$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa File: 70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa (raw, json) Hash identifier: 8g8/1UT4/l7L0TXbjCHFcnOzYxPFCC0gEKe9rlw7nVM= Subject key identifier: 6C:42:05:1B:03:73:78:8B:28:F8:E2:C0:B0:22:00:BD:7A:18:9C:16 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4986979433FE86905415D780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:97:94:33:fe:86:90:54:15:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4c93c4d2-797a-4ef3-aa57-292933b2ef22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d3:d0:fd:e3:b0:fa:70:4f:62:dd:4c:25:28: ad:ce:ac:3e:3f:b5:de:7c:fa:f4:91:45:e6:f9:4e: 9c:6f:c4:8d:f5:77:08:a9:80:36:9f:11:26:8a:3a: 26:23:3e:1b:c2:c2:81:d2:77:0c:5b:0d:07:07:42: 28:d8:b3:ba:81:78:0d:4f:5b:10:6b:3d:e6:da:82: f4:97:aa:be:3b:35:a4:ae:91:34:34:6f:7e:05:a4: aa:df:ec:87:4e:ab:fa:5c:73:01:d1:11:64:29:4d: 52:4d:ac:b0:9a:45:04:79:06:1a:e4:c2:34:87:63: 5d:73:8c:2f:c6:d3:61:5f:df:d3:07:42:34:8a:3c: cd:f9:77:56:57:62:d3:46:ec:f7:8f:84:84:30:ba: 0c:01:98:cd:c0:2b:6f:97:20:ae:81:c1:8a:cf:c6: cc:fc:c6:ec:3d:65:32:a4:ff:b0:c7:0e:6b:10:e0: 84:b6:a5:1f:e4:cf:7c:79:86:5b:20:5b:18:21:8a: 85:fd:ce:c6:10:34:2e:0e:08:05:d3:2b:8d:92:01: 1a:ae:4b:41:d4:fc:fa:f0:cb:fd:cb:e6:c9:3d:a1: f9:6f:16:ff:12:17:51:3f:6d:e6:94:97:be:c8:c8: d2:40:8c:c6:fa:cc:b8:6b:f4:93:b2:fc:a4:6c:d3: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:42:05:1B:03:73:78:8B:28:F8:E2:C0:B0:22:00:BD:7A:18:9C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ed:a3:15:99:86:45:8a:9f:be:3d:af:cf:e3:f4:f9:58:39: 05:a5:37:4d:3c:31:5e:c5:1d:3c:3e:77:53:5b:3a:97:12:8a: 50:b1:e5:f5:11:88:e1:bc:78:ea:16:23:f6:bc:66:7d:1c:08: 3c:1d:3e:48:cf:13:32:4f:0a:01:5a:cc:bb:d7:58:02:55:01: 92:8d:ef:7b:11:f3:3d:ad:dc:d2:06:01:e8:4b:71:64:d1:bf: 2f:51:c2:a9:db:d2:20:94:80:4b:fe:89:25:5a:b8:ff:fb:d1: 5b:c9:c6:21:6e:4b:b7:b9:eb:04:70:7b:27:4b:56:d8:bf:9a: 10:2b:0b:7d:65:6f:d6:6a:90:b5:74:cd:b5:98:0b:d6:8a:84: 17:3c:e4:c0:24:e2:6a:e6:b5:4a:4e:b5:0a:8a:d7:19:6e:a5: f3:f2:dc:ba:cc:87:4f:85:29:80:7a:b8:b8:c8:e0:f3:35:97: 64:bf:e7:bb:fc:e5:27:61:a0:2a:a6:c2:0c:31:98:34:7b:18: 9a:77:ef:73:13:af:5e:00:d3:e3:55:c7:30:b9:12:46:ea:f8: 9c:ce:64:05:30:f6:de:d0:1b:e0:3c:e3:a2:b4:04:9f:c5:d8: fb:50:d9:97:d6:2f:e5:96:d2:2f:5d:7f:6c:e1:75:95:ad:5e: d5:a0:99:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhpeUM/6GkFQV14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGM5M2M0ZDItNzk3YS00ZWYzLWFhNTctMjkyOTMzYjJlZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNPQ/eOw+nBPYt1MJSitzqw+P7XefPr0kUXm +U6cb8SN9XcIqYA2nxEmijomIz4bwsKB0ncMWw0HB0Io2LO6gXgNT1sQaz3m2oL0 l6q+OzWkrpE0NG9+BaSq3+yHTqv6XHMB0RFkKU1STaywmkUEeQYa5MI0h2Ndc4wv xtNhX9/TB0I0ijzN+XdWV2LTRuz3j4SEMLoMAZjNwCtvlyCugcGKz8bM/MbsPWUy pP+wxw5rEOCEtqUf5M98eYZbIFsYIYqF/c7GEDQuDggF0yuNkgEarktB1Pz68Mv9 y+bJPaH5bxb/EhdRP23mlJe+yMjSQIzG+sy4a/STsvykbNPF8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxCBRsDc3iLKPjiwLAiAL16GJwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzBiNmViM2ItM2EwNC0z ZjVhLWJjZjEtMTI5MDRlNDI2Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7toxWZhkWKn749r8/j9PlYOQWlN008MV7FHTw+d1NbOpcSilCx5fUR iOG8eOoWI/a8Zn0cCDwdPkjPEzJPCgFazLvXWAJVAZKN73sR8z2t3NIGAehLcWTR vy9Rwqnb0iCUgEv+iSVauP/70VvJxiFuS7e56wRweydLVti/mhArC31lb9ZqkLV0 zbWYC9aKhBc85MAk4mrmtUpOtQqK1xlupfPy3LrMh0+FKYB6uLjI4PM1l2S/57v8 5SdhoCqmwgwxmDR7GJp373MTr14A0+NVxzC5Ekbq+JzOZAUw9t7QG+A846K0BJ/F 2PtQ2ZfWL+WW0i9df2zhdZWtXtWgmbo= -----END CERTIFICATE-----Generated at Fri Sep 25 14:51:34 2026 by rpki-client