$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67a91c4f-1559-3dfe-a3f5-1fd6ae91cb98.roa File: 67a91c4f-1559-3dfe-a3f5-1fd6ae91cb98.roa (raw, json) Hash identifier: i8gVGIM5W5Jmrc4oXXd9yhwY3nt8d9yIHS/c7K0R94I= Subject key identifier: 0E:51:1C:0A:47:0E:30:EC:4F:F9:AB:00:E7:89:38:49:A6:11:A6:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FB738DFF93AABE305DB7B3900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67a91c4f-1559-3dfe-a3f5-1fd6ae91cb98.roa Signing time: Tue 03 Nov 2026 08:42:58 +0000 ROA not before: Tue 03 Nov 2026 08:42:58 +0000 ROA not after: Mon 01 Feb 2027 08:42:58 +0000 asID: 15169 IP address blocks: 192.179.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b7:38:df:f9:3a:ab:e3:05:db:7b:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 3 08:42:58 2026 GMT Not After : Feb 1 08:42:58 2027 GMT Subject: CN=6f015105-ebe1-4339-be11-c9b557eecb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ed:53:f2:c8:7c:08:8b:c9:d5:43:5a:4d:18: 87:c0:39:f4:71:12:d8:f3:0e:b8:08:e7:b8:3b:c7: c2:21:b2:c1:67:8b:85:dd:a6:e6:6d:14:92:0c:73: b7:cc:89:4e:69:e5:36:69:e1:53:85:24:13:e9:58: 02:59:cf:ae:42:42:c0:ec:d3:8c:de:22:8a:f5:4d: 79:e2:d2:39:0b:2b:73:30:cd:fc:b1:c4:6e:66:91: 0f:11:17:fd:5f:37:93:f3:55:8c:b4:07:36:ee:34: 58:ee:49:c5:40:88:b4:ee:e0:d7:c1:bf:69:1d:76: f1:e1:ab:ff:ac:5f:87:41:9e:0b:eb:9c:89:f0:8b: cc:1c:1e:81:f2:93:53:99:aa:80:e2:82:6d:fb:7d: 97:21:2d:4d:c6:45:48:0d:28:c5:eb:91:6e:ff:3e: 06:fa:db:f5:63:f1:26:55:ec:94:30:7f:c2:74:87: e5:3b:e6:65:82:8f:1c:7d:fd:0d:9b:4f:cc:09:0a: a0:84:c7:a1:6d:54:30:be:96:24:fa:0e:bb:14:68: 51:37:19:a7:61:28:24:e7:1f:04:9c:7a:ca:b3:0c: 36:0e:7c:86:df:39:6f:cb:50:28:1a:9f:6b:94:64: 2d:9b:57:5f:8d:1a:b9:53:6b:23:ab:17:27:fe:90: cd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:51:1C:0A:47:0E:30:EC:4F:F9:AB:00:E7:89:38:49:A6:11:A6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67a91c4f-1559-3dfe-a3f5-1fd6ae91cb98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.179.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:93:75:a7:e0:2c:47:59:52:db:88:87:bc:47:b1:6b:06:6d: 5d:7e:c6:c9:05:d2:a8:c2:71:91:9a:f4:b8:1c:62:7e:fe:5e: e6:2a:57:f3:89:77:ec:96:89:c1:ec:50:98:f6:b3:14:41:e3: ce:0b:5d:17:70:5b:37:68:eb:49:a6:d3:35:20:15:07:b7:85: 38:59:96:52:ef:c6:80:f3:16:2a:83:22:dd:a5:6b:1c:11:d9: 65:c7:71:fa:1a:dd:53:a1:4d:7a:94:5a:46:d3:53:09:2a:28: e4:b2:3f:d6:1c:2a:c6:59:ee:57:3a:5b:f5:26:c3:a8:0b:ae: 64:fe:07:ce:77:9d:98:56:64:fa:b5:c5:06:c9:b3:09:91:76: f0:6a:9f:fa:e7:fa:06:1b:4e:b3:a3:b1:d2:13:2a:ff:22:39: fa:66:a8:a0:b2:af:ea:a8:18:00:1f:06:f0:2e:75:4d:44:be: 81:4c:57:e6:ef:ff:30:ee:e8:da:5c:12:d1:65:b5:61:cb:45: 74:60:9b:e5:9e:73:84:9f:0c:bb:25:ac:d5:70:7b:fd:b3:c5: fb:06:73:f2:e2:24:fc:04:bd:f3:c3:14:6e:2f:c4:ef:31:5f: 43:6e:33:1f:d5:2c:8a:0e:a5:3f:d8:7c:1c:db:75:28:16:31: fe:69:24:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+3ON/5OqvjBdt7OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTEwMzA4NDI1OFoXDTI3MDIwMTA4NDI1OFowLzEtMCsGA1UEAxMk NmYwMTUxMDUtZWJlMS00MzM5LWJlMTEtYzliNTU3ZWVjYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO1T8sh8CIvJ1UNaTRiHwDn0cRLY8w64COe4 O8fCIbLBZ4uF3abmbRSSDHO3zIlOaeU2aeFThSQT6VgCWc+uQkLA7NOM3iKK9U15 4tI5CytzMM38scRuZpEPERf9XzeT81WMtAc27jRY7knFQIi07uDXwb9pHXbx4av/ rF+HQZ4L65yJ8IvMHB6B8pNTmaqA4oJt+32XIS1NxkVIDSjF65Fu/z4G+tv1Y/Em VeyUMH/CdIflO+Zlgo8cff0Nm0/MCQqghMehbVQwvpYk+g67FGhRNxmnYSgk5x8E nHrKsww2DnyG3zlvy1AoGp9rlGQtm1dfjRq5U2sjqxcn/pDNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5RHApHDjDsT/mrAOeJOEmmEaYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjdhOTFjNGYtMTU1OS0z ZGZlLWEzZjUtMWZkNmFlOTFjYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLNRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqTdafgLEdZUtuIh7xHsWsGbV1+xskF0qjCcZGa9LgcYn7+XuYqV/OJ d+yWicHsUJj2sxRB484LXRdwWzdo60mm0zUgFQe3hThZllLvxoDzFiqDIt2laxwR 2WXHcfoa3VOhTXqUWkbTUwkqKOSyP9YcKsZZ7lc6W/Umw6gLrmT+B853nZhWZPq1 xQbJswmRdvBqn/rn+gYbTrOjsdITKv8iOfpmqKCyr+qoGAAfBvAudU1EvoFMV+bv /zDu6NpcEtFltWHLRXRgm+Wec4SfDLslrNVwe/2zxfsGc/LiJPwEvfPDFG4vxO8x X0NuMx/VLIoOpT/YfBzbdSgWMf5pJJ4= -----END CERTIFICATE-----Generated at Tue Nov 10 22:49:56 2026 by rpki-client