$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f89a595d-4679-3ba3-87ea-01bb796c68e2.roa File: f89a595d-4679-3ba3-87ea-01bb796c68e2.roa (raw, json) Hash identifier: 4BmQQWjC4J6lflQXSmv3dEGyYmtFZ5vtON5+wldHTOU= Subject key identifier: 47:BE:DF:4A:55:15:4C:99:9C:C4:C1:FA:D2:01:53:88:1A:12:36:DD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497F6D41D878A132D1F19C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f89a595d-4679-3ba3-87ea-01bb796c68e2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 192.178.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:6d:41:d8:78:a1:32:d1:f1:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8bd659fa-6977-4059-8cee-089ad2ef45e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:37:6e:49:f8:ef:64:94:27:3e:e8:31:b3:5b: 44:b3:c3:81:88:55:c4:b4:da:c9:74:d3:aa:c9:97: 37:22:a4:7b:e5:df:d7:b7:52:71:86:79:1e:66:5b: 8b:5b:b7:34:6f:6f:82:04:93:23:ac:ad:f3:9b:26: 03:31:d6:9d:bd:32:f0:66:28:d5:77:8c:b3:aa:aa: 61:17:0d:59:89:3c:70:ab:e4:d3:04:ad:51:6a:ef: 32:e8:79:a6:16:89:52:bb:19:b1:3e:4e:b3:42:91: 5a:68:fd:7b:e4:e8:04:41:24:dc:b4:7c:68:ad:5b: 55:c3:e7:2d:f7:91:9a:6b:43:c3:38:a4:54:64:ee: fc:63:f1:4a:be:85:ef:44:01:5f:a7:4d:0e:49:f0: 25:cf:d9:1a:ca:74:7d:9d:99:f9:da:3e:63:61:15: 37:91:09:f7:e9:7e:d8:ee:13:c8:aa:3f:54:27:1a: 6c:96:71:48:cc:b0:26:d6:bb:6c:f8:b7:31:f9:d4: 14:1d:32:94:2c:30:48:6b:69:47:4d:d7:73:08:42: fb:9f:bd:4f:bd:af:53:89:13:6b:cb:60:25:74:fc: 85:a5:94:e5:b3:06:63:5e:fc:60:78:ce:0e:36:d7: 4f:b4:8b:42:a5:39:84:26:dd:b9:be:22:48:0c:de: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BE:DF:4A:55:15:4C:99:9C:C4:C1:FA:D2:01:53:88:1A:12:36:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f89a595d-4679-3ba3-87ea-01bb796c68e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:13:78:fa:14:88:89:27:e3:93:84:71:82:d0:c5:fc:36:1f: 60:d6:6c:32:8a:10:a7:69:82:10:f3:fd:6a:f3:dc:e6:01:2b: 8c:68:c3:d9:87:d4:4c:ec:85:37:29:95:0a:4f:08:44:e2:ce: 68:c1:55:34:84:f1:f7:2c:c6:3f:97:a6:71:1f:47:e2:d0:d8: 76:10:96:02:04:fe:da:8a:e3:e7:32:0c:39:2f:c0:98:5c:18: e8:c9:98:b1:e6:63:16:91:8a:6a:da:be:8b:76:70:18:83:23: 9c:de:2e:46:07:e9:2a:fe:5b:57:8b:92:6b:71:e9:cd:e2:0f: 8c:f5:cb:69:99:a8:fe:c1:99:67:f7:22:f2:8d:ee:35:16:c6: ce:b2:c2:a0:f0:6e:7d:d2:21:b4:f4:1d:ee:db:a1:1f:4f:93: 24:d4:32:9f:01:f1:23:bd:45:ff:78:b5:99:1b:28:68:d5:6b: ce:ed:54:86:02:c6:40:41:2e:fa:48:2b:cf:bc:1a:1b:03:10: 00:6b:bb:55:f5:44:5d:c0:05:ae:a7:a1:48:31:8a:6e:03:2e: 9f:28:66:c6:f5:0b:73:d7:bd:8b:d0:21:3f:c8:b3:05:0f:a8: cf:45:74:cd:95:00:f4:c2:fe:19:6b:93:c2:a9:f9:4e:79:b1: 39:30:de:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf21B2HihMtHxnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGJkNjU5ZmEtNjk3Ny00MDU5LThjZWUtMDg5YWQyZWY0NWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTduSfjvZJQnPugxs1tEs8OBiFXEtNrJdNOq yZc3IqR75d/Xt1JxhnkeZluLW7c0b2+CBJMjrK3zmyYDMdadvTLwZijVd4yzqqph Fw1ZiTxwq+TTBK1Rau8y6HmmFolSuxmxPk6zQpFaaP175OgEQSTctHxorVtVw+ct 95Gaa0PDOKRUZO78Y/FKvoXvRAFfp00OSfAlz9kaynR9nZn52j5jYRU3kQn36X7Y 7hPIqj9UJxpslnFIzLAm1rts+Lcx+dQUHTKULDBIa2lHTddzCEL7n71Pva9TiRNr y2AldPyFpZTlswZjXvxgeM4ONtdPtItCpTmEJt25viJIDN7gcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe+30pVFUyZnMTB+tIBU4gaEjbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjg5YTU5NWQtNDY3OS0z YmEzLTg3ZWEtMDFiYjc5NmM2OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMTePoUiIkn45OEcYLQxfw2H2DWbDKKEKdpghDz/Wrz3OYBK4xow9mH 1EzshTcplQpPCETizmjBVTSE8fcsxj+XpnEfR+LQ2HYQlgIE/tqK4+cyDDkvwJhc GOjJmLHmYxaRimravot2cBiDI5zeLkYH6Sr+W1eLkmtx6c3iD4z1y2mZqP7BmWf3 IvKN7jUWxs6ywqDwbn3SIbT0He7boR9PkyTUMp8B8SO9Rf94tZkbKGjVa87tVIYC xkBBLvpIK8+8GhsDEABru1X1RF3ABa6noUgxim4DLp8oZsb1C3PXvYvQIT/IswUP qM9FdM2VAPTC/hlrk8Kp+U55sTkw3kQ= -----END CERTIFICATE-----Generated at Fri Sep 25 14:50:15 2026 by rpki-client