$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa File: 211bf909-5b40-31a9-9871-addf1a48e134.roa (raw, json) Hash identifier: VPAO2qnck7C4PVIAWXg7UPLzXBxjOpR7VbSU8sfDvgM= Subject key identifier: B6:8E:2D:05:74:68:4E:0A:B0:44:D4:80:C6:6A:13:E4:22:56:C5:5A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC765F436975A050AAC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 192.178.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c7:65:f4:36:97:5a:05:0a:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=7a0058d7-9cd2-4e20-a43d-667087ae6af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:a9:07:6a:82:0b:8c:9f:7f:f3:62:f2:80: 8e:23:61:6e:56:a9:4b:cd:20:f0:20:75:b7:74:db: 39:73:8e:36:0e:7f:f2:ce:27:23:0e:57:b2:cf:85: c4:58:de:99:27:f1:cd:55:d2:30:27:df:36:41:93: b6:1a:09:fa:bf:56:c2:e3:84:89:b6:bc:00:69:1c: 5a:4e:59:aa:e0:d0:25:94:5c:c9:86:99:26:76:6d: 69:2a:03:65:33:8b:8e:ae:d8:56:c1:fd:3c:2a:6a: 46:15:66:4b:42:19:cf:6f:06:47:a9:66:bb:0a:43: 68:45:20:7d:49:86:b6:01:48:bc:8e:e1:ba:e4:bf: 08:f3:41:02:22:b3:30:57:3a:e7:6e:8a:d4:72:4e: 44:25:16:6d:e0:88:44:43:a9:6c:fa:81:f3:27:5c: ef:7d:b3:61:5d:3a:e8:2a:17:2c:38:0f:0d:4d:a6: 39:b8:e1:8f:7d:b3:36:95:3e:53:47:ba:b1:3e:31: 55:40:86:38:77:0b:39:e9:d6:f7:38:e0:8a:34:1a: 72:95:37:58:29:56:d3:9b:f2:7a:86:2f:7e:b4:20: 55:c9:58:75:a3:9a:e4:49:50:13:56:28:46:80:9c: 7e:c3:ac:53:c8:82:64:13:fd:40:48:7c:38:ac:a4: 7f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8E:2D:05:74:68:4E:0A:B0:44:D4:80:C6:6A:13:E4:22:56:C5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:6f:a7:a8:ff:dd:15:7a:b7:28:61:17:42:d5:7f:57:9e:f9: a9:84:16:1b:d1:eb:cc:16:81:31:7c:e7:62:e1:0f:6b:d5:d4: ab:7b:71:7a:a1:d7:84:83:82:0d:12:b5:04:1e:5a:91:80:b4: ad:69:46:0e:ae:0d:d4:38:bb:d2:fe:25:2a:c4:42:80:7d:e8: e0:53:51:c4:8d:74:11:4a:ad:fe:9d:b7:5c:b9:46:ac:17:0b: 51:09:14:7e:5a:df:85:f1:a8:f4:86:6e:50:c5:00:6d:6b:a8: a2:21:61:76:49:80:40:8f:26:e3:e2:ff:a0:f0:fe:4c:12:8a: fc:72:08:84:a1:58:fd:e4:c8:46:7c:da:43:91:3f:2e:a3:0d: da:8e:29:53:84:a1:14:1b:7e:4c:0d:1a:de:74:bf:14:3a:e3: 4b:ec:50:d7:6d:30:9a:2c:4d:19:0c:0e:08:d1:37:c2:6e:d0: 5b:ee:78:07:db:72:02:91:94:15:62:7f:ae:52:3f:89:d7:a6: f3:c0:79:cf:fa:9c:aa:c5:04:95:4b:de:ee:fa:90:1a:60:bf: 7c:0a:e8:15:f6:72:a5:de:b4:ea:f0:4a:79:df:83:2d:57:1b: e3:4a:08:f1:72:a1:11:c2:69:6c:ed:7b:51:5d:17:f0:8a:e4: 01:4f:c4:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8dl9DaXWgUKrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk N2EwMDU4ZDctOWNkMi00ZTIwLWE0M2QtNjY3MDg3YWU2YWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwGpB2qCC4yff/Ni8oCOI2FuVqlLzSDwIHW3 dNs5c442Dn/yzicjDleyz4XEWN6ZJ/HNVdIwJ982QZO2Ggn6v1bC44SJtrwAaRxa Tlmq4NAllFzJhpkmdm1pKgNlM4uOrthWwf08KmpGFWZLQhnPbwZHqWa7CkNoRSB9 SYa2AUi8juG65L8I80ECIrMwVzrnborUck5EJRZt4IhEQ6ls+oHzJ1zvfbNhXTro KhcsOA8NTaY5uOGPfbM2lT5TR7qxPjFVQIY4dws56db3OOCKNBpylTdYKVbTm/J6 hi9+tCBVyVh1o5rkSVATVihGgJx+w6xTyIJkE/1ASHw4rKR/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaOLQV0aE4KsETUgMZqE+QiVsVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjExYmY5MDktNWI0MC0z MWE5LTk4NzEtYWRkZjFhNDhlMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRvp6j/3RV6tyhhF0LVf1ee+amEFhvR68wWgTF852LhD2vV1Kt7cXqh 14SDgg0StQQeWpGAtK1pRg6uDdQ4u9L+JSrEQoB96OBTUcSNdBFKrf6dt1y5RqwX C1EJFH5a34XxqPSGblDFAG1rqKIhYXZJgECPJuPi/6Dw/kwSivxyCIShWP3kyEZ8 2kORPy6jDdqOKVOEoRQbfkwNGt50vxQ640vsUNdtMJosTRkMDgjRN8Ju0FvueAfb cgKRlBVif65SP4nXpvPAec/6nKrFBJVL3u76kBpgv3wK6BX2cqXetOrwSnnfgy1X G+NKCPFyoRHCaWzte1FdF/CK5AFPxCc= -----END CERTIFICATE-----Generated at Sat Jun 13 14:02:50 2026 by rpki-client