$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbb7ae59-1c41-395b-be61-edc77e8c8141.roa File: dbb7ae59-1c41-395b-be61-edc77e8c8141.roa (raw, json) Hash identifier: eXCtn0wPnwJebY7rxNmZCmOqnmEb9Q7L0g3S01U43Ho= Subject key identifier: 1F:85:D9:CB:06:B9:92:9A:61:32:1A:91:63:F2:10:AD:1E:AD:60:BB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7F06ADACF9D0D1AFD4480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbb7ae59-1c41-395b-be61-edc77e8c8141.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f0:6a:da:cf:9d:0d:1a:fd:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=abdf1741-2a79-490a-ac9e-d48743094761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5a:24:44:59:3a:f6:f2:33:b3:95:4b:33:67: 61:cf:31:25:ee:5c:69:ea:d4:d9:60:e1:13:84:2f: 98:7d:a3:de:63:4f:a7:4a:5c:aa:46:f9:2c:25:42: 34:0b:41:82:94:21:57:29:07:02:9b:7b:b5:07:a1: c1:9a:c4:b1:43:60:b6:19:75:42:fc:35:0d:35:4c: ac:b5:3c:d6:ed:89:6d:ad:b0:53:25:90:c0:35:23: 5f:36:af:b9:46:c6:06:aa:06:43:31:39:52:30:1e: d2:22:46:8a:cb:c5:61:12:90:e0:36:b4:bc:a5:56: ff:43:cd:bc:c6:d7:c7:08:69:8e:3a:0c:de:de:91: 48:6f:06:db:6e:6d:0d:9e:8a:7e:a0:7a:8c:b3:8a: 9b:9f:9c:1e:90:8f:fe:18:db:cd:a7:f2:eb:de:90: 54:b2:6e:40:f1:0c:83:65:7f:c1:88:72:40:8f:06: 8e:3f:a4:ac:ac:65:e3:8b:de:07:cc:f6:e4:2a:e6: fd:e8:0d:9f:8e:96:44:9f:fb:f1:39:3c:4d:c4:ed: ba:2b:43:7d:4b:9a:03:e7:12:15:bc:44:b6:bb:21: 84:ba:da:ba:f8:0d:8b:8d:99:89:13:d4:d5:f3:68: 28:43:12:23:db:bf:b9:a7:5b:a3:63:77:12:14:86: 8c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:85:D9:CB:06:B9:92:9A:61:32:1A:91:63:F2:10:AD:1E:AD:60:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbb7ae59-1c41-395b-be61-edc77e8c8141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ea:68:65:68:50:89:a3:2d:1a:af:d8:b7:51:a8:b6:da:0d: bc:93:64:cd:3d:5f:52:c8:aa:4d:b9:3f:b9:87:5d:b3:1a:28: fc:74:98:01:e4:b8:19:1e:b5:4a:d7:cd:c6:06:fe:b8:1a:9b: 09:27:c9:26:7e:50:81:d3:75:a6:3b:97:5d:59:3b:7f:92:28: 8a:5e:c8:9b:cd:8e:ea:7f:99:83:fc:4e:f6:a8:cf:98:f3:88: 6d:45:27:eb:c3:d7:65:f6:6d:ac:a7:46:38:4c:82:75:23:25: e8:90:f8:81:d2:b5:9a:44:58:ad:ec:d1:fd:5d:32:e2:f4:97: 26:f8:d8:42:a0:b8:07:af:db:0a:88:21:ce:e1:95:c3:09:7d: fb:d1:4d:f6:ea:da:e4:65:30:5e:d0:64:1e:36:5b:86:3b:2b: d0:3f:1a:2c:5a:7f:04:db:eb:61:36:74:dc:c1:2c:b0:f3:8e: f8:38:3e:c7:ff:0e:64:41:f8:ca:2d:fb:f8:45:ce:a2:8c:22: b3:8a:f6:9e:38:c7:58:5a:70:73:47:5a:ab:8a:2f:39:de:41: 2a:16:d8:a9:8e:13:dc:b8:8e:c4:0b:3e:43:11:e7:03:4e:f4: 9e:23:76:cf:91:99:42:b4:21:06:17:38:5a:93:f5:4e:40:c4: ca:da:d0:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/Bq2s+dDRr9RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk YWJkZjE3NDEtMmE3OS00OTBhLWFjOWUtZDQ4NzQzMDk0NzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlokRFk69vIzs5VLM2dhzzEl7lxp6tTZYOET hC+YfaPeY0+nSlyqRvksJUI0C0GClCFXKQcCm3u1B6HBmsSxQ2C2GXVC/DUNNUys tTzW7YltrbBTJZDANSNfNq+5RsYGqgZDMTlSMB7SIkaKy8VhEpDgNrS8pVb/Q828 xtfHCGmOOgze3pFIbwbbbm0Nnop+oHqMs4qbn5wekI/+GNvNp/Lr3pBUsm5A8QyD ZX/BiHJAjwaOP6SsrGXji94HzPbkKub96A2fjpZEn/vxOTxNxO26K0N9S5oD5xIV vES2uyGEutq6+A2LjZmJE9TV82goQxIj27+5p1ujY3cSFIaMsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+F2csGuZKaYTIakWPyEK0erWC7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGJiN2FlNTktMWM0MS0z OTViLWJlNjEtZWRjNzdlOGM4MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPqaGVoUImjLRqv2LdRqLbaDbyTZM09X1LIqk25P7mHXbMaKPx0mAHk uBketUrXzcYG/rgamwknySZ+UIHTdaY7l11ZO3+SKIpeyJvNjup/mYP8Tvaoz5jz iG1FJ+vD12X2baynRjhMgnUjJeiQ+IHStZpEWK3s0f1dMuL0lyb42EKguAev2wqI Ic7hlcMJffvRTfbq2uRlMF7QZB42W4Y7K9A/GixafwTb62E2dNzBLLDzjvg4Psf/ DmRB+Mot+/hFzqKMIrOK9p44x1hacHNHWquKLzneQSoW2KmOE9y4jsQLPkMR5wNO 9J4jds+RmUK0IQYXOFqT9U5AxMra0A0= -----END CERTIFICATE-----Generated at Fri Sep 25 19:06:47 2026 by rpki-client