$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa File: 3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa (raw, json) Hash identifier: BZ5ABXDd/gCg/F06AggXyxyr3WGprTVl30w2OcycqIk= Subject key identifier: A7:3C:DE:12:9F:7A:71:C3:86:DD:24:AE:31:AE:04:46:1A:BD:E0:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FBAA12999CF103FB1CFB3BC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 15169 IP address blocks: 192.178.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:29:99:cf:10:3f:b1:cf:b3:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=70fae0e0-415d-4a01-892f-008e63c8b01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:14:11:56:42:11:0b:99:eb:e0:60:70:36: bc:33:42:d8:e6:58:b2:c7:37:17:1e:ce:a0:35:ed: b3:40:1f:54:33:18:09:e5:84:c1:36:5f:ac:f1:40: 36:8f:0a:33:28:fa:7f:ad:78:9c:d9:d4:39:2e:4d: 37:e5:0f:63:86:2b:2a:b4:ce:95:b2:db:c2:b9:ef: fa:da:57:ae:6c:3b:c5:f9:c1:6f:c5:f7:50:c7:04: 86:23:91:1b:ac:1f:4c:9e:8a:40:37:cb:a5:59:3d: eb:5d:44:e2:26:b8:bb:f1:4e:60:5e:e6:6f:08:66: 11:9d:25:3d:85:61:c4:e0:77:40:1b:b9:78:cd:f3: eb:91:81:d5:2a:54:37:a0:22:b5:04:74:02:8f:5d: c2:ab:2e:08:c4:02:b8:85:13:b8:3d:24:d9:c7:29: 3c:ef:d3:80:70:c6:6f:13:c8:f5:dd:3f:7a:4e:be: 20:a2:d7:79:b3:96:d8:7e:23:e9:82:5e:b5:71:fd: 90:e2:7b:53:34:59:7a:12:fc:45:1a:75:f2:57:a3: 86:11:78:65:b7:eb:e6:23:a7:8e:17:55:24:6a:2a: b3:e1:d5:56:cb:4b:fd:ad:79:43:80:d0:96:cd:eb: dc:ff:49:77:aa:1d:15:b2:69:d3:10:aa:94:16:95: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:DE:12:9F:7A:71:C3:86:DD:24:AE:31:AE:04:46:1A:BD:E0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:93:d3:aa:ed:0a:48:0d:1f:4c:6c:92:88:af:c1:87:67:02: 82:a2:94:7d:c9:0f:83:1d:33:63:3a:b0:95:f9:9e:07:d2:82: 69:c2:aa:c3:76:5b:58:da:68:fb:28:15:6b:e7:ea:db:3d:2d: 94:5b:2a:55:17:b8:e7:9f:e2:d9:bd:84:53:9e:8e:99:f0:35: fb:36:a0:05:eb:98:da:3d:0c:71:fa:4c:44:7c:91:37:dc:87: f5:e4:5a:75:7e:0f:e9:6f:57:f7:f4:36:66:c8:68:d4:20:d6: 70:b8:22:f9:d0:6b:a3:d8:e4:f5:6d:4b:45:56:b6:0b:e3:d6: df:0c:f2:ba:8e:73:98:aa:5d:af:cc:1e:29:fd:28:15:c8:ca: be:ab:ac:e3:a0:fe:e1:b9:c2:da:7d:a8:c5:87:64:cf:61:88: 9d:3f:d2:c7:bd:0b:3c:60:ee:4d:3b:46:ca:9a:a4:9f:43:74: f3:83:f1:0d:2c:db:b6:48:5f:8f:d0:9b:c1:7e:b4:35:9b:9d: a1:d2:ae:96:c3:9d:7b:c4:be:55:85:31:89:2b:69:86:f1:2e: b6:bf:6c:1a:be:fb:b3:fd:2e:d5:a4:6f:e7:89:9b:ad:fb:c0: f8:77:df:b7:c7:63:49:d8:30:69:c8:bc:a4:b1:61:b0:ae:6b: 4a:65:97:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oSmZzxA/sc+zvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk NzBmYWUwZTAtNDE1ZC00YTAxLTg5MmYtMDA4ZTYzYzhiMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxkUEVZCEQuZ6+BgcDa8M0LY5liyxzcXHs6g Ne2zQB9UMxgJ5YTBNl+s8UA2jwozKPp/rXic2dQ5Lk035Q9jhisqtM6VstvCue/6 2leubDvF+cFvxfdQxwSGI5EbrB9MnopAN8ulWT3rXUTiJri78U5gXuZvCGYRnSU9 hWHE4HdAG7l4zfPrkYHVKlQ3oCK1BHQCj13Cqy4IxAK4hRO4PSTZxyk879OAcMZv E8j13T96Tr4gotd5s5bYfiPpgl61cf2Q4ntTNFl6EvxFGnXyV6OGEXhlt+vmI6eO F1Ukaiqz4dVWy0v9rXlDgNCWzevc/0l3qh0VsmnTEKqUFpVpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc83hKfenHDht0krjGuBEYaveBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2E1NzliNTgtNGUzYS0z ZDZlLTljMmEtODRmMDQ3YzU0N2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGT06rtCkgNH0xskoivwYdnAoKilH3JD4MdM2M6sJX5ngfSgmnCqsN2 W1jaaPsoFWvn6ts9LZRbKlUXuOef4tm9hFOejpnwNfs2oAXrmNo9DHH6TER8kTfc h/XkWnV+D+lvV/f0NmbIaNQg1nC4IvnQa6PY5PVtS0VWtgvj1t8M8rqOc5iqXa/M Hin9KBXIyr6rrOOg/uG5wtp9qMWHZM9hiJ0/0se9Czxg7k07RsqapJ9DdPOD8Q0s 27ZIX4/Qm8F+tDWbnaHSrpbDnXvEvlWFMYkraYbxLra/bBq++7P9LtWkb+eJm637 wPh337fHY0nYMGnIvKSxYbCua0pllzs= -----END CERTIFICATE-----Generated at Thu Nov 5 18:56:20 2026 by rpki-client