$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9ef601a9-1f4c-3f02-842c-5d8167499df2.roa File: 9ef601a9-1f4c-3f02-842c-5d8167499df2.roa (raw, json) Hash identifier: eG8YYkY+28fuGXgW4rH9LA3YNOXNC+TNc4H+s+0o4+8= Subject key identifier: 45:19:86:1E:24:6C:7C:C5:3D:83:E7:7F:0F:E5:9E:A0:8E:87:B3:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7F09CBD4353CFE3632200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9ef601a9-1f4c-3f02-842c-5d8167499df2.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f0:9c:bd:43:53:cf:e3:63:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=2312d661-7b50-474d-994e-266bff520da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5e:77:03:cf:14:0a:4c:3e:ca:72:cc:75:1e: 22:99:61:56:0f:67:ee:35:4a:f6:4d:4f:0a:ab:59: f9:e6:c8:03:5b:d7:71:f2:ff:f8:fd:15:b5:e5:4c: a8:ee:d6:94:02:ae:7e:59:22:99:15:37:c2:3a:7e: 44:f1:75:06:ab:00:e0:c1:2c:38:70:4a:fb:3e:52: fe:50:35:d3:52:cf:46:a8:e7:f4:5b:78:9b:d0:60: 0c:0f:19:f0:e8:13:fa:14:df:0f:9a:31:29:e1:c4: ef:84:7e:23:51:c8:71:b2:5c:0d:f2:12:4c:64:49: bd:7f:d4:c7:8c:ae:0a:b8:27:8e:c8:69:e5:37:88: e8:fb:12:47:87:33:8c:5d:03:0d:58:01:52:f1:3a: 48:6d:c1:17:8a:29:83:99:e9:82:60:42:8e:d8:a8: 44:ca:b9:8d:46:c6:7a:a4:a4:19:1e:15:79:2c:07: 8a:64:00:a7:8d:03:db:74:97:6d:4f:e0:3b:f8:e6: cc:d8:7f:13:95:4d:1b:c1:de:94:00:41:48:00:ef: 3e:3c:5e:39:5d:65:5e:33:05:8b:85:2b:e6:08:06: 62:12:fe:b1:5a:27:eb:0b:a6:72:3f:61:b7:d2:87: 6f:69:d3:53:80:e7:a0:7c:dc:80:31:27:ee:9c:fe: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:19:86:1E:24:6C:7C:C5:3D:83:E7:7F:0F:E5:9E:A0:8E:87:B3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9ef601a9-1f4c-3f02-842c-5d8167499df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d3:64:8a:ae:b7:f3:ff:c5:fa:f4:71:89:d9:ac:c4:f2:09: d0:44:d8:5e:a4:a8:53:38:87:1c:18:22:86:83:eb:8c:1a:54: 62:98:c9:8d:16:f9:dd:e4:19:3f:9c:59:a6:ec:fc:f5:98:24: 86:0c:63:bb:e3:39:b5:98:89:5a:4e:eb:22:4e:14:97:f9:60: 0a:12:f5:4f:fa:12:45:93:93:24:8f:fe:54:30:92:70:53:00: b7:8d:16:0d:c7:6e:8e:37:4c:ad:36:d5:5c:04:14:30:d8:9c: 40:53:81:98:df:04:a9:65:81:16:12:7e:39:cb:ea:ee:49:1b: 9c:19:93:7f:d8:8e:16:bb:42:ce:97:13:c5:e6:98:ce:0b:19: 6f:a3:8b:80:f7:7e:5d:33:48:cb:f9:ed:9d:fb:5c:f6:6d:e9: aa:b2:15:85:e8:4b:33:5f:d0:96:7a:d1:f6:a0:bf:83:d7:fe: 59:ab:29:79:67:af:d1:7f:ce:65:c4:f7:51:fd:7a:a8:0d:27: 21:30:39:7f:f4:50:6d:a9:e5:87:74:9f:f3:cd:f0:bc:6d:2a: 27:d0:42:61:81:75:50:63:16:ad:de:c7:50:f7:73:57:e1:79: 75:3b:6b:e9:4c:ac:dd:4b:e1:77:89:bd:30:f4:c4:b6:f0:38: f2:c1:ff:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/CcvUNTz+NjIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MjMxMmQ2NjEtN2I1MC00NzRkLTk5NGUtMjY2YmZmNTIwZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l53A88UCkw+ynLMdR4imWFWD2fuNUr2TU8K q1n55sgDW9dx8v/4/RW15Uyo7taUAq5+WSKZFTfCOn5E8XUGqwDgwSw4cEr7PlL+ UDXTUs9GqOf0W3ib0GAMDxnw6BP6FN8PmjEp4cTvhH4jUchxslwN8hJMZEm9f9TH jK4KuCeOyGnlN4jo+xJHhzOMXQMNWAFS8TpIbcEXiimDmemCYEKO2KhEyrmNRsZ6 pKQZHhV5LAeKZACnjQPbdJdtT+A7+ObM2H8TlU0bwd6UAEFIAO8+PF45XWVeMwWL hSvmCAZiEv6xWifrC6ZyP2G30odvadNTgOegfNyAMSfunP7sBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUZhh4kbHzFPYPnfw/lnqCOh7PZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWVmNjAxYTktMWY0Yy0z ZjAyLTg0MmMtNWQ4MTY3NDk5ZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3TZIqut/P/xfr0cYnZrMTyCdBE2F6kqFM4hxwYIoaD64waVGKYyY0W +d3kGT+cWabs/PWYJIYMY7vjObWYiVpO6yJOFJf5YAoS9U/6EkWTkySP/lQwknBT ALeNFg3Hbo43TK021VwEFDDYnEBTgZjfBKllgRYSfjnL6u5JG5wZk3/Yjha7Qs6X E8XmmM4LGW+ji4D3fl0zSMv57Z37XPZt6aqyFYXoSzNf0JZ60fagv4PX/lmrKXln r9F/zmXE91H9eqgNJyEwOX/0UG2p5Yd0n/PN8LxtKifQQmGBdVBjFq3ex1D3c1fh eXU7a+lMrN1L4XeJvTD0xLbwOPLB/6o= -----END CERTIFICATE-----Generated at Fri Sep 25 17:35:18 2026 by rpki-client