$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa File: 5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa (raw, json) Hash identifier: jHoa5PXfMMOwfiVtbb6c5yBj59ZGq66u5aAe838vpIM= Subject key identifier: A2:8A:30:2E:D9:10:E7:61:10:FA:9F:B1:A8:B7:69:47:DF:89:1C:98 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03F2ADA74D5A049E81740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 192.178.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:3f:2a:da:74:d5:a0:49:e8:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=14c8f33d-44e4-432c-900e-b9e6156cd81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:36:d1:08:0b:14:7a:22:75:71:8c:bc:44: ff:d3:b3:fe:77:07:28:da:ac:0c:7d:0d:c0:76:de: be:b2:87:84:43:54:10:ed:00:28:ac:13:8c:b7:0c: 25:82:cc:86:00:d7:27:bd:e7:e8:b2:83:0d:58:3d: bb:e4:7a:74:56:4e:bb:bb:0f:c7:8a:a9:ab:2b:00: 3f:62:66:21:a9:89:25:11:68:92:ac:a2:bc:db:bf: f1:11:7b:11:15:5d:65:ac:c9:fc:c3:f9:79:66:01: 6a:68:86:61:9b:3f:3e:2c:75:1d:f1:6d:aa:ab:e3: 29:90:aa:d1:a1:3c:f0:b2:12:46:cb:ac:53:16:33: 04:fe:2f:02:07:0d:88:91:f3:44:73:04:20:a5:36: 5c:d1:be:4b:23:a0:7b:6b:65:c1:9d:60:4a:6e:8e: 8d:90:ad:cb:77:d5:50:c7:17:d6:45:0f:e0:6f:a6: 8a:d8:06:3e:13:61:2a:61:79:66:73:3c:02:ed:8e: db:49:4d:1d:c7:c0:90:ab:4b:ab:07:13:44:29:3f: ef:a7:55:25:23:43:68:eb:b9:5e:a2:26:81:59:e5: 69:99:e2:cf:94:1e:45:73:03:d3:e1:68:1e:52:7a: a4:e6:ca:95:b6:31:98:e8:5c:b0:d6:1d:19:aa:f0: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8A:30:2E:D9:10:E7:61:10:FA:9F:B1:A8:B7:69:47:DF:89:1C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:cb:c0:5c:68:90:5b:5b:eb:a4:e0:95:07:33:c9:87:11:b9: 2d:c6:4f:b1:4b:29:ba:6a:d4:51:0d:ae:ce:2a:18:4b:34:39: ad:8f:aa:d0:88:c1:13:ee:07:89:47:42:59:d4:59:d4:79:8f: 5d:cc:f6:1a:ae:9a:89:13:ff:5b:74:db:76:54:1d:13:bc:04: 9a:92:cf:6f:86:20:ec:ac:5d:81:cc:93:13:bf:61:c9:c5:f1: e7:78:72:85:b0:d3:44:35:c6:b1:9e:92:67:4d:97:f6:a6:90: b3:58:e5:10:fd:b6:35:36:9f:f2:41:e6:99:0b:39:0c:eb:a3: cc:2f:70:5f:98:17:aa:1b:f1:14:b9:ce:f2:d4:b2:e6:57:25: 17:8f:0a:56:a7:f7:5d:bd:f0:77:32:a3:e5:1c:fc:9e:7b:74: 38:b0:b7:d6:cd:c7:b5:ee:11:67:4e:27:27:d9:24:e5:6c:d9: 53:f8:2e:87:36:bc:6f:d8:6d:0f:f1:42:42:48:9e:1f:ed:8a: 0c:37:91:c2:7e:65:ac:59:52:fd:03:a5:6c:8d:79:5f:0e:02: 14:28:dc:20:dd:bd:23:84:13:d2:73:df:28:74:56:73:ca:44: e9:96:c9:4f:ff:e5:fb:12:12:8f:ed:46:72:d5:c6:87:4a:19: fa:11:a2:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4D8q2nTVoEnoF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTRjOGYzM2QtNDRlNC00MzJjLTkwMGUtYjllNjE1NmNkODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmI20QgLFHoidXGMvET/07P+dwco2qwMfQ3A dt6+soeEQ1QQ7QAorBOMtwwlgsyGANcnvefosoMNWD275Hp0Vk67uw/HiqmrKwA/ YmYhqYklEWiSrKK827/xEXsRFV1lrMn8w/l5ZgFqaIZhmz8+LHUd8W2qq+MpkKrR oTzwshJGy6xTFjME/i8CBw2IkfNEcwQgpTZc0b5LI6B7a2XBnWBKbo6NkK3Ld9VQ xxfWRQ/gb6aK2AY+E2EqYXlmczwC7Y7bSU0dx8CQq0urBxNEKT/vp1UlI0No67le oiaBWeVpmeLPlB5FcwPT4WgeUnqk5sqVtjGY6Fyw1h0ZqvDSsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKKMC7ZEOdhEPqfsai3aUffiRyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTUxNmM0MmMtNDNiNy0z MGM1LWI2ZmItODViZDYwNTZkMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILLwFxokFtb66TglQczyYcRuS3GT7FLKbpq1FENrs4qGEs0Oa2PqtCI wRPuB4lHQlnUWdR5j13M9hqumokT/1t023ZUHRO8BJqSz2+GIOysXYHMkxO/YcnF 8ed4coWw00Q1xrGekmdNl/amkLNY5RD9tjU2n/JB5pkLOQzro8wvcF+YF6ob8RS5 zvLUsuZXJRePClan91298Hcyo+Uc/J57dDiwt9bNx7XuEWdOJyfZJOVs2VP4Loc2 vG/YbQ/xQkJInh/tigw3kcJ+ZaxZUv0DpWyNeV8OAhQo3CDdvSOEE9Jz3yh0VnPK ROmWyU//5fsSEo/tRnLVxodKGfoRogc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:49 2026 by rpki-client