$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f34fc29f-6278-3662-b30a-dceb8aef7261.roa File: f34fc29f-6278-3662-b30a-dceb8aef7261.roa (raw, json) Hash identifier: Tsxqhe+WFyd4BtWSJI6sdVHW3WrXQ3YamXUGIVfx05Q= Subject key identifier: 4C:BB:34:C5:C3:3B:DF:8E:5D:61:42:3F:C6:D0:07:F4:E3:FC:03:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7ED9E2E57049F119213C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f34fc29f-6278-3662-b30a-dceb8aef7261.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ed:9e:2e:57:04:9f:11:92:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=cf2229af-e275-41d3-9cae-d79a130b3b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:bf:39:df:f8:06:bc:97:02:f5:84:c3:9e: e5:22:1f:62:25:ce:a3:cc:58:ce:1b:9a:7d:10:ce: 91:32:ce:6d:70:26:c6:82:5d:c7:58:cb:62:6c:ee: a4:24:e7:4e:bd:f3:ad:d6:b8:68:73:fa:fa:a1:b1: da:32:93:c1:a9:b4:f8:ff:0c:e2:4c:44:22:28:7a: 03:85:12:11:59:c8:d5:2b:f8:f9:45:c4:0f:c3:2d: 4c:12:e1:16:d9:33:63:21:5f:76:bc:bf:21:bc:cb: 66:c8:0e:5d:80:42:4b:d6:af:48:85:26:15:5d:94: f6:fb:0b:d6:47:65:b2:50:2c:05:b0:63:f2:cf:ee: 45:81:65:b8:d6:e2:34:73:38:e9:23:39:25:c0:6b: b6:ec:29:8c:65:39:a6:f0:1f:c6:ab:06:3e:62:d3: c4:bf:24:46:f3:51:2f:ea:39:be:b3:8c:98:2b:89: 4d:63:0a:49:1f:36:3a:8e:cb:29:ed:c2:7d:e6:e1: d0:87:27:67:bd:33:e1:23:1e:3f:4f:64:52:fa:3e: e3:47:96:fc:be:72:97:10:f7:bf:2a:f0:8e:6d:af: 5c:9c:e8:13:7c:d5:23:f7:19:45:fd:a7:aa:50:01: 07:b6:e9:a7:86:4c:99:ec:07:61:ee:38:ca:4f:8d: 73:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BB:34:C5:C3:3B:DF:8E:5D:61:42:3F:C6:D0:07:F4:E3:FC:03:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f34fc29f-6278-3662-b30a-dceb8aef7261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:2e:30:12:e4:d4:52:fd:e4:45:1f:40:67:7e:71:59:88:f5: 8f:32:0c:e5:77:cb:fe:45:dc:bc:db:ef:36:d2:40:de:1f:e0: 36:3b:99:d3:8c:15:25:40:33:eb:1e:d7:9d:83:f7:56:2a:4f: df:55:50:e5:fe:40:6c:fd:70:98:17:88:8f:6d:30:5f:ec:f1: 6c:ae:82:fc:92:67:17:25:f5:0b:0c:ab:9f:38:af:90:42:07: f2:cf:20:ef:60:ec:dc:7e:dc:ea:be:ca:9f:62:bb:71:2d:03: db:33:63:02:06:c4:bf:08:cf:ad:e7:3d:4b:44:c0:43:6e:07: 5e:71:83:5e:04:2a:ed:cd:49:9d:73:f6:e1:60:a4:92:7b:69: 0a:11:14:54:7c:78:0a:1d:3a:03:ca:fc:9e:fd:45:56:79:9e: c0:c9:a7:50:dc:10:6b:7a:49:f7:b2:ee:cb:b9:7a:e8:01:eb: 07:9f:1a:0b:90:72:ca:11:2d:f9:e5:00:06:09:f5:ec:a9:d3: 3d:bf:9f:43:c7:06:62:32:d1:19:d0:21:5e:d2:09:1a:ce:13: c0:12:c7:97:b4:ea:ec:db:d8:8f:99:56:4a:43:a2:fd:cf:17: 3b:06:73:03:0b:7d:7e:f3:35:3d:09:c9:26:21:54:cd:93:43: 5f:ef:70:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+2eLlcEnxGSE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk Y2YyMjI5YWYtZTI3NS00MWQzLTljYWUtZDc5YTEzMGIzYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAe/Od/4BryXAvWEw57lIh9iJc6jzFjOG5p9 EM6RMs5tcCbGgl3HWMtibO6kJOdOvfOt1rhoc/r6obHaMpPBqbT4/wziTEQiKHoD hRIRWcjVK/j5RcQPwy1MEuEW2TNjIV92vL8hvMtmyA5dgEJL1q9IhSYVXZT2+wvW R2WyUCwFsGPyz+5FgWW41uI0czjpIzklwGu27CmMZTmm8B/GqwY+YtPEvyRG81Ev 6jm+s4yYK4lNYwpJHzY6jssp7cJ95uHQhydnvTPhIx4/T2RS+j7jR5b8vnKXEPe/ KvCOba9cnOgTfNUj9xlF/aeqUAEHtumnhkyZ7Adh7jjKT41zQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy7NMXDO9+OXWFCP8bQB/Tj/AN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjM0ZmMyOWYtNjI3OC0z NjYyLWIzMGEtZGNlYjhhZWY3MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8uMBLk1FL95EUfQGd+cVmI9Y8yDOV3y/5F3Lzb7zbSQN4f4DY7mdOM FSVAM+se152D91YqT99VUOX+QGz9cJgXiI9tMF/s8WyugvySZxcl9QsMq584r5BC B/LPIO9g7Nx+3Oq+yp9iu3EtA9szYwIGxL8Iz63nPUtEwENuB15xg14EKu3NSZ1z 9uFgpJJ7aQoRFFR8eAodOgPK/J79RVZ5nsDJp1DcEGt6Sfey7su5eugB6wefGguQ csoRLfnlAAYJ9eyp0z2/n0PHBmIy0RnQIV7SCRrOE8ASx5e06uzb2I+ZVkpDov3P FzsGcwMLfX7zNT0JySYhVM2TQ1/vcMA= -----END CERTIFICATE-----Generated at Thu Sep 24 17:33:15 2026 by rpki-client