$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa File: 3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa (raw, json) Hash identifier: nhZUM1DnDD2CDaOPg81J+M6oJz+pWRitF9sjMaM4gqQ= Subject key identifier: BD:CB:C9:44:7C:5F:10:FF:A0:B4:46:59:7C:1C:F2:C3:16:0C:6F:3C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F1897AFD0229F15E5244B8400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 15169 IP address blocks: 192.178.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:af:d0:22:9f:15:e5:24:4b:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=98cdf601-a844-4226-a546-16b9a34619b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2e:09:32:11:9a:58:82:02:51:0e:81:6b:42: fc:da:c2:51:d2:1e:6b:8a:be:8b:ba:ba:53:3a:f9: 9f:d9:32:19:4f:da:b2:d3:33:29:96:bd:ff:b7:2e: 78:8c:31:f9:23:30:c5:83:9e:8a:6c:0d:2f:1f:21: c4:5b:5e:9e:6a:59:ac:6c:bb:02:e4:d9:00:a9:56: 88:53:e7:82:77:1b:7a:19:5c:31:94:a1:ea:7b:2d: 9c:0e:2d:c0:02:7c:8e:4e:77:82:70:31:a9:67:62: 32:82:06:6f:1c:5a:dd:7f:bf:e7:4c:c8:7f:18:76: ae:7f:a4:18:f5:8c:24:bc:26:88:fa:50:53:0f:76: 51:ef:25:90:4d:5a:eb:8a:e1:7d:11:dd:62:1a:a8: bf:46:6b:17:87:4a:0e:a8:17:27:9e:bb:2f:cd:81: 17:5e:b4:f3:22:d0:15:58:2d:a9:f0:04:ba:e6:0e: 91:5e:9d:96:a8:70:aa:7f:ec:dd:7c:00:f7:54:20: dd:de:a4:8e:73:57:42:23:52:61:a3:09:9b:ec:55: 32:8e:78:05:eb:12:f5:2f:80:49:78:f1:14:5a:51: a0:46:92:c1:f3:f2:34:3c:63:13:f6:55:8e:d9:a0: d4:9e:a8:f3:37:40:4e:94:34:1b:e9:67:56:11:44: 40:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CB:C9:44:7C:5F:10:FF:A0:B4:46:59:7C:1C:F2:C3:16:0C:6F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:85:d3:dc:09:09:13:68:7c:16:49:7f:49:71:30:31:93:63: 3a:c1:9c:41:bb:21:c9:09:b0:bf:65:7f:5d:f1:38:44:db:9b: 61:b3:83:a8:70:66:35:99:8c:9d:b1:ed:47:e8:c6:c6:21:9c: 53:29:39:38:bd:c2:bd:22:bd:52:9c:29:91:fb:a1:cc:86:27: 62:a4:ab:39:14:3b:7a:3e:a7:a4:b8:33:af:1c:02:03:d2:ec: 5a:33:a8:21:0a:9a:ff:7b:93:dc:68:4e:b3:30:43:aa:79:11: 77:52:90:81:81:af:a0:00:90:6e:d2:aa:1d:92:22:13:17:65: 18:5d:c1:1e:08:d9:4e:75:21:e4:49:08:86:ec:4b:60:78:8c: d2:1f:78:8b:80:9c:ca:0b:b9:9e:98:a3:c3:44:e9:f6:28:87: b1:f6:98:52:79:0e:43:d5:ab:6e:5b:2c:fa:b4:2b:8d:3b:4b: 91:ac:f8:34:df:98:ea:45:09:a9:46:11:ea:2a:3a:65:d3:eb: e6:fe:bd:be:07:91:e2:a2:91:4a:59:54:40:9d:b0:f3:f1:71: 24:c5:ae:37:67:6c:75:c2:e2:9d:0d:0b:65:8a:c0:2c:87:56: 05:8d:78:c1:78:87:9d:fc:a7:5e:92:bb:88:7c:58:a6:f4:9b: b1:1c:ec:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6/QIp8V5SRLhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk OThjZGY2MDEtYTg0NC00MjI2LWE1NDYtMTZiOWEzNDYxOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki4JMhGaWIICUQ6Ba0L82sJR0h5rir6LurpT Ovmf2TIZT9qy0zMplr3/ty54jDH5IzDFg56KbA0vHyHEW16ealmsbLsC5NkAqVaI U+eCdxt6GVwxlKHqey2cDi3AAnyOTneCcDGpZ2IyggZvHFrdf7/nTMh/GHauf6QY 9YwkvCaI+lBTD3ZR7yWQTVrriuF9Ed1iGqi/RmsXh0oOqBcnnrsvzYEXXrTzItAV WC2p8AS65g6RXp2WqHCqf+zdfAD3VCDd3qSOc1dCI1Jhowmb7FUyjngF6xL1L4BJ ePEUWlGgRpLB8/I0PGMT9lWO2aDUnqjzN0BOlDQb6WdWEURAiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3LyUR8XxD/oLRGWXwc8sMWDG88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2E1NzliNTgtNGUzYS0z ZDZlLTljMmEtODRmMDQ3YzU0N2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOF09wJCRNofBZJf0lxMDGTYzrBnEG7IckJsL9lf13xOETbm2Gzg6hw ZjWZjJ2x7UfoxsYhnFMpOTi9wr0ivVKcKZH7ocyGJ2KkqzkUO3o+p6S4M68cAgPS 7FozqCEKmv97k9xoTrMwQ6p5EXdSkIGBr6AAkG7Sqh2SIhMXZRhdwR4I2U51IeRJ CIbsS2B4jNIfeIuAnMoLuZ6Yo8NE6fYoh7H2mFJ5DkPVq25bLPq0K407S5Gs+DTf mOpFCalGEeoqOmXT6+b+vb4HkeKikUpZVECdsPPxcSTFrjdnbHXC4p0NC2WKwCyH VgWNeMF4h538p16Su4h8WKb0m7Ec7MA= -----END CERTIFICATE-----Generated at Mon Sep 21 11:41:03 2026 by rpki-client