$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa File: 211bf909-5b40-31a9-9871-addf1a48e134.roa (raw, json) Hash identifier: n6BQHyVY93n5QofU3y5HBafdhOMoU3Gfhf2sOo8snRg= Subject key identifier: 9A:E2:97:F3:32:B1:FD:2A:23:A1:E6:83:F4:3B:82:B6:99:D8:B7:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03BFD25F8FFC8152CCDC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 192.178.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:3b:fd:25:f8:ff:c8:15:2c:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c97fb183-8524-49ec-a55c-4dd9397f52ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:3b:53:5d:c4:e4:9d:7d:8b:7f:13:4c:10: 9a:5e:78:8f:ef:22:dd:16:b1:1c:ac:5c:de:57:d2: 73:39:ad:34:e2:a2:05:aa:90:19:2c:10:d0:5b:18: 14:9f:57:57:30:59:31:2d:17:38:e9:e9:ff:c8:52: cf:9b:a2:94:c1:46:70:02:d2:ea:d1:f4:55:68:e5: 20:86:e8:96:0b:ba:4b:9d:08:02:cd:e9:be:42:08: 4e:f7:33:55:86:78:78:ef:7e:d9:d3:ea:55:4d:47: cb:0c:6a:c6:27:97:fc:c3:d0:e1:1a:d6:9f:ef:9d: c2:89:68:4f:b9:70:f1:42:e7:a2:43:84:2e:b5:ce: 8e:c2:fc:c1:77:4d:ab:0a:73:2d:96:e2:28:fa:e4: 98:d5:89:56:9f:0b:fd:46:98:a2:11:de:d5:58:6f: 13:40:70:45:c6:75:3c:ae:f1:d0:1f:aa:06:54:3b: ac:5d:f6:af:c3:fc:7a:0b:b1:36:af:7e:1e:99:4b: 0a:ba:8e:c6:c6:33:28:a6:2e:c7:b2:1f:52:da:90: 0c:f9:87:6c:03:a1:1b:ed:30:bf:6f:33:41:cd:68: 88:28:b1:56:06:67:25:76:8c:b3:08:22:50:c9:0f: de:e1:f7:91:cf:2e:a4:dd:ac:17:f3:0a:49:85:52: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E2:97:F3:32:B1:FD:2A:23:A1:E6:83:F4:3B:82:B6:99:D8:B7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:30:83:72:be:aa:9a:f6:64:02:6a:c4:e5:4b:17:7d:3a:83: e9:14:a4:4f:b2:6a:8d:7c:d1:b0:8e:f4:cd:15:ca:eb:0a:fc: 19:0f:94:0b:a9:ed:2c:d9:56:c0:86:56:5f:92:86:db:02:69: 21:47:2f:1e:75:f5:81:91:d6:57:f0:82:43:37:49:90:15:f2: ee:63:1a:fd:a0:b1:a4:e1:e8:02:6e:45:69:0a:f5:6b:22:49: 08:8c:5a:72:3f:fd:af:cb:7e:7b:3f:2b:14:d1:38:40:35:79: 10:62:8e:05:b4:f4:b4:71:7b:04:6e:13:30:00:f3:8d:52:3b: ba:0a:24:f3:14:f6:c3:81:b3:0d:68:e1:13:c7:e3:8a:5a:94: 00:e9:24:9e:9a:0e:e4:55:91:7a:2e:a4:b8:f6:ca:df:d8:59: 9e:1c:cd:f4:75:ad:81:ca:f3:b9:dd:f9:a5:22:8e:1b:da:3e: 63:0c:7f:fe:36:60:71:f8:b9:e3:8a:71:15:78:76:b9:68:37: c1:3b:03:76:1c:33:cd:3e:2c:ed:ba:65:d8:6d:83:52:b5:a1: 18:18:37:40:f7:42:7a:45:fb:85:08:47:fe:40:07:3a:06:22: 65:77:db:6e:b8:c1:ec:d1:64:a7:fa:f2:31:79:19:b4:0d:6e: 29:b5:15:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Dv9Jfj/yBUszcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Yzk3ZmIxODMtODUyNC00OWVjLWE1NWMtNGRkOTM5N2Y1MmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmM7U13E5J19i38TTBCaXniP7yLdFrEcrFze V9JzOa004qIFqpAZLBDQWxgUn1dXMFkxLRc46en/yFLPm6KUwUZwAtLq0fRVaOUg huiWC7pLnQgCzem+QghO9zNVhnh4737Z0+pVTUfLDGrGJ5f8w9DhGtaf753CiWhP uXDxQueiQ4Qutc6OwvzBd02rCnMtluIo+uSY1YlWnwv9RpiiEd7VWG8TQHBFxnU8 rvHQH6oGVDusXfavw/x6C7E2r34emUsKuo7GxjMopi7Hsh9S2pAM+YdsA6Eb7TC/ bzNBzWiIKLFWBmcldoyzCCJQyQ/e4feRzy6k3awX8wpJhVI2PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJril/Mysf0qI6Hmg/Q7graZ2LfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjExYmY5MDktNWI0MC0z MWE5LTk4NzEtYWRkZjFhNDhlMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcwg3K+qpr2ZAJqxOVLF306g+kUpE+yao180bCO9M0VyusK/BkPlAup 7SzZVsCGVl+ShtsCaSFHLx519YGR1lfwgkM3SZAV8u5jGv2gsaTh6AJuRWkK9Wsi SQiMWnI//a/Lfns/KxTROEA1eRBijgW09LRxewRuEzAA841SO7oKJPMU9sOBsw1o 4RPH44palADpJJ6aDuRVkXoupLj2yt/YWZ4czfR1rYHK87nd+aUijhvaPmMMf/42 YHH4ueOKcRV4drloN8E7A3YcM80+LO26Zdhtg1K1oRgYN0D3QnpF+4UIR/5ABzoG ImV32264wezRZKf68jF5GbQNbim1FZg= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:53 2026 by rpki-client