$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa File: 211bf909-5b40-31a9-9871-addf1a48e134.roa (raw, json) Hash identifier: HYb//9E23YOo0KmShJYS9IT8E6SSsaA6lF0wI1QM9Xc= Subject key identifier: 53:AD:89:CA:08:D8:D8:19:28:A6:B7:DD:DA:63:AF:82:DB:0E:05:A3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D0318C4B75EB13AE84680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:03:18:c4:b7:5e:b1:3a:e8:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=63cc9253-032d-474f-aa8a-36690d33a465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:17:a5:9c:11:9a:f2:6a:ed:c0:23:a8:2f: eb:5e:a9:76:62:b0:57:65:60:3c:cc:66:82:1a:fc: a5:3d:8e:02:d1:fe:c5:58:a0:9c:73:1d:ee:38:ca: ac:55:2e:e6:5b:bd:34:82:c9:5b:89:05:04:3a:a1: 30:df:04:1c:25:8a:18:50:6d:1f:2c:87:0f:77:a1: fa:58:e0:e8:3d:c0:81:72:20:b5:10:8a:f7:c7:00: 3d:36:cb:bb:92:2b:bc:a6:54:fa:dd:94:01:2d:ca: 31:27:e3:a4:1d:ca:a9:27:a3:b4:43:b8:1f:3c:a9: 5e:6e:14:db:b8:40:4b:00:94:f8:93:d2:d7:b2:e3: d8:bc:ec:0e:9f:e4:21:9f:64:c9:8e:d6:9b:f8:2c: fc:73:67:8c:c3:72:54:11:06:0f:ac:2f:69:22:c4: a0:17:3a:2e:e6:e1:ac:5f:41:c6:14:da:74:48:2d: 01:27:ef:3d:69:96:59:ae:10:d2:c7:e8:6f:62:f7: 28:6f:01:88:32:14:1c:b9:3e:d7:35:31:12:d1:4e: 49:26:db:fa:c7:de:48:1c:b4:44:70:1d:4f:ff:f2: ce:1a:3b:49:64:3b:2f:15:e9:38:b6:b2:ac:53:12: 52:df:2b:91:7a:b3:80:d7:1a:35:3b:5b:23:69:0f: 14:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AD:89:CA:08:D8:D8:19:28:A6:B7:DD:DA:63:AF:82:DB:0E:05:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:22:a3:58:07:50:9e:02:07:b7:2a:e0:f1:cf:d5:53:af:3f: e4:13:01:f6:e4:9a:7b:89:f5:18:e8:9a:11:21:e6:9e:b4:11: 1e:e7:03:3f:ff:59:f5:97:a6:ad:44:95:1e:0d:3a:c0:25:04: c3:3e:62:97:fe:8c:b3:ae:85:73:8a:ca:5e:10:d6:7c:74:8b: 75:12:5c:cb:d6:51:c9:99:8c:6f:1c:9e:68:21:26:e0:a3:5d: 90:77:74:ff:86:33:38:80:d2:f7:de:10:36:dc:98:8c:b0:48: 6c:a0:4a:ad:51:8f:30:84:cf:ce:ef:bc:04:14:5f:be:ac:c7: e9:7a:51:74:b0:a3:6b:84:3d:a4:02:0e:28:2c:bb:38:99:a4: e2:81:67:56:e6:80:d4:56:d6:85:3a:9b:c4:a7:24:fe:62:a8: a6:63:27:64:33:a4:9c:e8:2e:fe:26:a9:7e:29:b3:aa:90:e5: bb:a2:3e:7d:99:a9:65:2f:8b:09:52:94:b5:ae:9f:f3:56:13: 03:df:50:0d:a0:87:f1:64:53:d3:b3:97:bf:13:27:e4:ed:6f: 3b:69:3c:22:e5:d1:a9:6f:92:7d:cb:24:79:cb:ef:52:82:98: 93:13:e2:0b:dc:82:95:eb:02:f9:bd:11:b9:2c:42:9b:31:d7: 64:b3:20:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQMYxLdesTroRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjNjYzkyNTMtMDMyZC00NzRmLWFhOGEtMzY2OTBkMzNhNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwUXpZwRmvJq7cAjqC/rXql2YrBXZWA8zGaC GvylPY4C0f7FWKCccx3uOMqsVS7mW700gslbiQUEOqEw3wQcJYoYUG0fLIcPd6H6 WODoPcCBciC1EIr3xwA9Nsu7kiu8plT63ZQBLcoxJ+OkHcqpJ6O0Q7gfPKlebhTb uEBLAJT4k9LXsuPYvOwOn+Qhn2TJjtab+Cz8c2eMw3JUEQYPrC9pIsSgFzou5uGs X0HGFNp0SC0BJ+89aZZZrhDSx+hvYvcobwGIMhQcuT7XNTES0U5JJtv6x95IHLRE cB1P//LOGjtJZDsvFek4trKsUxJS3yuRerOA1xo1O1sjaQ8UXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOticoI2NgZKKa33dpjr4LbDgWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjExYmY5MDktNWI0MC0z MWE5LTk4NzEtYWRkZjFhNDhlMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcio1gHUJ4CB7cq4PHP1VOvP+QTAfbkmnuJ9RjomhEh5p60ER7nAz// WfWXpq1ElR4NOsAlBMM+Ypf+jLOuhXOKyl4Q1nx0i3USXMvWUcmZjG8cnmghJuCj XZB3dP+GMziA0vfeEDbcmIywSGygSq1RjzCEz87vvAQUX76sx+l6UXSwo2uEPaQC DigsuziZpOKBZ1bmgNRW1oU6m8SnJP5iqKZjJ2QzpJzoLv4mqX4ps6qQ5buiPn2Z qWUviwlSlLWun/NWEwPfUA2gh/FkU9Ozl78TJ+TtbztpPCLl0alvkn3LJHnL71KC mJMT4gvcgpXrAvm9EbksQpsx12SzIEk= -----END CERTIFICATE-----Generated at Fri Sep 25 14:55:15 2026 by rpki-client