:ec:30:54:5e:75:b7:32:01:38:08:41:34: 1d:45:8c:1b:2f:1d:c3:3c:4d:f6:cd:f8:bd:a6:94:3d:2b:60: a2:3e:d9:bf:a1:48:ac:a5:e9:81:ba:df:ec:1d:3f:12:53:92: de:1a:c1:cd:ac:bd:f5:95:b3:0b:5c:cc:03:92:34:fb:f2:21: 48:74:5c:3f:59:45:70:2a:31:fa:de:e6:16:cf:35:78:9d:eb: 70:ac:6f:43:2f:cb:9e:24:4b:bb:70:5e:a0:1a:9d:1e:8a:5d: 0e:6b:a1:97:34:ea:4b:1c:3d:50:40:e7:dc:5c:b8:1b:00:96: c9:8a:5f:09:87:ce:13:03:eb:08:ca:e0:13:df:53:71:3d:e1: 0f:52:82:dd:90:bc:d0:83:ea:f2:e1:05:f3:91:2f:fd:f1:7f: d1:97:92:fe:35:3a:53:a4:0b:2a:11:3f:af:37:01:b1:5f:6a: 43:a7:01:e7:21:17:77:1c:5b:ea:30:33:47:4f:e9:95:8a:99: 1e:3e:a4:c1:08:b9:05:7e:89:5e:9f:bb:ff:06:11:d8:f2:09: 1f:64:0c:c9:a4:6d:43:2a:d3:fa:89:9c:2d:79:85:1e:b6:b1: 3f:78:4e:5c:54:c5:1e:10:e6:38:20:e2:47:ec:77:98:eb:2b: d0:3a:b7:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+924nGjriyErUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NGVmNGM5MmEtZTdjZC00OWM4LTkzZTMtM2YxMjFmNTliNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aPOW+YuI0T2Z3q1K2u7X1USQEIZ7/T+Djpy tJCrwUXojMFf68W3n/D7EMzU6+O6JKpLA2lj+A0NFdV3ljyS2IJV5igzvCWVW67O N5gpje8K+V1UTLQ85/6M5uTCrKVgEdTpG9aUSpWUFEVh3WUDFbbrofnFqTQpkkvO BMhSBXPI/gTxYaTw7Xv3l/qnsiigfw/qkFKtVGBCoPx8R5yEqBpPEPJMg87gnaub Ses0/SWNDaGkbZCTiowm4gAMfLQlv6yxBh6T7PSEJC5KlANHObg352HS3ge9X2WY p7b9kFgvwnKYhwYuSapgBX6IEsO09u5PcAw84++JTWl/pdg/dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhnEWYQvXnag+1TdoF0i+Jj2JpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzk4YTcwMWItN2JjOS0z YmFkLWE5MzktYmUyMjMyM2U1MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDY1ShhNOwwVF51tzIBOAhBNB1FjBsvHcM8TfbN+L2mlD0rYKI+2b+h SKyl6YG63+wdPxJTkt4awc2svfWVswtczAOSNPvyIUh0XD9ZRXAqMfre5hbPNXid 63Csb0Mvy54kS7twXqAanR6KXQ5roZc06kscPVBA59xcuBsAlsmKXwmHzhMD6wjK 4BPfU3E94Q9Sgt2QvNCD6vLhBfORL/3xf9GXkv41OlOkCyoRP683AbFfakOnAech F3ccW+owM0dP6ZWKmR4+pMEIuQV+iV6fu/8GEdjyCR9kDMmkbUMq0/qJnC15hR62 sT94TlxUxR4Q5jgg4kfsd5jrK9A6tz8= -----END CERTIFICATE-----Generated at Thu Sep 24 12:54:08 2026 by rpki-client