$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa File: 752d5944-68d2-3730-ba55-3df75ad16419.roa (raw, json) Hash identifier: kWQsz++A7H8Bm7ogDNUuqD9oADE0aDTlEjBig70YcVI= Subject key identifier: A4:E9:74:ED:24:D6:FF:EE:FD:89:79:4A:D7:45:EF:C2:C9:6E:05:44 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D8562983CD9C9272D7240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:85:62:98:3c:d9:c9:27:2d:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2668dfd5-d5cb-4757-9350-4b17065143d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:83:ef:37:2a:48:3b:98:f1:65:0b:f2:35: c1:c6:3a:84:3e:3d:36:54:19:2a:44:85:97:68:c5: e3:ce:33:1b:28:f2:0f:a9:11:be:81:e8:a3:43:af: cd:5e:d1:4c:4e:1b:3e:fa:ba:b4:94:c5:ef:1f:2a: b0:8a:09:64:91:90:7a:ed:06:9e:a1:10:30:46:0a: f5:04:cc:c3:d4:9e:e8:98:24:89:ba:10:f9:bd:c6: 7c:92:6c:bd:7f:24:83:6e:be:bf:d2:fc:28:02:10: 2b:d5:c1:26:f0:3b:bb:95:27:d5:18:ec:7d:54:ec: f2:74:8c:94:30:e2:2c:a6:66:f3:e7:1e:05:fe:17: b0:54:f4:d3:24:3f:3a:84:78:a6:74:4a:83:14:bd: 9b:42:e4:07:43:ce:03:bc:d5:df:ff:4e:b5:cd:ea: e0:ed:35:27:3e:af:3b:bc:30:7f:aa:d5:20:da:fe: 62:f9:65:8b:77:14:3b:c2:6a:69:90:ef:40:e2:fb: f0:ce:3a:e1:4c:e6:be:d3:d2:2f:a6:5f:52:37:ee: 6d:0d:59:1d:68:f0:b8:54:21:a0:03:a6:f4:10:1e: b7:be:a0:ee:3e:fc:56:23:d9:9b:a2:ed:9c:a1:89: b8:4c:5f:6c:08:41:89:f3:a5:cf:48:6f:f8:67:9c: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E9:74:ED:24:D6:FF:EE:FD:89:79:4A:D7:45:EF:C2:C9:6E:05:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:3c:4e:35:00:4d:f9:48:69:e3:93:19:2f:24:fe:1a:e1:23: dc:cb:41:fd:cb:b6:17:21:00:b1:30:a3:28:c1:6e:aa:bc:a3: ec:f2:2f:cc:60:bd:60:e3:31:d5:7a:68:fa:10:0b:55:4d:26: 0f:9a:17:b4:e4:d0:18:9b:80:0a:e8:c0:58:ee:06:1e:20:59: 01:78:77:8f:5f:2a:36:60:16:de:4b:7a:43:46:3f:cb:b6:09: b2:7d:2b:a9:26:60:87:78:ee:1a:0a:f7:01:e9:46:e1:b6:56: 9c:8b:d5:62:07:48:9f:6d:f1:8a:e6:31:fc:fe:47:ab:4f:d6: 3a:55:ed:de:d4:ec:9f:12:a6:ea:03:bb:20:a3:63:9f:84:72: 98:b1:3e:ec:be:35:96:1d:06:a6:83:cf:9b:77:1b:76:f7:2a: 3b:f7:8a:34:31:40:ff:e0:0c:0c:e7:6d:b6:62:22:26:5f:e2: 9e:51:f0:2e:55:a6:45:14:55:2d:c2:20:c2:17:7b:01:b7:c1: 09:45:81:17:5a:18:e6:73:bb:9c:ca:a1:90:ab:8e:46:09:14: f2:14:8f:57:ad:e4:8d:72:ed:31:0d:d7:fe:ce:74:dd:26:0e: 23:1e:83:5c:cf:f9:63:97:3e:3b:96:2a:01:0d:aa:97:a7:40: 24:5d:82:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfYVimDzZySctckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjY2OGRmZDUtZDVjYi00NzU3LTkzNTAtNGIxNzA2NTE0M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw76D7zcqSDuY8WUL8jXBxjqEPj02VBkqRIWX aMXjzjMbKPIPqRG+geijQ6/NXtFMThs++rq0lMXvHyqwiglkkZB67QaeoRAwRgr1 BMzD1J7omCSJuhD5vcZ8kmy9fySDbr6/0vwoAhAr1cEm8Du7lSfVGOx9VOzydIyU MOIspmbz5x4F/hewVPTTJD86hHimdEqDFL2bQuQHQ84DvNXf/061zerg7TUnPq87 vDB/qtUg2v5i+WWLdxQ7wmppkO9A4vvwzjrhTOa+09Ivpl9SN+5tDVkdaPC4VCGg A6b0EB63vqDuPvxWI9mbou2coYm4TF9sCEGJ86XPSG/4Z5xbNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTpdO0k1v/u/Yl5StdF78LJbgVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzUyZDU5NDQtNjhkMi0z NzMwLWJhNTUtM2RmNzVhZDE2NDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY8TjUATflIaeOTGS8k/hrhI9zLQf3LthchALEwoyjBbqq8o+zyL8xg vWDjMdV6aPoQC1VNJg+aF7Tk0BibgArowFjuBh4gWQF4d49fKjZgFt5LekNGP8u2 CbJ9K6kmYId47hoK9wHpRuG2VpyL1WIHSJ9t8YrmMfz+R6tP1jpV7d7U7J8SpuoD uyCjY5+EcpixPuy+NZYdBqaDz5t3G3b3Kjv3ijQxQP/gDAznbbZiIiZf4p5R8C5V pkUUVS3CIMIXewG3wQlFgRdaGOZzu5zKoZCrjkYJFPIUj1et5I1y7TEN1/7OdN0m DiMeg1zP+WOXPjuWKgENqpenQCRdgkc= -----END CERTIFICATE-----Generated at Fri Sep 25 14:55:23 2026 by rpki-client