$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7166acb3-4e0e-3af2-93fb-bb16665e5b10.roa File: 7166acb3-4e0e-3af2-93fb-bb16665e5b10.roa (raw, json) Hash identifier: 4uoIq2xHtMYOPmrf/QnTIQy3pTvw4Q40HFNz/pH8aF8= Subject key identifier: A5:D6:C2:1B:E1:43:12:4C:03:FA:65:74:B4:18:E3:8B:51:69:2C:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7F011EB028CA0D617E810 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7166acb3-4e0e-3af2-93fb-bb16665e5b10.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f0:11:eb:02:8c:a0:d6:17:e8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=d95eac58-03fe-44e1-9804-b54da776e08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c6:33:54:5b:5b:79:b5:1f:fd:56:3b:32:af: a0:b4:e9:24:fe:ff:5c:1f:74:22:3b:13:d8:c2:05: 4f:7a:04:7e:fc:3b:75:d1:d8:7a:13:63:3b:6b:45: ba:41:89:65:05:4e:c2:15:91:83:43:65:4c:56:7a: 29:e6:3b:43:2a:cb:f1:b6:c3:df:8c:37:1f:b2:72: 85:7c:9f:11:22:46:47:70:bc:9f:04:8e:70:32:27: 37:be:83:94:81:56:06:81:61:a7:e8:67:b4:ee:a7: c6:70:6b:18:9d:5d:14:3d:3d:5e:12:1d:85:35:b3: 86:95:a2:a5:03:fb:b4:f2:df:b1:6f:27:34:fa:8e: 80:16:e6:cc:0d:1b:dc:ba:31:9e:a5:61:90:fe:3b: bd:31:6d:1e:ef:b6:4f:79:47:03:d2:cd:c9:6b:e8: 05:c6:cc:7c:23:21:d4:f6:3f:d5:1d:a4:b9:63:8b: 0b:f2:56:e0:0e:04:17:d5:91:e2:69:15:60:6c:41: 84:e4:2d:87:33:05:e8:96:a8:95:45:e7:b4:ef:41: fa:28:97:f3:ae:da:80:b6:aa:9f:61:e9:ca:2c:4c: 82:b3:fe:cc:c1:9d:c0:5e:33:10:7d:3c:23:35:a1: 6f:47:5a:63:66:97:ca:f8:00:90:b3:4d:43:12:d9: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D6:C2:1B:E1:43:12:4C:03:FA:65:74:B4:18:E3:8B:51:69:2C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7166acb3-4e0e-3af2-93fb-bb16665e5b10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:4f:ab:6e:22:46:e1:bb:21:7a:49:63:4e:a0:b4:8a:02:56: cf:d8:d6:3f:7d:fb:dc:5e:f7:7d:17:6c:5a:23:6c:26:d1:bc: e1:1a:92:4b:db:7f:df:9d:05:e1:7f:76:ef:11:a8:6e:1c:28: 46:5b:bc:b2:c5:f9:6f:37:fd:5e:35:50:b2:6d:f6:96:bf:42: fe:6a:af:79:b5:37:09:19:11:5c:fb:8d:ec:00:03:0e:ba:57: c7:2d:d6:97:8e:ea:d1:9c:04:83:5f:9f:1d:99:98:a6:d8:91: 09:72:72:d4:ba:b7:be:d8:8f:9f:f7:5c:11:bb:3e:24:14:dc: 4f:0c:d7:b4:5f:8a:63:3b:30:54:40:51:43:59:4a:8d:91:fc: 3d:16:07:0a:48:87:f4:9e:18:f7:74:33:eb:3c:cf:c5:55:4e: 9c:97:da:2a:47:a8:a4:67:39:66:4c:6c:ce:73:4e:f3:91:4d: bf:d1:ff:b2:05:c8:da:d8:de:7b:e8:f4:0b:f7:67:a0:5a:86: b0:b7:aa:7c:5c:c0:55:2b:bd:90:81:33:13:ec:d1:72:91:7e: f8:a1:55:45:e9:45:4f:e2:4b:7a:99:48:48:76:c5:92:6b:bf: c5:0d:79:ef:a4:6c:cb:75:d1:9d:56:12:6d:14:29:ae:fb:2b: 70:ad:33:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/AR6wKMoNYX6BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZDk1ZWFjNTgtMDNmZS00NGUxLTk4MDQtYjU0ZGE3NzZlMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcYzVFtbebUf/VY7Mq+gtOkk/v9cH3QiOxPY wgVPegR+/Dt10dh6E2M7a0W6QYllBU7CFZGDQ2VMVnop5jtDKsvxtsPfjDcfsnKF fJ8RIkZHcLyfBI5wMic3voOUgVYGgWGn6Ge07qfGcGsYnV0UPT1eEh2FNbOGlaKl A/u08t+xbyc0+o6AFubMDRvcujGepWGQ/ju9MW0e77ZPeUcD0s3Ja+gFxsx8IyHU 9j/VHaS5Y4sL8lbgDgQX1ZHiaRVgbEGE5C2HMwXolqiVRee070H6KJfzrtqAtqqf YenKLEyCs/7MwZ3AXjMQfTwjNaFvR1pjZpfK+ACQs01DEtlmlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXWwhvhQxJMA/pldLQY44tRaSyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzE2NmFjYjMtNGUwZS0z YWYyLTkzZmItYmIxNjY2NWU1YjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtPq24iRuG7IXpJY06gtIoCVs/Y1j99+9xe930XbFojbCbRvOEakkvb f9+dBeF/du8RqG4cKEZbvLLF+W83/V41ULJt9pa/Qv5qr3m1NwkZEVz7jewAAw66 V8ct1peO6tGcBINfnx2ZmKbYkQlyctS6t77Yj5/3XBG7PiQU3E8M17RfimM7MFRA UUNZSo2R/D0WBwpIh/SeGPd0M+s8z8VVTpyX2ipHqKRnOWZMbM5zTvORTb/R/7IF yNrY3nvo9Av3Z6BahrC3qnxcwFUrvZCBMxPs0XKRfvihVUXpRU/iS3qZSEh2xZJr v8UNee+kbMt10Z1WEm0UKa77K3CtM84= -----END CERTIFICATE-----Generated at Fri Sep 25 14:47:01 2026 by rpki-client