$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa File: d08f403e-ed94-3b66-9997-e619f6160283.roa (raw, json) Hash identifier: iIUnEpR+ndhly4o20AE5PLkFwL9ZGeom/t1LSJA5IgM= Subject key identifier: 3A:66:B1:8F:60:15:89:64:0A:B3:8B:9D:DE:9E:AC:41:51:5B:1B:5E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49864C8BF73C733ADF7ED700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:4c:8b:f7:3c:73:3a:df:7e:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c34eab40-9a3c-4f83-99f1-d15eb2637dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:b7:7c:04:6e:cd:94:46:e5:6b:4e:4f:ff: f4:25:e4:7a:ec:11:cc:72:07:62:53:37:c2:df:db: 9a:1f:8c:b3:fb:9e:59:9a:5e:53:54:d2:95:36:b3: 70:9b:01:be:17:e2:73:88:a6:f3:40:eb:cf:c9:b9: a7:23:a8:1e:d3:09:d5:42:b7:ff:e3:4a:53:7e:9b: 2a:48:85:e3:a2:c8:48:dc:29:9a:f4:50:c8:01:53: c4:c9:a6:73:b7:48:4d:89:75:9d:03:0f:32:63:1a: 8e:eb:f3:c1:42:c5:ba:80:43:0f:41:69:7b:bd:3a: a5:84:60:41:9c:e5:fe:c1:57:9f:48:0c:6c:a2:40: d6:a0:b5:a8:4f:8d:e9:6f:2d:e1:2b:a2:f5:30:a8: 70:be:8f:6a:30:ec:b0:68:0c:cf:13:e4:6c:1a:c5: e4:ae:aa:69:d8:b3:64:d4:be:6b:84:63:68:f6:43: da:fc:c7:3e:44:bd:b9:38:3d:7f:c2:21:3d:dd:3f: ba:21:d9:9b:86:ea:bd:7e:ca:71:ab:71:a1:47:0d: 5a:0f:9f:c1:68:7c:c5:11:5e:ac:81:f7:21:85:97: ef:96:a3:0b:02:ac:88:7f:13:a4:ad:9a:06:9d:3e: 1a:e8:b1:47:1e:50:82:24:5b:8e:ec:6e:17:d2:6b: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:66:B1:8F:60:15:89:64:0A:B3:8B:9D:DE:9E:AC:41:51:5B:1B:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:75:de:b2:14:31:24:7b:1f:75:f8:60:66:ad:05:ed:f9:fd: 4e:e5:04:d6:f9:a4:c9:f6:9e:74:f7:60:3a:69:b9:80:65:41: d1:55:d6:97:12:dc:ef:7f:bd:0e:9e:89:ec:b1:0b:30:63:34: e6:88:df:b1:2d:4c:8b:51:54:4c:42:b3:97:85:8c:50:40:d6: a6:55:78:db:0e:4b:6f:95:dd:c2:fc:5b:34:ec:40:b0:1a:bd: 6b:86:a1:77:d1:e9:12:78:95:86:95:2e:f0:7f:cb:ec:d5:14: 06:d3:7e:50:30:d9:ee:5d:3c:e1:dd:84:7d:b1:95:6a:f5:c7: ef:fd:fd:73:25:3e:cf:63:42:ca:ca:f9:9b:c9:38:05:d5:2e: 33:37:8e:62:cb:a0:a1:61:5d:31:a4:d9:c9:cc:41:d5:2e:24: 5e:b2:e9:60:90:51:4c:b7:ac:6f:73:7c:7d:0b:d0:86:e2:dd: a6:61:14:e2:3f:16:a0:e7:39:71:6a:64:dd:a8:65:d6:bd:09: 53:67:2e:b4:e0:83:da:9a:a0:e8:95:d4:54:63:33:af:a5:4c: b7:f1:db:1d:34:1d:08:d5:fc:a6:1b:1f:f3:7e:e8:5b:d6:3f: 10:91:8b:9a:26:40:da:b8:90:23:31:9f:b7:a9:d1:f8:23:71: df:22:7a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhkyL9zxzOt9+1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzM0ZWFiNDAtOWEzYy00ZjgzLTk5ZjEtZDE1ZWIyNjM3ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ne3fARuzZRG5WtOT//0JeR67BHMcgdiUzfC 39uaH4yz+55Zml5TVNKVNrNwmwG+F+JziKbzQOvPybmnI6ge0wnVQrf/40pTfpsq SIXjoshI3Cma9FDIAVPEyaZzt0hNiXWdAw8yYxqO6/PBQsW6gEMPQWl7vTqlhGBB nOX+wVefSAxsokDWoLWoT43pby3hK6L1MKhwvo9qMOywaAzPE+RsGsXkrqpp2LNk 1L5rhGNo9kPa/Mc+RL25OD1/wiE93T+6Idmbhuq9fspxq3GhRw1aD5/BaHzFEV6s gfchhZfvlqMLAqyIfxOkrZoGnT4a6LFHHlCCJFuO7G4X0mvk9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpmsY9gFYlkCrOLnd6erEFRWxteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDA4ZjQwM2UtZWQ5NC0z YjY2LTk5OTctZTYxOWY2MTYwMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh13rIUMSR7H3X4YGatBe35/U7lBNb5pMn2nnT3YDppuYBlQdFV1pcS 3O9/vQ6eieyxCzBjNOaI37EtTItRVExCs5eFjFBA1qZVeNsOS2+V3cL8WzTsQLAa vWuGoXfR6RJ4lYaVLvB/y+zVFAbTflAw2e5dPOHdhH2xlWr1x+/9/XMlPs9jQsrK +ZvJOAXVLjM3jmLLoKFhXTGk2cnMQdUuJF6y6WCQUUy3rG9zfH0L0Ibi3aZhFOI/ FqDnOXFqZN2oZda9CVNnLrTgg9qaoOiV1FRjM6+lTLfx2x00HQjV/KYbH/N+6FvW PxCRi5omQNq4kCMxn7ep0fgjcd8iemk= -----END CERTIFICATE-----Generated at Fri Sep 25 14:49:36 2026 by rpki-client