$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5f9aede-1802-34d1-993a-7a814d3127a4.roa File: b5f9aede-1802-34d1-993a-7a814d3127a4.roa (raw, json) Hash identifier: UMDHHjPYyGMWOCy0WgDUCbI7JwckPLtbARVVOJoVbWM= Subject key identifier: 6E:08:28:26:E8:33:69:BB:5E:A5:5E:46:D8:EC:38:BD:5F:D7:3F:68 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EE4C33EB8FC0AFE7AB00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5f9aede-1802-34d1-993a-7a814d3127a4.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ee:4c:33:eb:8f:c0:af:e7:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=dffd179c-dcf8-4ac5-a723-81c124c5d6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:da:0f:46:fe:63:03:ce:fb:82:f1:b5:8b:b4: bc:69:b0:7e:49:6b:c5:ca:be:b4:7b:28:3f:54:90: 30:32:3f:11:ff:26:c9:f8:4d:09:93:ee:b6:90:58: 09:5f:73:d0:57:92:d3:a9:37:78:b4:3c:40:25:db: cb:b4:fc:da:ee:43:f9:1c:21:1f:43:92:49:2b:f1: a0:34:61:ca:ca:4a:e0:2a:27:1e:05:61:39:b5:7c: a4:9d:eb:dc:6e:14:0c:ff:97:67:a6:09:4f:1a:bd: b8:54:b8:12:e1:ea:f2:74:9f:01:d6:0c:7b:9e:d4: 0f:24:10:73:2b:9f:3b:4e:ef:eb:74:f3:aa:8d:49: ac:5f:2e:33:b7:61:cc:52:4d:e1:cc:eb:16:17:30: ea:d3:34:d7:fa:70:51:85:39:b4:f4:df:d4:40:dc: 11:33:8f:1d:8f:19:10:94:fe:54:93:cd:89:e5:32: de:22:3c:6a:78:3b:90:ed:fe:a6:c9:2a:8a:4c:29: b4:ca:f8:92:c1:0f:eb:8d:13:c7:45:0e:14:2f:ff: ff:35:35:07:52:d5:8c:f5:b1:be:52:57:57:93:4d: a1:b5:c9:df:ff:2f:34:fe:c0:07:cb:cf:0d:91:86: 62:c2:6c:e2:61:0b:df:b0:2f:cc:fa:70:ab:9f:ae: 76:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:08:28:26:E8:33:69:BB:5E:A5:5E:46:D8:EC:38:BD:5F:D7:3F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5f9aede-1802-34d1-993a-7a814d3127a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:11:da:60:1a:a9:5f:66:bd:16:00:1c:a0:2e:8b:db:e1:e7: 06:69:01:87:c5:63:3f:0d:be:ef:2f:e7:1d:01:e7:5f:a5:b8: 36:68:03:4b:eb:3f:bc:e4:71:e6:d3:7f:28:f6:d0:c3:ae:48: 04:6c:4e:c8:5f:2a:fd:c1:4c:b2:9a:46:44:d0:dd:05:b2:72: c1:b9:5f:5c:52:1a:54:6a:25:05:05:1e:c3:1a:42:bc:67:0f: d3:d4:89:fb:ab:5b:f6:af:a7:6e:27:17:3b:23:01:09:eb:f2: d2:3c:79:58:40:80:13:a4:b5:98:35:a3:18:54:b2:c2:04:c1: 96:c9:47:96:19:da:cc:31:cd:c6:72:5d:02:ae:44:38:76:a4: 67:cc:dd:fc:52:0f:31:15:84:bf:88:f8:3f:11:60:c1:47:0d: 1c:41:41:67:cd:cf:73:47:fe:01:70:06:b2:6a:8e:60:a2:e0: 80:50:cf:96:73:8b:bb:ec:b3:36:a8:8a:72:49:de:75:13:a2: fa:8d:b5:52:25:de:0f:c5:b8:f0:4a:bf:3b:47:c2:71:81:76: d0:d4:f5:2c:a1:24:74:0c:58:37:b5:4d:62:ae:c3:cb:38:bd: b8:83:4d:90:93:bc:ef:9c:98:6d:d5:00:b9:35:65:b4:30:cb: 9b:2f:0b:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+5MM+uPwK/nqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZGZmZDE3OWMtZGNmOC00YWM1LWE3MjMtODFjMTI0YzVkNmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNoPRv5jA877gvG1i7S8abB+SWvFyr60eyg/ VJAwMj8R/ybJ+E0Jk+62kFgJX3PQV5LTqTd4tDxAJdvLtPza7kP5HCEfQ5JJK/Gg NGHKykrgKiceBWE5tXyknevcbhQM/5dnpglPGr24VLgS4erydJ8B1gx7ntQPJBBz K587Tu/rdPOqjUmsXy4zt2HMUk3hzOsWFzDq0zTX+nBRhTm09N/UQNwRM48djxkQ lP5Uk82J5TLeIjxqeDuQ7f6mySqKTCm0yviSwQ/rjRPHRQ4UL///NTUHUtWM9bG+ UldXk02htcnf/y80/sAHy88NkYZiwmziYQvfsC/M+nCrn652wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4IKCboM2m7XqVeRtjsOL1f1z9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjVmOWFlZGUtMTgwMi0z NGQxLTk5M2EtN2E4MTRkMzEyN2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUR2mAaqV9mvRYAHKAui9vh5wZpAYfFYz8Nvu8v5x0B51+luDZoA0vr P7zkcebTfyj20MOuSARsTshfKv3BTLKaRkTQ3QWycsG5X1xSGlRqJQUFHsMaQrxn D9PUifurW/avp24nFzsjAQnr8tI8eVhAgBOktZg1oxhUssIEwZbJR5YZ2swxzcZy XQKuRDh2pGfM3fxSDzEVhL+I+D8RYMFHDRxBQWfNz3NH/gFwBrJqjmCi4IBQz5Zz i7vsszaoinJJ3nUTovqNtVIl3g/FuPBKvztHwnGBdtDU9SyhJHQMWDe1TWKuw8s4 vbiDTZCTvO+cmG3VALk1ZbQwy5svCwM= -----END CERTIFICATE-----Generated at Fri Sep 25 17:35:15 2026 by rpki-client