$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd61e4e8-de8e-3222-a983-85c8cd4254aa.roa File: cd61e4e8-de8e-3222-a983-85c8cd4254aa.roa (raw, json) Hash identifier: 8aVQOdFAuf8HeIqxHc/gya4ORpjX5yUclRcM2F/Vosw= Subject key identifier: D8:4E:84:B6:8E:64:39:DF:DD:2C:F8:F5:D7:03:41:75:47:78:F1:F4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EFEEB8BC3C5F6D59A780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd61e4e8-de8e-3222-a983-85c8cd4254aa.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ef:ee:b8:bc:3c:5f:6d:59:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=c11807bf-ad2c-4636-b904-9e5127d83ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:7a:06:af:ff:c4:32:6f:62:d8:22:ad:45: 51:f9:ef:16:00:d1:0d:36:cb:59:f4:d2:d6:78:5b: 65:28:d8:07:78:e0:b6:4c:48:68:e2:3a:03:d8:4c: 5e:43:0a:2a:07:d9:da:d5:5f:6a:dc:ea:35:e8:8f: 08:6d:d1:61:c3:62:4f:12:7a:1a:d9:a4:91:59:6d: 37:24:01:72:6d:ad:51:63:62:aa:f9:31:d7:b9:7f: 73:13:80:91:31:ca:03:a4:0e:11:5f:6b:2a:0f:37: 8b:b9:49:73:0b:16:59:14:c0:45:b6:be:83:d4:ff: cc:90:a5:b0:1d:c7:2a:71:b0:10:07:7c:5d:f6:74: c0:08:7f:c1:1e:44:f6:7a:fd:ad:84:5e:5d:56:5e: 5f:3e:98:60:79:86:be:8a:df:15:cd:40:53:e3:13: bc:e8:85:39:1c:c2:d4:d0:7b:e0:ce:a2:f3:a6:94: 38:ba:cb:ed:c3:84:da:fb:96:34:40:2d:36:0b:2d: f3:46:38:ee:01:d8:31:d9:97:17:e5:bb:5a:02:81: 5c:23:f4:12:c0:83:0e:03:1b:9f:24:c2:4b:41:bb: 9d:9d:86:a0:f9:50:f6:f3:ac:39:93:45:ac:1c:56: c6:37:09:ee:8e:81:5c:d7:6b:75:ba:33:fc:27:6d: 04:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4E:84:B6:8E:64:39:DF:DD:2C:F8:F5:D7:03:41:75:47:78:F1:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd61e4e8-de8e-3222-a983-85c8cd4254aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0c:3d:60:66:90:f8:bb:18:0c:a4:54:a3:53:38:69:53:cf: 9c:de:1e:4c:67:78:84:e5:5a:a3:31:54:fb:35:44:23:56:11: 3e:55:68:28:c8:9a:ad:49:f4:2b:ce:66:2e:93:c6:ed:ae:09: a8:b1:52:41:b1:75:58:67:14:fe:b4:86:88:26:f1:87:fd:79: ff:06:85:ec:65:f5:f1:d5:c4:69:ff:1f:bb:a0:94:7f:29:1d: 63:ad:49:da:e4:e0:27:d5:fb:af:bf:15:e8:a8:37:78:5b:21: fc:9d:37:fc:69:33:24:67:81:b7:b8:9c:f6:af:94:e7:c8:59: 00:bd:8c:ea:43:90:2c:65:15:9b:c4:3c:65:4a:86:ec:8d:b4: a3:6b:64:80:32:2b:45:68:a6:6c:06:9a:f0:0d:bf:15:fe:85: f4:47:4c:64:fc:1e:9e:f6:96:53:6d:28:8a:5f:b5:fa:17:f9: b6:ae:b6:43:be:4b:9d:7b:9b:ee:ac:6b:a1:24:54:5c:a1:33: ca:10:37:3e:6c:06:09:ac:f1:79:92:90:ba:0e:71:f7:0c:1f: 2a:b3:c8:2d:ee:60:3a:ac:d6:7e:da:10:7e:bc:22:ea:70:ce: c5:19:d2:f1:23:e5:81:e4:ce:4d:64:74:02:19:3c:81:79:19: 0c:80:b0:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+/uuLw8X21Zp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk YzExODA3YmYtYWQyYy00NjM2LWI5MDQtOWU1MTI3ZDgzZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB16Bq//xDJvYtgirUVR+e8WANENNstZ9NLW eFtlKNgHeOC2TEho4joD2ExeQwoqB9na1V9q3Oo16I8IbdFhw2JPEnoa2aSRWW03 JAFyba1RY2Kq+THXuX9zE4CRMcoDpA4RX2sqDzeLuUlzCxZZFMBFtr6D1P/MkKWw HccqcbAQB3xd9nTACH/BHkT2ev2thF5dVl5fPphgeYa+it8VzUBT4xO86IU5HMLU 0HvgzqLzppQ4usvtw4Ta+5Y0QC02Cy3zRjjuAdgx2ZcX5btaAoFcI/QSwIMOAxuf JMJLQbudnYag+VD286w5k0WsHFbGNwnujoFc12t1ujP8J20EIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhOhLaOZDnf3Sz49dcDQXVHePH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Q2MWU0ZTgtZGU4ZS0z MjIyLWE5ODMtODVjOGNkNDI1NGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEMPWBmkPi7GAykVKNTOGlTz5zeHkxneITlWqMxVPs1RCNWET5VaCjI mq1J9CvOZi6Txu2uCaixUkGxdVhnFP60hogm8Yf9ef8Ghexl9fHVxGn/H7uglH8p HWOtSdrk4CfV+6+/FeioN3hbIfydN/xpMyRngbe4nPavlOfIWQC9jOpDkCxlFZvE PGVKhuyNtKNrZIAyK0VopmwGmvANvxX+hfRHTGT8Hp72llNtKIpftfoX+bautkO+ S517m+6sa6EkVFyhM8oQNz5sBgms8XmSkLoOcfcMHyqzyC3uYDqs1n7aEH68Iupw zsUZ0vEj5YHkzk1kdAIZPIF5GQyAsHo= -----END CERTIFICATE-----Generated at Thu Sep 24 10:01:58 2026 by rpki-client