$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbe1db5f-ff37-3578-858b-4c7edceeba7f.roa File: bbe1db5f-ff37-3578-858b-4c7edceeba7f.roa (raw, json) Hash identifier: abXcVtBWDRpc8hUiOHMOZpJ5IcR0vR4lT2OkEWft5oE= Subject key identifier: EF:04:18:A6:C1:A2:42:2A:7F:00:0C:CE:31:05:51:E2:4F:99:22:AA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FC5CBCCABCF456F849449E100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbe1db5f-ff37-3578-858b-4c7edceeba7f.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 15169 IP address blocks: 192.178.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:cc:ab:cf:45:6f:84:94:49:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=1a6040aa-f8de-4c1a-8230-16eb807023eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d1:58:c5:16:ad:f6:2b:77:94:29:e8:81:0a: 50:3c:3a:1b:7c:86:b6:20:cd:29:04:43:ad:71:a3: c1:4a:e6:60:c3:b1:60:0a:e0:67:4b:93:6e:18:c6: fa:d4:13:4d:71:8d:0d:26:7e:b0:80:ae:ad:57:6c: 60:5b:45:14:9c:a5:cb:cf:36:1b:35:1b:d0:11:a7: a8:f9:22:63:be:3d:6e:33:b7:3b:3b:e6:e0:52:a5: e6:f8:13:a9:98:d8:e6:75:df:cc:8c:a1:1b:5e:3d: c5:52:36:95:4d:5c:9c:66:2c:7d:97:cc:d6:1d:7d: 36:1b:1f:4c:fe:a4:72:d1:24:42:e0:75:a3:ac:6d: cb:64:9f:61:7b:85:3a:a2:f3:4d:66:74:f5:b4:6a: 11:ba:57:20:67:11:26:d6:9d:a9:6c:a3:74:f1:fa: aa:df:51:f8:16:9e:10:8a:c5:3e:08:67:c3:32:2a: 8a:57:27:ae:ef:ff:34:90:33:12:b7:9b:2e:5c:f8: 24:07:64:ba:9e:82:c6:3a:46:2f:9c:8c:02:3a:bc: 81:d9:60:fb:91:eb:c0:ac:71:bf:93:e7:50:ee:5b: 9f:58:23:f9:85:45:da:2e:87:bc:c0:14:fe:5f:38: b6:39:90:0c:14:6f:e8:b8:4c:c6:e3:86:48:99:39: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:04:18:A6:C1:A2:42:2A:7F:00:0C:CE:31:05:51:E2:4F:99:22:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbe1db5f-ff37-3578-858b-4c7edceeba7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ca:8c:ea:38:0f:55:68:3c:6e:59:2d:94:21:7b:34:36:5e: 7e:44:e6:65:d6:06:e9:a8:68:b7:8b:7f:9a:50:ac:14:92:4a: f2:36:08:cf:69:d1:32:97:64:ad:fd:23:75:4c:41:9d:72:aa: 9b:fa:aa:8a:55:29:bf:18:f8:63:ef:f2:06:3c:3f:67:fa:0f: 8c:98:b5:5b:0a:dc:56:ef:99:b6:68:17:34:0b:b5:53:86:c6: 52:35:42:cc:61:11:fb:62:7d:78:b9:8f:31:13:7a:07:6f:6f: 1e:fb:38:fd:9b:30:74:3b:5a:23:52:c3:d1:52:cc:71:a5:f8: 6b:11:06:c3:fc:b2:38:04:9d:87:ba:c7:12:5c:21:10:ab:a5: 6f:7c:45:05:4a:e2:ac:22:db:21:c9:7f:5d:0f:27:b2:40:48: 4d:ab:3b:22:19:d6:66:73:7e:4b:d2:ac:54:6c:f0:f7:c1:c8: a6:8b:e8:23:c7:d3:f0:c4:b3:b1:02:72:a5:d4:b2:85:16:f9: ec:ac:d9:bb:6f:f8:81:7f:f6:c1:39:ca:d7:67:8f:03:c5:6a: 5e:f4:6a:f0:4a:98:e3:6c:73:15:fc:8c:d9:af:7c:15:02:54: 12:60:f1:78:37:32:00:68:b8:df:08:7b:19:0c:af:11:4c:e0: d8:e9:3c:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/Fy8yrz0VvhJRJ4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MWE2MDQwYWEtZjhkZS00YzFhLTgyMzAtMTZlYjgwNzAyM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtFYxRat9it3lCnogQpQPDobfIa2IM0pBEOt caPBSuZgw7FgCuBnS5NuGMb61BNNcY0NJn6wgK6tV2xgW0UUnKXLzzYbNRvQEaeo +SJjvj1uM7c7O+bgUqXm+BOpmNjmdd/MjKEbXj3FUjaVTVycZix9l8zWHX02Gx9M /qRy0SRC4HWjrG3LZJ9he4U6ovNNZnT1tGoRulcgZxEm1p2pbKN08fqq31H4Fp4Q isU+CGfDMiqKVyeu7/80kDMSt5suXPgkB2S6noLGOkYvnIwCOryB2WD7kevArHG/ k+dQ7lufWCP5hUXaLoe8wBT+Xzi2OZAMFG/ouEzG44ZImTmrgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8EGKbBokIqfwAMzjEFUeJPmSKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmJlMWRiNWYtZmYzNy0z NTc4LTg1OGItNGM3ZWRjZWViYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzKjOo4D1VoPG5ZLZQhezQ2Xn5E5mXWBumoaLeLf5pQrBSSSvI2CM9p 0TKXZK39I3VMQZ1yqpv6qopVKb8Y+GPv8gY8P2f6D4yYtVsK3FbvmbZoFzQLtVOG xlI1QsxhEftifXi5jzETegdvbx77OP2bMHQ7WiNSw9FSzHGl+GsRBsP8sjgEnYe6 xxJcIRCrpW98RQVK4qwi2yHJf10PJ7JASE2rOyIZ1mZzfkvSrFRs8PfByKaL6CPH 0/DEs7ECcqXUsoUW+eys2btv+IF/9sE5ytdnjwPFal70avBKmONscxX8jNmvfBUC VBJg8Xg3MgBouN8IexkMrxFM4NjpPN4= -----END CERTIFICATE-----Generated at Tue Nov 10 22:55:17 2026 by rpki-client