$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/282185d5-d7f3-3b8a-a88f-10ece07b2a1a.roa File: 282185d5-d7f3-3b8a-a88f-10ece07b2a1a.roa (raw, json) Hash identifier: 84vmd7qIT53vO01sQysxB0HR3n4PXMifJS97x06JS5U= Subject key identifier: 86:03:80:A0:8C:9E:9C:EF:A8:00:BC:74:2B:56:A9:63:A5:C2:32:FF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CE3621AEA2FBA9CF085FA2780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/282185d5-d7f3-3b8a-a88f-10ece07b2a1a.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 15169 IP address blocks: 192.178.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:1a:ea:2f:ba:9c:f0:85:fa:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=4c223aa2-40a6-47f8-8e52-e16b998a3547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c7:31:54:53:8a:e2:67:36:b9:a9:3f:ec:4e: 57:6f:b8:72:4a:71:c7:16:e0:bb:b4:c5:b1:1e:89: ea:94:f8:1a:5f:7c:20:c2:bc:8c:dd:05:07:84:e2: e6:08:3a:b5:3a:d2:18:e5:a2:56:d5:3c:4a:10:c2: 6f:5f:d7:e8:6c:ad:3c:b4:c9:45:62:57:d5:dd:95: 9f:e4:e3:3a:58:d9:56:36:5c:4f:d4:4e:f6:b2:5e: 73:1f:06:39:b0:75:b0:6d:43:5c:48:3a:a7:62:57: 6c:28:00:ea:31:63:41:b4:c2:8b:50:af:e5:83:7b: 2f:eb:d5:66:c5:06:69:74:38:e9:a3:81:c9:c6:0e: 04:85:6e:1c:54:1b:73:cc:14:d3:32:a2:f9:4d:f5: 11:e4:ba:6b:9a:92:0e:24:de:56:64:19:4b:78:b1: 69:4f:df:d7:21:67:e5:ee:79:85:94:34:c6:32:43: 4a:6a:36:4e:28:ec:3c:c8:7d:5d:bb:aa:d3:a4:d7: cc:63:c0:7f:92:0b:33:93:1c:65:b7:a1:bf:30:e9: 99:ba:e7:45:a4:31:1d:ca:56:b8:03:2f:eb:1c:ef: 62:78:1a:39:25:d1:1e:ac:f0:e3:e8:c6:a0:93:6c: f5:e7:78:d6:bd:ce:bc:30:1f:30:14:65:89:1f:26: fe:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:03:80:A0:8C:9E:9C:EF:A8:00:BC:74:2B:56:A9:63:A5:C2:32:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/282185d5-d7f3-3b8a-a88f-10ece07b2a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:58:7e:98:09:e6:de:c1:f9:25:df:d4:aa:b4:e5:51:30:60: da:e2:49:8b:4b:c8:44:48:83:5a:90:f8:7b:6a:f4:0b:f1:85: 4f:e3:a1:47:08:65:37:13:63:5c:09:6f:43:d7:60:ac:6d:04: 75:d7:e4:8b:9b:c7:30:1d:8f:8c:ad:55:ec:66:18:61:25:e5: 6d:5e:03:c3:d8:ab:92:7b:52:d0:8f:de:56:f1:d3:5e:22:1f: fe:ba:72:9d:99:c5:a0:63:79:14:ee:96:bb:58:2e:7d:21:b3: d9:9e:59:9a:73:46:cc:0f:78:1e:1c:d8:c6:63:c1:3d:3d:82: 77:71:a2:2f:a8:9d:5c:45:1e:71:c6:f0:d1:25:d9:61:b3:27: 9e:ca:d0:a1:05:4e:c7:ee:cf:e8:b9:b8:7f:1f:43:66:dd:43: da:ed:5e:ec:01:38:7d:51:fd:d2:98:f5:02:84:fb:8c:18:1e: 34:83:6e:a9:7a:4d:0e:42:0d:eb:01:d0:7d:0b:9c:d7:85:b5: 7b:11:70:c3:b9:0a:a8:4e:18:90:14:da:7b:8e:37:f6:23:70: a0:9c:ea:4c:38:89:0c:67:a2:ed:0e:37:7f:75:ed:ed:49:f4: 91:f1:8e:79:6a:45:04:16:ab:7d:a3:4d:33:42:e1:75:d3:f0: 7c:83:6e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYhrqL7qc8IX6J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk NGMyMjNhYTItNDBhNi00N2Y4LThlNTItZTE2Yjk5OGEzNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4McxVFOK4mc2uak/7E5Xb7hySnHHFuC7tMWx HonqlPgaX3wgwryM3QUHhOLmCDq1OtIY5aJW1TxKEMJvX9fobK08tMlFYlfV3ZWf 5OM6WNlWNlxP1E72sl5zHwY5sHWwbUNcSDqnYldsKADqMWNBtMKLUK/lg3sv69Vm xQZpdDjpo4HJxg4EhW4cVBtzzBTTMqL5TfUR5LprmpIOJN5WZBlLeLFpT9/XIWfl 7nmFlDTGMkNKajZOKOw8yH1du6rTpNfMY8B/kgszkxxlt6G/MOmZuudFpDEdyla4 Ay/rHO9ieBo5JdEerPDj6Magk2z153jWvc68MB8wFGWJHyb+uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYDgKCMnpzvqAC8dCtWqWOlwjL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjgyMTg1ZDUtZDdmMy0z YjhhLWE4OGYtMTBlY2UwN2IyYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1YfpgJ5t7B+SXf1Kq05VEwYNriSYtLyERIg1qQ+Htq9AvxhU/joUcI ZTcTY1wJb0PXYKxtBHXX5IubxzAdj4ytVexmGGEl5W1eA8PYq5J7UtCP3lbx014i H/66cp2ZxaBjeRTulrtYLn0hs9meWZpzRswPeB4c2MZjwT09gndxoi+onVxFHnHG 8NEl2WGzJ57K0KEFTsfuz+i5uH8fQ2bdQ9rtXuwBOH1R/dKY9QKE+4wYHjSDbql6 TQ5CDesB0H0LnNeFtXsRcMO5CqhOGJAU2nuON/YjcKCc6kw4iQxnou0ON3917e1J 9JHxjnlqRQQWq32jTTNC4XXT8HyDbgc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:22:02 2026 by rpki-client