$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/683e1d4c-dd2a-32f8-8e5e-400c4bebaf33.roa File: 683e1d4c-dd2a-32f8-8e5e-400c4bebaf33.roa (raw, json) Hash identifier: Vrc5dxeqObOIPwPGNgrmCVsNgTtLrvdLuhqPfzhxFno= Subject key identifier: 5B:DD:44:D6:8E:CC:1B:43:7E:F1:1C:D8:DD:A8:7C:17:32:94:83:75 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FA42DEFE44037BD881390AF80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/683e1d4c-dd2a-32f8-8e5e-400c4bebaf33.roa Signing time: Tue 27 Oct 2026 13:00:13 +0000 ROA not before: Tue 27 Oct 2026 13:00:13 +0000 ROA not after: Mon 25 Jan 2027 14:00:13 +0000 asID: 15169 IP address blocks: 192.179.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:2d:ef:e4:40:37:bd:88:13:90:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 27 13:00:13 2026 GMT Not After : Jan 25 14:00:13 2027 GMT Subject: CN=f5cfe8e2-ee1b-4b0f-b97e-a92dca53bb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:ad:e3:e0:e2:09:a3:cc:84:0f:cb:9e:39: 60:6f:32:fd:57:d4:63:f0:71:bb:c4:94:28:94:5a: 6b:a0:26:cc:92:16:31:78:13:d9:fe:9e:46:24:3f: 72:a0:49:cd:fb:8b:89:84:b1:a5:11:85:fc:f6:0b: 70:09:4b:ab:45:a8:f2:96:bf:fa:9a:66:8c:74:6d: 70:13:7b:ec:3f:8f:63:69:a4:1d:bc:31:8d:ec:fd: cc:99:2c:ae:a5:ac:60:3b:83:66:17:70:61:9d:d6: d2:8a:9c:5c:6e:af:8b:ec:29:eb:ba:cf:8f:6c:0a: 5a:25:50:bf:74:21:84:c9:1a:f7:35:ed:62:5d:7a: 5d:98:44:32:e6:e6:0b:33:18:d0:5c:43:56:87:cb: 2c:f4:75:a3:69:11:ec:cf:26:ab:da:b1:91:79:61: bb:23:8e:62:4b:e2:b7:f7:f5:12:ca:82:e6:57:53: 5c:ad:5d:46:23:a9:8e:b7:e3:85:86:80:8b:57:b2: d2:00:55:21:41:0c:60:d5:28:aa:c8:60:f3:2e:fa: f6:c9:16:d4:2f:10:3b:a1:3e:d6:9e:d5:0a:b6:9d: 6d:c3:8d:17:1d:32:c3:92:24:fd:f0:2d:85:e1:94: a2:5f:73:54:24:89:ba:8f:28:41:e8:66:d7:5a:94: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DD:44:D6:8E:CC:1B:43:7E:F1:1C:D8:DD:A8:7C:17:32:94:83:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/683e1d4c-dd2a-32f8-8e5e-400c4bebaf33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.179.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:32:b3:5a:98:cb:d2:3e:75:01:dc:ba:b1:de:7d:4d:0f:89: 1e:99:cd:24:b8:8f:bd:47:27:a2:e2:99:60:93:b4:e4:a5:b9: d5:8e:36:85:07:51:8e:98:8d:8d:e4:3f:e7:ba:d6:70:eb:e1: 53:ba:3c:3f:9a:b0:fc:99:40:24:59:5d:e6:f1:25:bc:8a:9e: 3e:e8:88:93:cf:00:c5:27:81:c3:09:ea:d2:f4:74:c2:a5:e8: 07:73:ef:2d:ad:13:33:81:d7:82:31:87:63:70:09:96:c5:23: 3c:6b:38:d4:96:89:12:d2:b8:b7:54:a4:a6:d8:5f:95:fd:69: 67:5f:da:0c:37:42:bd:db:e6:86:57:6e:c0:b3:fc:b0:f6:bb: 4b:13:2e:44:cb:70:8c:e1:94:e3:14:4d:75:33:69:05:a4:b9: 5d:78:76:97:2a:17:1d:02:a5:b2:1e:88:c9:a9:8e:ad:a2:99: 1a:f2:f0:ea:0c:91:82:ed:f2:f5:3b:9b:75:88:6d:1b:df:c6: 00:14:5c:50:c8:5d:b2:b8:8c:b8:4d:20:d5:95:29:02:88:ba: c9:73:7f:b5:8c:74:0f:5d:7a:5e:9e:44:f4:40:72:37:24:f0: 99:ed:42:fa:f1:fd:77:f7:59:ac:d9:27:dd:76:b6:1f:64:26: a0:73:fa:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+kLe/kQDe9iBOQr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk ZjVjZmU4ZTItZWUxYi00YjBmLWI5N2UtYTkyZGNhNTNiYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDOt4+DiCaPMhA/LnjlgbzL9V9Rj8HG7xJQo lFproCbMkhYxeBPZ/p5GJD9yoEnN+4uJhLGlEYX89gtwCUurRajylr/6mmaMdG1w E3vsP49jaaQdvDGN7P3MmSyupaxgO4NmF3BhndbSipxcbq+L7Cnrus+PbApaJVC/ dCGEyRr3Ne1iXXpdmEQy5uYLMxjQXENWh8ss9HWjaRHszyar2rGReWG7I45iS+K3 9/USyoLmV1NcrV1GI6mOt+OFhoCLV7LSAFUhQQxg1SiqyGDzLvr2yRbULxA7oT7W ntUKtp1tw40XHTLDkiT98C2F4ZSiX3NUJIm6jyhB6GbXWpRzpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvdRNaOzBtDfvEc2N2ofBcylIN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjgzZTFkNGMtZGQyYS0z MmY4LThlNWUtNDAwYzRiZWJhZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLMZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAys1qYy9I+dQHcurHefU0PiR6ZzSS4j71HJ6LimWCTtOSludWONoUH UY6YjY3kP+e61nDr4VO6PD+asPyZQCRZXebxJbyKnj7oiJPPAMUngcMJ6tL0dMKl 6Adz7y2tEzOB14Ixh2NwCZbFIzxrONSWiRLSuLdUpKbYX5X9aWdf2gw3Qr3b5oZX bsCz/LD2u0sTLkTLcIzhlOMUTXUzaQWkuV14dpcqFx0CpbIeiMmpjq2imRry8OoM kYLt8vU7m3WIbRvfxgAUXFDIXbK4jLhNINWVKQKIuslzf7WMdA9del6eRPRAcjck 8JntQvrx/Xf3WazZJ912th9kJqBz+iY= -----END CERTIFICATE-----Generated at Tue Nov 10 22:50:57 2026 by rpki-client