$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa File: af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa (raw, json) Hash identifier: Z1HKZ54PUP+917LjgDky6K4DG/ogj/nIuzn71ANeOVg= Subject key identifier: 62:9C:87:A2:60:B7:6C:57:9B:87:5F:59:87:3E:35:5F:58:F8:72:A1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4972DAE56B88A77895270180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.179.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:da:e5:6b:88:a7:78:95:27:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cfe8ee28-010e-4df6-bf1d-fdb0e8e4a8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:65:ba:67:98:07:5a:f9:e0:c6:c4:7e:c2: f8:66:a5:59:4e:e2:a3:6f:21:2e:11:08:34:6f:f1: 6f:93:32:23:25:fa:a0:53:75:16:da:48:bc:de:3f: 16:dc:de:b1:1b:9e:71:c3:b3:0c:f8:30:16:dd:87: 31:d3:ec:e1:17:26:fe:b4:36:b4:24:d8:4c:5b:73: bf:b1:22:ec:45:fa:7d:6d:e9:3a:aa:34:94:bb:85: 03:fa:2b:ad:32:5b:09:ff:78:61:aa:72:43:ad:e1: 1d:48:fe:ff:cb:02:e0:93:d7:69:3e:13:c0:57:8e: 71:60:06:cc:55:26:e2:b1:7b:ed:2f:e2:0d:f8:8f: 30:ec:9e:6c:3b:16:f6:dc:bd:0a:25:79:d4:07:af: 7d:6c:7e:7c:52:cd:61:97:7f:83:aa:d0:52:cf:70: fb:b9:1a:fe:ae:77:a8:e6:d8:9b:5e:94:27:70:fe: 24:74:f6:31:1f:49:01:28:4e:30:d1:89:20:dd:22: b2:67:9f:9f:79:f9:f5:4b:a6:bc:e5:9f:5d:26:a5: 07:a8:29:1a:7c:23:f3:48:3b:f1:db:64:01:9f:72: 46:33:96:57:94:10:80:a4:f9:8f:74:7f:53:1e:1b: 7b:ff:db:75:15:db:35:04:08:fd:46:65:99:24:fa: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9C:87:A2:60:B7:6C:57:9B:87:5F:59:87:3E:35:5F:58:F8:72:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af6ec85a-91a2-3a34-96e5-9e7cb78a49d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.179.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:38:87:80:32:50:99:f9:5d:bb:ca:d3:28:b5:ce:f3:10:43: 7e:5c:e4:aa:92:61:de:f2:24:34:81:35:53:44:f0:ed:3a:55: 17:b8:28:e4:65:0a:d8:13:30:2a:73:cf:45:3d:16:27:f6:6b: af:c9:3b:5f:c2:dc:62:da:93:d4:c4:08:4b:3b:97:5f:18:b5: ba:67:52:4c:7f:a6:1f:cb:6e:8d:7d:a7:36:ab:8a:cd:25:60: 8f:71:d8:4b:a4:c4:7e:ed:f2:a2:fc:49:b1:18:0c:69:f0:a3: 98:f6:27:5e:27:c4:ad:bf:88:e6:7f:3f:28:9e:71:e0:db:c2: fe:70:3f:a5:e0:0f:15:03:16:82:0a:c5:06:8d:d0:5c:59:1e: d5:53:a3:76:95:df:ec:e9:1f:23:ac:68:64:d9:a3:84:0b:44: 9f:c2:5c:55:17:44:a7:ae:03:ea:c9:bc:9d:7e:13:66:5a:e2: 30:a6:ae:19:8d:af:72:66:ea:2d:a8:38:ab:8d:ad:67:ef:a8: d5:0a:0a:01:ed:74:2a:40:ff:16:24:98:a1:99:77:f4:0d:b4: 2c:d0:64:3e:ed:4e:c3:59:d8:66:85:09:a8:ef:81:e1:06:38: 80:ee:1e:4d:e3:2b:2c:ac:e3:10:f3:e0:1e:ef:68:db:4b:58: aa:57:17:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jctrla4ineJUnAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2ZlOGVlMjgtMDEwZS00ZGY2LWJmMWQtZmRiMGU4ZTRhOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq5lumeYB1r54MbEfsL4ZqVZTuKjbyEuEQg0 b/FvkzIjJfqgU3UW2ki83j8W3N6xG55xw7MM+DAW3Ycx0+zhFyb+tDa0JNhMW3O/ sSLsRfp9bek6qjSUu4UD+iutMlsJ/3hhqnJDreEdSP7/ywLgk9dpPhPAV45xYAbM VSbisXvtL+IN+I8w7J5sOxb23L0KJXnUB699bH58Us1hl3+DqtBSz3D7uRr+rneo 5tibXpQncP4kdPYxH0kBKE4w0Ykg3SKyZ5+fefn1S6a85Z9dJqUHqCkafCPzSDvx 22QBn3JGM5ZXlBCApPmPdH9THht7/9t1Fds1BAj9RmWZJPrn9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKch6Jgt2xXm4dfWYc+NV9Y+HKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWY2ZWM4NWEtOTFhMi0z YTM0LTk2ZTUtOWU3Y2I3OGE0OWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLMVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM4h4AyUJn5XbvK0yi1zvMQQ35c5KqSYd7yJDSBNVNE8O06VRe4KORl CtgTMCpzz0U9Fif2a6/JO1/C3GLak9TECEs7l18YtbpnUkx/ph/Lbo19pzaris0l YI9x2EukxH7t8qL8SbEYDGnwo5j2J14nxK2/iOZ/PyieceDbwv5wP6XgDxUDFoIK xQaN0FxZHtVTo3aV3+zpHyOsaGTZo4QLRJ/CXFUXRKeuA+rJvJ1+E2Za4jCmrhmN r3Jm6i2oOKuNrWfvqNUKCgHtdCpA/xYkmKGZd/QNtCzQZD7tTsNZ2GaFCajvgeEG OIDuHk3jKyys4xDz4B7vaNtLWKpXF+g= -----END CERTIFICATE-----Generated at Fri Sep 25 14:50:07 2026 by rpki-client