$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa File: 2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa (raw, json) Hash identifier: 6rZOx7NyWI5HGNo93zqYiP7shfRSpijdbEWe3ld1kGo= Subject key identifier: A9:A3:76:79:BF:63:57:1F:C9:81:D1:6B:DD:7C:0B:55:88:11:70:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA17A89C159976C7F27A56720 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 15169 IP address blocks: 192.178.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:89:c1:59:97:6c:7f:27:a5:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=b78f3835-0e56-4bc5-a8b8-6f7d176928cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:59:cd:72:d8:71:7c:35:20:da:6a:0b:12:c7: 3f:34:54:8e:89:f4:e0:29:ac:54:e2:07:16:c6:80: 1a:c6:f8:06:28:63:b7:46:92:82:23:e0:43:36:5a: 43:b3:b5:f5:e1:72:d1:93:1b:c2:7b:7b:3b:62:39: 8a:17:02:ee:14:73:95:4d:d7:07:12:19:b2:85:8d: 24:ee:69:b1:b8:c3:35:90:6d:3b:06:ae:56:44:0a: 4d:36:1d:c1:dd:ba:47:20:f4:bf:38:3c:bf:a2:f1: f6:19:e4:cd:26:62:51:5a:55:8a:f4:99:5a:88:6f: 45:d1:5a:a4:16:e2:8e:ed:6a:8c:3d:fd:ac:1b:05: 8b:d6:8c:48:6a:b8:75:f8:98:0c:3b:ae:35:5e:22: 30:2e:a9:29:4b:7e:b7:8b:0a:29:14:39:d0:0e:80: 6a:72:bf:fe:8b:64:4b:be:21:38:6a:94:38:8b:3e: 3c:0a:b7:9a:90:57:35:2c:0a:d5:5a:b7:12:07:ea: 8d:2e:87:1c:7b:27:7d:e5:c6:ca:32:2b:ae:5a:f3: 5b:7d:ab:ca:72:36:63:60:af:b9:ec:cb:5a:26:9b: 14:e2:0f:44:c4:65:4b:6d:68:7c:75:59:c3:8b:4c: 1d:e1:f1:2a:f3:97:83:3f:e9:82:8e:0a:7c:c0:f1: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A3:76:79:BF:63:57:1F:C9:81:D1:6B:DD:7C:0B:55:88:11:70:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9e:8c:4a:de:8f:55:e6:f6:3b:b4:c1:ec:a1:c0:cd:ea:4b: e5:4c:37:ef:41:eb:8c:b9:89:a2:2e:fd:3f:a3:7d:86:e6:fa: 0f:10:c6:58:bb:ec:57:49:05:d9:f5:db:6a:f8:aa:37:08:9d: 43:34:b5:e9:ae:61:09:00:ac:01:6c:ee:2c:42:0c:d4:8b:d3: 66:ae:54:75:6f:09:8f:9a:9e:0a:f9:a0:28:a4:d3:a1:78:7b: fa:b0:1c:4d:56:a7:c3:5f:8e:b1:13:26:d1:fa:a2:32:1e:e4: e3:d5:a9:e3:cb:21:e6:9b:7e:c0:77:c4:93:9d:7e:9d:a6:3a: 8f:b7:1d:95:8a:58:c6:4a:55:05:92:28:f7:f4:65:b5:4b:d9: bd:46:0c:1a:b6:d1:8e:b6:cc:69:66:db:43:57:b9:03:e4:f4: c5:91:bd:14:dd:b7:a8:51:1b:46:d9:57:20:00:df:6e:bc:39: 30:dc:12:55:87:c2:80:f5:7d:f8:76:3a:f6:ff:94:1d:00:8a: e3:87:e3:1d:b4:ee:41:d6:c8:37:19:b3:7c:85:0b:f6:26:20: 5d:81:e3:2f:60:21:88:67:5c:7f:24:d6:f0:ae:2f:dd:d8:93: 69:5d:f1:b7:85:81:02:75:99:8d:0f:bb:7d:48:43:29:a4:1e: 88:43:a6:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heonBWZdsfyelZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk Yjc4ZjM4MzUtMGU1Ni00YmM1LWE4YjgtNmY3ZDE3NjkyOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1nNcthxfDUg2moLEsc/NFSOifTgKaxU4gcW xoAaxvgGKGO3RpKCI+BDNlpDs7X14XLRkxvCe3s7YjmKFwLuFHOVTdcHEhmyhY0k 7mmxuMM1kG07Bq5WRApNNh3B3bpHIPS/ODy/ovH2GeTNJmJRWlWK9JlaiG9F0Vqk FuKO7WqMPf2sGwWL1oxIarh1+JgMO641XiIwLqkpS363iwopFDnQDoBqcr/+i2RL viE4apQ4iz48CreakFc1LArVWrcSB+qNLocceyd95cbKMiuuWvNbfavKcjZjYK+5 7MtaJpsU4g9ExGVLbWh8dVnDi0wd4fEq85eDP+mCjgp8wPEdKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmjdnm/Y1cfyYHRa918C1WIEXB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmNjMzM4YmItMTdmNy0z ZDYzLWIzN2MtNzRkMGJjYjlhZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuejErej1Xm9ju0weyhwM3qS+VMN+9B64y5iaIu/T+jfYbm+g8Qxli7 7FdJBdn122r4qjcInUM0temuYQkArAFs7ixCDNSL02auVHVvCY+angr5oCik06F4 e/qwHE1Wp8NfjrETJtH6ojIe5OPVqePLIeabfsB3xJOdfp2mOo+3HZWKWMZKVQWS KPf0ZbVL2b1GDBq20Y62zGlm20NXuQPk9MWRvRTdt6hRG0bZVyAA3268OTDcElWH woD1ffh2Ovb/lB0AiuOH4x207kHWyDcZs3yFC/YmIF2B4y9gIYhnXH8k1vCuL93Y k2ld8beFgQJ1mY0Pu31IQymkHohDpno= -----END CERTIFICATE-----Generated at Wed Jul 29 01:41:44 2026 by rpki-client