$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa File: dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa (raw, json) Hash identifier: MAslXuvIpVRABcYrTPhjmdP5PSbBJwXtKG/6TwPhAS4= Subject key identifier: 90:4C:D4:38:51:FF:B5:59:27:0F:6F:EB:AE:70:9E:26:38:8B:B6:5C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DC4005D42C24C249C9E761880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 15169 IP address blocks: 192.178.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:5d:42:c2:4c:24:9c:9e:76:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=701f00bf-5fa2-4c43-8687-6445143ec166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:a3:96:1f:19:01:22:d0:f9:b9:4f:ed:e5: 96:3e:1e:7e:15:1d:91:07:df:9b:ce:19:42:5c:3a: 39:83:d7:8e:33:78:94:d3:ca:ee:65:a8:5f:8e:30: fa:78:72:23:75:cb:13:88:e3:25:9c:fe:78:ba:96: 30:fc:96:e8:4c:dd:f5:41:9d:b7:6a:b6:1f:e8:cf: b5:0f:58:2d:a0:3f:67:10:99:00:05:34:f6:05:56: e0:4a:56:6b:cf:39:f3:52:e0:84:17:b6:52:e6:6e: ef:ca:c4:2b:bc:c4:81:54:90:a1:bd:25:0e:fc:a9: d5:92:9a:c8:18:01:ac:49:2c:08:f3:18:76:86:4e: 09:14:df:a5:73:9f:af:ce:f8:87:cc:31:d1:6b:0a: ae:a0:93:71:60:90:23:23:65:3d:02:ea:5e:0b:bc: 4c:78:ed:0a:85:7d:ec:c9:cf:1b:39:e1:d5:0c:7b: 99:ca:51:bb:d2:dc:d3:e6:ed:19:be:88:8c:b6:98: e9:3e:ea:85:c5:2e:13:ab:c6:ab:27:39:bb:76:56: 2e:d2:5a:a3:12:9c:1f:7c:fb:26:65:cc:a3:d7:e0: 6f:0b:b7:2e:1f:a3:e7:85:ca:24:63:c2:6d:ba:10: 4a:1c:c1:9f:e0:59:e2:ea:6b:eb:81:ca:ef:a7:37: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4C:D4:38:51:FF:B5:59:27:0F:6F:EB:AE:70:9E:26:38:8B:B6:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f4:e9:d6:e0:61:b5:6b:84:46:fd:e1:e4:2b:cf:4c:ea:16: 39:35:ff:b5:5d:14:08:76:37:86:50:c0:1c:60:a1:00:df:48: 62:a2:20:a3:bd:94:1f:55:e1:ef:8a:45:04:f9:9c:98:4b:92: 53:65:ca:6d:59:5b:fb:98:13:2d:ac:10:24:56:60:6a:ec:f8: 84:10:a3:15:bd:24:2a:eb:6e:d8:7c:5f:73:e3:c7:9d:69:1c: a3:9b:8e:79:45:52:5e:84:44:53:41:6f:5d:bc:14:d9:57:8f: a0:c4:29:ac:9d:16:26:99:ae:7b:b6:36:79:b9:cc:68:fb:93: 01:11:f6:69:0d:87:f0:fe:34:c2:3e:67:40:49:2b:a1:c8:05: 93:0f:15:99:ae:ec:db:2c:c1:c4:00:a7:0b:fc:d3:fc:27:96: 26:b4:9c:10:76:a9:de:52:5d:a9:90:e5:7a:c1:51:8f:a2:05: 94:84:63:f3:10:9c:9b:72:46:a9:3e:04:a5:34:aa:f0:7e:a9: 94:56:af:99:b3:5f:fd:72:20:67:bf:b1:47:d4:b1:05:2f:49: 05:f5:28:58:f3:6d:41:53:55:5e:8f:75:87:32:f5:9c:df:da: 8c:8b:6f:c1:77:d7:50:4a:c8:54:26:2e:56:3f:80:ab:73:13: c6:78:a6:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAF1CwkwknJ52GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk NzAxZjAwYmYtNWZhMi00YzQzLTg2ODctNjQ0NTE0M2VjMTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Amjlh8ZASLQ+blP7eWWPh5+FR2RB9+bzhlC XDo5g9eOM3iU08ruZahfjjD6eHIjdcsTiOMlnP54upYw/JboTN31QZ23arYf6M+1 D1gtoD9nEJkABTT2BVbgSlZrzznzUuCEF7ZS5m7vysQrvMSBVJChvSUO/KnVkprI GAGsSSwI8xh2hk4JFN+lc5+vzviHzDHRawquoJNxYJAjI2U9AupeC7xMeO0KhX3s yc8bOeHVDHuZylG70tzT5u0ZvoiMtpjpPuqFxS4Tq8arJzm7dlYu0lqjEpwffPsm Zcyj1+BvC7cuH6PnhcokY8JtuhBKHMGf4Fni6mvrgcrvpzdsjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBM1DhR/7VZJw9v665wniY4i7ZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZhYzM4YjAtNTgwMy0z ODJmLTk0YTQtYmQ5ZjhlZDkxNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf06dbgYbVrhEb94eQrz0zqFjk1/7VdFAh2N4ZQwBxgoQDfSGKiIKO9 lB9V4e+KRQT5nJhLklNlym1ZW/uYEy2sECRWYGrs+IQQoxW9JCrrbth8X3Pjx51p HKObjnlFUl6ERFNBb128FNlXj6DEKaydFiaZrnu2Nnm5zGj7kwER9mkNh/D+NMI+ Z0BJK6HIBZMPFZmu7NsswcQApwv80/wnlia0nBB2qd5SXamQ5XrBUY+iBZSEY/MQ nJtyRqk+BKU0qvB+qZRWr5mzX/1yIGe/sUfUsQUvSQX1KFjzbUFTVV6PdYcy9Zzf 2oyLb8F311BKyFQmLlY/gKtzE8Z4pvI= -----END CERTIFICATE-----Generated at Wed May 13 04:46:54 2026 by rpki-client