$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa File: e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa (raw, json) Hash identifier: uynaZMlt88VTPOCYiXEA25Lg4/6BDK0dYi0LM6pTuxY= Subject key identifier: 4D:4D:5A:AB:D0:49:71:77:72:BE:BD:E3:24:4D:05:75:F8:4E:E1:26 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4986976FE0EB33D21F5768E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:97:6f:e0:eb:33:d2:1f:57:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ac8b99fb-ac8e-436d-8bf5-eb70e8f10841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:9f:20:a8:c2:a3:c9:46:74:0c:9a:2e:e0: 0c:72:fd:3f:07:14:5d:eb:f9:13:69:0e:35:28:03: 60:18:17:f2:78:a7:f6:05:33:12:87:36:3a:86:6b: 45:13:a1:6c:a4:f7:5d:a7:2b:bb:fb:04:d0:cc:95: 50:af:58:ed:3e:57:46:a6:d5:39:d0:5d:8a:7b:e3: 04:bb:66:91:00:8f:68:53:ae:6e:7e:3b:64:50:31: 4d:af:6b:0c:98:0c:d2:79:38:08:9d:17:69:de:84: 9f:d9:a2:3c:91:11:c7:87:3c:1a:c7:09:4d:9c:57: 84:ff:c4:0d:57:e8:92:ec:c4:53:7f:9f:75:5e:3a: 8f:bd:f0:29:c4:6b:71:c0:b5:8d:30:21:78:6b:ba: 74:f3:a9:fa:66:15:92:fd:50:a1:ff:94:ba:f8:8b: 7b:ea:38:3a:a7:69:db:f0:d8:9a:89:60:9a:6d:78: 7a:be:40:23:88:fd:c2:15:b0:4a:9a:52:ea:11:15: d4:4c:9b:09:82:37:f0:7a:4f:eb:0b:aa:03:dd:de: 28:dc:7b:bf:e3:50:10:e0:9a:e2:7c:04:eb:43:d4: 3f:5f:04:2e:3e:bd:83:7e:cc:e2:da:f6:aa:2a:24: 57:76:21:64:78:c0:e7:87:7b:eb:8b:05:2e:56:79: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4D:5A:AB:D0:49:71:77:72:BE:BD:E3:24:4D:05:75:F8:4E:E1:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:48:6d:5f:75:c3:2c:8b:fa:58:36:f4:fb:4c:72:66:a8:25: 10:ef:53:cd:6e:fd:e9:95:fa:f9:fb:8a:83:89:5e:99:96:d3: 46:de:b8:ed:df:7b:75:d8:23:b6:e4:9c:a0:7f:13:49:08:81: 6a:24:03:84:ec:79:7e:06:ec:27:3e:e8:d9:ff:b8:3c:92:b6: 2f:06:a2:b9:12:8f:68:1d:31:e6:07:7f:33:01:a4:86:81:12: 9f:e5:7e:92:04:f9:43:f8:cb:8c:a2:cd:6c:53:ee:d6:39:78: f3:84:71:fe:56:e3:62:ca:d7:2e:9b:e3:4d:c5:5d:32:df:07: 0f:97:37:2c:a8:7c:18:7a:63:3c:f5:06:0d:37:f8:a5:c0:5d: a6:4a:90:df:ae:f0:84:6d:56:06:71:7b:35:7f:58:48:97:dd: e7:2d:fc:b1:cb:e8:b5:d6:72:0b:6d:51:60:b3:2c:ff:36:70: 1d:25:19:a0:16:e6:df:8c:20:c2:d1:84:14:32:3a:77:41:b9: b1:08:44:e8:20:b9:70:6d:b1:eb:e9:8c:4e:fa:8c:9a:b7:83: 70:29:91:db:5d:7c:2c:c0:64:44:4d:ab:75:78:a6:94:68:b3: d4:69:3e:5b:2c:94:22:50:e2:fa:2e:cc:71:99:a5:fc:85:e9: d0:71:f5:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhpdv4Osz0h9XaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWM4Yjk5ZmItYWM4ZS00MzZkLThiZjUtZWI3MGU4ZjEwODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIWfIKjCo8lGdAyaLuAMcv0/BxRd6/kTaQ41 KANgGBfyeKf2BTMShzY6hmtFE6FspPddpyu7+wTQzJVQr1jtPldGptU50F2Ke+ME u2aRAI9oU65ufjtkUDFNr2sMmAzSeTgInRdp3oSf2aI8kRHHhzwaxwlNnFeE/8QN V+iS7MRTf591XjqPvfApxGtxwLWNMCF4a7p086n6ZhWS/VCh/5S6+It76jg6p2nb 8NiaiWCabXh6vkAjiP3CFbBKmlLqERXUTJsJgjfwek/rC6oD3d4o3Hu/41AQ4Jri fATrQ9Q/XwQuPr2Dfszi2vaqKiRXdiFkeMDnh3vriwUuVnmZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1NWqvQSXF3cr694yRNBXX4TuEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTZiZjYyNDYtNTFjYi0z MmU2LTk2ZjYtYmJiMTdjN2VkZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChIbV91wyyL+lg29PtMcmaoJRDvU81u/emV+vn7ioOJXpmW00beuO3f e3XYI7bknKB/E0kIgWokA4TseX4G7Cc+6Nn/uDySti8GorkSj2gdMeYHfzMBpIaB Ep/lfpIE+UP4y4yizWxT7tY5ePOEcf5W42LK1y6b403FXTLfBw+XNyyofBh6Yzz1 Bg03+KXAXaZKkN+u8IRtVgZxezV/WEiX3ect/LHL6LXWcgttUWCzLP82cB0lGaAW 5t+MIMLRhBQyOndBubEIROgguXBtsevpjE76jJq3g3ApkdtdfCzAZERNq3V4ppRo s9RpPlsslCJQ4vouzHGZpfyF6dBx9dA= -----END CERTIFICATE-----Generated at Fri Sep 25 23:32:28 2026 by rpki-client