$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43b69a18-0103-3770-86a8-38c87a23e6c5.roa File: 43b69a18-0103-3770-86a8-38c87a23e6c5.roa (raw, json) Hash identifier: o/IUFnP7KscQM3G0nciXud1XydNE7LHwhiHmGdds4FY= Subject key identifier: 73:58:62:A2:7E:4C:69:03:F9:D7:C2:13:7E:8B:DA:4C:CD:05:E0:6B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D0A7794C51476A288D89ADBC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43b69a18-0103-3770-86a8-38c87a23e6c5.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 15169 IP address blocks: 192.178.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:94:c5:14:76:a2:88:d8:9a:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=eb030b93-9ea7-4f30-8ffb-c3c9293926ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:d9:ee:d4:ff:d7:de:ec:47:9a:be:10:09: 23:fe:df:fc:5f:d0:85:24:d3:e5:82:43:66:3f:ca: e7:dc:c5:b1:86:a8:56:4a:a9:b3:60:f9:cf:a4:a7: 54:bc:57:91:ec:a0:6c:4a:52:ef:a2:e6:49:76:4f: f4:3e:e1:4c:69:cd:19:13:43:db:67:81:cd:ba:7b: dd:1a:f1:72:e4:98:88:6e:38:3b:b1:36:c0:c4:d3: 3e:10:fe:9d:fe:73:56:7e:15:ef:bb:03:79:9b:5e: e3:53:49:3f:93:20:1d:29:58:d5:b8:c5:e7:a5:5c: a4:0c:b4:fd:31:94:d2:a1:1e:c1:3f:d6:5f:54:bb: e2:fc:a8:4b:69:b1:73:bc:34:4b:45:71:4c:86:9f: 5e:56:5f:e2:59:32:78:77:b0:c4:90:08:f4:60:c3: ab:71:ed:97:ec:b3:af:b4:0f:34:ef:04:b2:58:24: a7:37:8b:93:45:1c:c6:6a:a1:56:69:b6:22:ef:77: fb:17:23:b6:12:b0:4b:d4:c1:e1:af:89:29:89:9d: 8b:28:9a:81:80:3b:fb:8f:48:e3:5b:69:b9:b1:59: 79:cb:10:51:f8:37:28:aa:92:75:29:e4:da:eb:0c: 6f:4a:6d:5e:61:8c:10:c3:f4:87:b3:2b:93:d9:e9: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:58:62:A2:7E:4C:69:03:F9:D7:C2:13:7E:8B:DA:4C:CD:05:E0:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43b69a18-0103-3770-86a8-38c87a23e6c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e6:78:a7:61:38:29:1c:ff:fd:ef:e7:18:60:4b:6f:1c:e9: f8:3a:52:0f:5b:2c:73:8b:2c:c0:cd:22:fa:ba:02:33:cd:a2: 2a:84:0a:d3:82:55:bc:fc:e5:53:93:90:69:8b:66:ab:4c:1f: 40:4c:86:d2:67:0d:f3:63:d2:3e:7c:47:e0:77:c4:67:21:eb: 40:3e:3f:f4:22:55:de:f5:49:fe:15:60:84:f1:e3:b0:11:33: 53:62:e3:d1:54:69:15:2d:14:ae:14:8e:2d:a8:20:04:21:f9: d8:6f:d3:a1:f7:73:2a:55:7e:30:c8:b5:25:a4:9b:96:fb:10: 18:aa:a0:8d:12:18:01:31:e2:15:8a:55:df:88:b8:b7:c2:99: d3:56:99:50:cf:57:14:63:8b:92:8c:ed:a8:f7:59:c3:b9:1e: 20:63:d3:05:7c:14:cb:11:d4:92:70:05:90:bb:ed:0b:e0:a1: 22:aa:21:d9:ec:6d:17:23:26:46:1e:b9:c0:e0:50:a6:a2:01: 94:5e:4a:79:19:0e:75:b2:cb:10:77:34:fb:fd:6c:0a:a9:2a: 30:45:66:21:1e:dc:c8:cd:b8:74:48:df:e5:50:a5:7c:dd:6d: e0:78:dd:25:ea:e2:ee:b5:62:ec:fd:0e:2e:ec:03:10:10:e3: a7:da:22:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd5TFFHaiiNia28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZWIwMzBiOTMtOWVhNy00ZjMwLThmZmItYzNjOTI5MzkyNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9LZ7tT/197sR5q+EAkj/t/8X9CFJNPlgkNm P8rn3MWxhqhWSqmzYPnPpKdUvFeR7KBsSlLvouZJdk/0PuFMac0ZE0PbZ4HNunvd GvFy5JiIbjg7sTbAxNM+EP6d/nNWfhXvuwN5m17jU0k/kyAdKVjVuMXnpVykDLT9 MZTSoR7BP9ZfVLvi/KhLabFzvDRLRXFMhp9eVl/iWTJ4d7DEkAj0YMOrce2X7LOv tA807wSyWCSnN4uTRRzGaqFWabYi73f7FyO2ErBL1MHhr4kpiZ2LKJqBgDv7j0jj W2m5sVl5yxBR+DcoqpJ1KeTa6wxvSm1eYYwQw/SHsyuT2embHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNYYqJ+TGkD+dfCE36L2kzNBeBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDNiNjlhMTgtMDEwMy0z NzcwLTg2YTgtMzhjODdhMjNlNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3meKdhOCkc//3v5xhgS28c6fg6Ug9bLHOLLMDNIvq6AjPNoiqECtOC Vbz85VOTkGmLZqtMH0BMhtJnDfNj0j58R+B3xGch60A+P/QiVd71Sf4VYITx47AR M1Ni49FUaRUtFK4Uji2oIAQh+dhv06H3cypVfjDItSWkm5b7EBiqoI0SGAEx4hWK Vd+IuLfCmdNWmVDPVxRji5KM7aj3WcO5HiBj0wV8FMsR1JJwBZC77QvgoSKqIdns bRcjJkYeucDgUKaiAZReSnkZDnWyyxB3NPv9bAqpKjBFZiEe3MjNuHRI3+VQpXzd beB43SXq4u61Yuz9Di7sAxAQ46faIiQ= -----END CERTIFICATE-----Generated at Tue Mar 3 10:53:13 2026 by rpki-client