$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa File: d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa (raw, json) Hash identifier: V4sdksnZhzsy7ghDT/YMOErh0//6mvBeEoCTPBvyvTE= Subject key identifier: A1:F2:E5:F7:B4:ED:02:17:90:5D:EC:E7:45:74:A0:7A:DC:D9:BC:C6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EE34DFFF70D8DE851B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ee:34:df:ff:70:d8:de:85:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=afb638bb-c67b-4643-bf9b-24f28d22c243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c0:ad:93:3c:1c:96:01:ed:b3:18:cf:d0:43: ba:7d:43:dd:67:b6:79:52:7e:4f:fb:1b:12:ec:8e: 96:54:a9:03:03:63:3a:d0:be:e8:7d:40:ed:bc:12: 7d:66:6c:30:06:b7:e1:5c:eb:d3:a8:95:00:1d:8c: ef:54:ca:e0:72:0c:21:bd:84:3b:28:93:a4:18:d2: 9b:7f:50:09:93:4d:9b:24:53:26:49:3c:ac:44:bd: 4b:d6:f4:73:34:29:b5:6a:1a:ac:e7:fb:6f:21:9e: dd:53:0b:49:44:cd:7b:12:21:00:18:38:0e:07:dc: 98:b8:b1:6a:e0:8f:8e:1e:96:66:35:5c:9e:92:8b: c8:22:91:b4:4c:ff:28:3c:95:99:ab:3c:10:59:b7: 9b:06:0d:be:f4:db:c6:3b:e7:c6:86:be:ad:62:05: c8:e7:70:f2:a8:18:b6:03:64:9e:13:62:20:1a:af: 95:68:78:23:ba:63:b2:a2:f2:4c:10:0c:84:18:22: e2:39:17:41:23:8a:bf:b0:89:f7:df:bc:73:02:1f: 2b:15:10:36:8d:39:2c:2e:ca:c9:1d:b9:82:d0:73: 38:fa:0a:c9:5c:c3:02:91:96:11:c2:44:ff:64:98: 81:1c:76:0b:9c:d4:94:b0:b2:07:86:d1:b8:94:9a: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F2:E5:F7:B4:ED:02:17:90:5D:EC:E7:45:74:A0:7A:DC:D9:BC:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:14:ce:2b:6d:66:57:0c:4b:f6:82:bb:b3:e7:a1:57:d9:a1: e1:9b:14:79:4a:8e:4a:a8:d2:88:a3:61:04:aa:49:c9:bb:ac: 49:da:ad:30:0d:61:4a:f8:23:45:c1:e5:ae:d1:8a:f2:6c:3c: 34:2b:41:f9:f9:25:f6:ef:2d:e8:2c:1d:3a:9b:fc:d2:1d:2b: 13:e4:b7:01:75:7e:a4:db:1e:db:36:70:85:88:4b:1a:00:00: 12:02:84:b0:02:d5:d7:91:b3:d5:79:73:5b:52:1f:27:18:32: 7d:3c:e5:2f:70:f8:a0:54:04:d2:fb:18:d6:47:d4:8b:f0:8b: 3e:74:e0:dd:8a:8b:04:d2:fd:ba:de:05:bf:a7:8c:c6:6b:2e: dc:2c:27:42:4c:fe:34:e5:d7:b9:9a:59:92:11:35:a6:68:6b: 4b:05:32:47:f3:dc:bc:c0:f9:0d:b3:9a:19:0d:a5:be:1b:8e: cb:1b:2d:70:18:56:0a:1b:44:26:e4:2f:5b:ac:5a:d5:7d:0e: e2:9a:d6:3c:e5:7c:d5:c0:fa:1b:c3:ab:e5:a6:67:91:d8:30: 08:4d:bb:65:a3:ef:97:e7:e9:58:be:24:4c:1f:e5:a5:a6:ca: 1c:88:72:eb:46:86:3b:66:61:76:64:9a:30:a4:41:09:4a:26: 69:ac:70:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+403/9w2N6FGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk YWZiNjM4YmItYzY3Yi00NjQzLWJmOWItMjRmMjhkMjJjMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MCtkzwclgHtsxjP0EO6fUPdZ7Z5Un5P+xsS 7I6WVKkDA2M60L7ofUDtvBJ9ZmwwBrfhXOvTqJUAHYzvVMrgcgwhvYQ7KJOkGNKb f1AJk02bJFMmSTysRL1L1vRzNCm1ahqs5/tvIZ7dUwtJRM17EiEAGDgOB9yYuLFq 4I+OHpZmNVyekovIIpG0TP8oPJWZqzwQWbebBg2+9NvGO+fGhr6tYgXI53DyqBi2 A2SeE2IgGq+VaHgjumOyovJMEAyEGCLiORdBI4q/sIn337xzAh8rFRA2jTksLsrJ HbmC0HM4+grJXMMCkZYRwkT/ZJiBHHYLnNSUsLIHhtG4lJrjrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHy5fe07QIXkF3s50V0oHrc2bzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDlkZDFkY2EtOTVmNS0z NmNmLWFhNzgtNGUyMTUwZjJiMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAUzittZlcMS/aCu7PnoVfZoeGbFHlKjkqo0oijYQSqScm7rEnarTAN YUr4I0XB5a7RivJsPDQrQfn5JfbvLegsHTqb/NIdKxPktwF1fqTbHts2cIWISxoA ABIChLAC1deRs9V5c1tSHycYMn085S9w+KBUBNL7GNZH1Ivwiz504N2KiwTS/bre Bb+njMZrLtwsJ0JM/jTl17maWZIRNaZoa0sFMkfz3LzA+Q2zmhkNpb4bjssbLXAY VgobRCbkL1usWtV9DuKa1jzlfNXA+hvDq+WmZ5HYMAhNu2Wj75fn6Vi+JEwf5aWm yhyIcutGhjtmYXZkmjCkQQlKJmmscDU= -----END CERTIFICATE-----Generated at Thu Sep 24 17:13:33 2026 by rpki-client